Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AH-5otCYbfkDbHrSSWA_M1gq4U4.roa
File: AH-5otCYbfkDbHrSSWA_M1gq4U4.roa (raw, json)
Hash identifier: HgO+yA8bzyv9klU8heudnrTL7tkD6U+dqAOsg4dzfgw=
Subject key identifier: 00:7F:B9:A2:D0:98:6D:F9:03:6C:7A:D2:49:60:3F:33:58:2A:E1:4E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198A7EF29192D5AC297FA08FBBB8FCA2C77
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AH-5otCYbfkDbHrSSWA_M1gq4U4.roa
Signing time: Thu 14 Aug 2025 09:35:25 +0000
ROA not before: Thu 14 Aug 2025 09:35:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 80.240.88.0/21 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.228.0/24 maxlen: 24
89.213.249.0/24 maxlen: 24
217.144.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:ef:29:19:2d:5a:c2:97:fa:08:fb:bb:8f:ca:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 14 09:35:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=007fb9a2d0986df9036c7ad249603f33582ae14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:db:66:93:75:5e:76:97:8b:07:9b:35:ed:
f9:24:ed:a3:ca:5f:32:ef:c2:30:c0:a7:26:6f:5d:
f9:1f:06:8c:f6:ac:67:20:a0:5c:77:a6:35:c6:54:
5c:6b:44:e4:c3:55:57:59:f2:c4:8f:21:22:5a:78:
63:b3:b8:43:d8:53:fd:3c:83:57:50:cd:3a:f2:ca:
f6:cb:66:01:3c:72:93:bd:7c:21:83:90:c6:d6:e2:
bd:1d:88:5e:76:77:3a:35:dc:b9:7d:85:4a:77:b9:
67:45:7d:d3:22:2d:ff:a5:6f:6a:8e:be:9d:0e:6f:
a2:56:4b:c2:63:7f:6e:7b:7d:14:09:25:1a:c9:69:
14:a9:5e:b4:a1:a6:46:9d:46:8e:08:53:63:42:ff:
1d:4b:cc:1f:40:ef:a1:20:ff:99:04:84:53:2b:03:
b7:3c:d0:1d:c8:a4:82:e6:42:ad:6a:f1:e2:76:0b:
f3:33:71:9c:30:b0:34:27:b5:36:2c:a3:b5:b2:77:
cb:44:2d:c9:f9:c7:c0:65:16:6f:c2:f2:bf:6e:db:
13:41:de:d6:27:d8:37:37:58:47:04:62:70:6d:98:
71:d3:06:04:60:04:5d:4f:a4:94:e5:a3:1c:4d:93:
b9:61:d8:8b:bb:3d:34:c3:ee:62:12:2e:9d:73:f1:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:B9:A2:D0:98:6D:F9:03:6C:7A:D2:49:60:3F:33:58:2A:E1:4E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AH-5otCYbfkDbHrSSWA_M1gq4U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
82.152.174.0/23
82.153.208.0/22
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.147.0/24
89.213.198.0-89.213.205.255
89.213.228.0/24
89.213.249.0/24
217.144.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a2:10:4a:00:24:63:84:54:32:78:d6:aa:3a:e1:34:b1:31:
0c:2f:cc:2f:94:1e:65:3c:56:e4:f9:99:f9:db:54:bf:c9:95:
8c:b0:4d:7c:bc:2b:a3:00:42:10:f7:de:a9:6f:10:82:40:c7:
a6:b8:e7:81:17:3c:52:df:65:42:98:d6:cc:a4:7b:a6:1b:c4:
45:90:d4:c4:bd:ee:bb:9a:00:ad:d4:c2:de:51:5f:23:9e:ae:
57:4a:2a:20:5e:41:95:60:f2:bc:e6:8f:50:5a:a7:4b:c4:93:
32:2d:08:92:78:d8:de:32:b1:eb:87:21:6f:cf:77:af:f2:98:
4d:7b:81:7f:46:40:f6:ec:79:3c:00:3e:e9:fd:95:95:63:6f:
72:31:c0:80:0c:0a:02:cc:80:b5:be:57:96:df:6d:25:13:8f:
da:65:52:f4:81:5c:db:58:f6:84:0d:04:4a:f5:8b:f4:82:b4:
e3:ce:51:19:9e:ae:90:12:96:72:f4:4c:67:c5:90:1c:cb:e8:
fd:85:64:79:e3:2e:67:bf:17:cf:3e:d6:29:df:83:fd:27:d9:
59:3f:c9:c5:ee:33:6e:05:7a:a8:14:a6:0a:0f:94:ac:63:c4:
8d:8b:ff:31:e4:31:16:c1:ac:a7:18:58:fc:af:34:7f:d0:76:
67:85:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:34 2025 by rpki-client