Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa
File: Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa (raw, json)
Hash identifier: DFoP5Rp4yqWzaWfGAIFOGX06a0KJXff63tIBuI2st8A=
Subject key identifier: 1E:CB:B9:B8:43:EB:8B:C9:90:81:A6:78:43:3C:F5:73:C6:73:A9:7B
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 019782B08C670FE184C351A9A2DCA85AF2CB
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa
Signing time: Wed 18 Jun 2025 10:58:17 +0000
ROA not before: Wed 18 Jun 2025 10:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216210
IP address blocks: 91.216.112.0/24 maxlen: 24
185.171.88.0/24 maxlen: 24
185.171.91.0/24 maxlen: 24
2a14:f580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:b0:8c:67:0f:e1:84:c3:51:a9:a2:dc:a8:5a:f2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Jun 18 10:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ecbb9b843eb8bc99081a678433cf573c673a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:79:19:01:d3:9a:ae:a9:57:27:6a:00:e7:
a5:8b:f8:b8:4f:48:39:5e:02:0b:cc:11:87:4b:42:
78:d5:4d:77:e4:7f:a3:cb:f5:66:fc:24:17:11:5c:
99:b5:f9:e8:a1:2d:77:2f:fd:98:ae:ab:09:8b:f8:
dc:df:8c:d6:81:f8:cd:f4:80:24:32:67:88:bb:53:
4d:53:1a:d7:b8:5d:1f:ec:ad:2f:05:f5:1e:24:c1:
0d:2c:1c:e2:c3:4a:9b:d3:8e:83:d4:77:5e:45:b8:
17:8b:8d:d0:52:50:e8:a0:70:e4:bc:e9:dd:7e:3b:
db:28:55:dc:50:29:a9:2a:c8:50:4b:95:6b:7a:09:
8b:9f:9f:d8:03:c3:28:7b:ac:87:8e:1c:28:26:72:
9d:02:f1:4a:03:1b:62:88:b9:9d:c0:29:7c:2a:ef:
16:bc:3f:d2:c9:9c:86:c5:66:9c:a3:66:b8:46:46:
20:e7:85:37:6b:ad:dd:8f:f7:7d:c8:67:60:d9:d5:
57:ec:92:d0:83:b8:cc:b7:0a:87:60:0c:94:62:6c:
6f:70:e8:5a:9c:09:44:fc:8d:10:50:e7:c1:1f:44:
f9:96:12:55:e2:9c:1d:94:e7:14:61:1d:5a:10:b6:
9d:ee:56:f7:45:41:9c:23:32:75:f7:c9:df:56:19:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:B9:B8:43:EB:8B:C9:90:81:A6:78:43:3C:F5:73:C6:73:A9:7B
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.112.0/24
185.171.88.0/24
185.171.91.0/24
IPv6:
2a14:f580::/29
Signature Algorithm: sha256WithRSAEncryption
c4:a6:de:bc:2d:a3:c1:22:9c:0d:a9:d1:ed:0f:6c:ed:0d:a6:
d3:8b:6c:c4:76:63:4a:6c:a3:d4:1d:f3:2c:e8:c0:65:2a:d8:
2d:91:d4:db:37:85:86:e4:bf:89:0f:57:44:ef:83:87:e4:ba:
44:0c:ff:3b:3d:42:4a:89:5e:a3:dd:3f:e3:e4:3d:96:fa:2d:
10:5e:fa:8b:51:8c:92:38:37:db:bf:69:df:b9:b5:5c:c5:9d:
8c:6e:dd:00:54:df:02:b5:ff:14:e8:c8:f9:57:25:15:71:ee:
a9:91:af:ff:72:a0:b8:c4:6b:d6:02:7a:27:5d:e1:31:a9:f6:
1b:2f:d9:cd:3c:95:0d:6a:07:45:a1:80:bb:79:03:73:d8:e2:
d2:02:25:f4:28:68:71:41:c9:1e:80:79:39:91:24:08:af:b1:
2d:c3:46:18:e8:be:ba:3e:67:89:d0:b8:d3:73:5d:7f:70:1e:
4c:84:b7:c8:37:c4:f8:07:b1:fe:f8:3a:ee:ac:9a:ef:32:9e:
62:5a:45:5d:24:50:b5:cc:ce:86:b9:3c:91:5e:7b:90:22:e2:
dc:6d:f4:2d:bf:7c:f5:22:b7:67:68:14:22:bd:e8:07:72:4c:
66:38:53:f5:ca:1c:a9:0e:75:02:fe:99:d4:ab:77:72:14:7e:
8e:33:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:58:36 2025 by rpki-client