Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hgLHqtdWMwqFMV0AzzKMtU8Ay3s.roa
File: hgLHqtdWMwqFMV0AzzKMtU8Ay3s.roa (raw, json)
Hash identifier: DWv8s6lEDo3UGMI/xvQTZ2qJbh2PF+n3xxppfP0+1ag=
Subject key identifier: 86:02:C7:AA:D7:56:33:0A:85:31:5D:00:CF:32:8C:B5:4F:00:CB:7B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198D7E4FD5DA2FDD7B9BDD97A003C5B0DA7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hgLHqtdWMwqFMV0AzzKMtU8Ay3s.roa
Signing time: Sat 23 Aug 2025 17:06:05 +0000
ROA not before: Sat 23 Aug 2025 17:06:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.163.23.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.210.54.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e4:fd:5d:a2:fd:d7:b9:bd:d9:7a:00:3c:5b:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 23 17:06:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8602c7aad756330a85315d00cf328cb54f00cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:c3:91:93:6f:42:25:0d:94:5d:cc:3e:f3:
19:5b:8d:20:9f:4f:d0:9b:d5:23:cb:41:40:e4:f5:
28:ca:67:82:c8:6d:43:b1:cd:c4:64:46:98:b1:78:
c3:9d:1a:75:f0:75:64:23:2c:e1:77:48:5c:13:fb:
1d:8f:c7:de:b6:1f:36:57:27:54:96:d1:6d:b5:59:
96:b3:0f:ab:c4:b3:63:16:13:fe:df:aa:3d:3a:b4:
5c:8f:82:ed:b4:fd:00:69:f4:8e:63:b5:17:a7:59:
33:22:43:6c:f7:eb:31:51:4a:2e:bd:a0:86:fc:4d:
9e:4c:da:4a:94:a2:a2:f1:2b:90:2f:df:32:da:98:
54:e1:bb:d9:39:2c:53:20:67:99:c9:14:78:26:a9:
76:dd:6e:fa:e4:38:eb:8a:36:a1:0d:5d:95:49:5c:
6b:e9:18:87:7b:30:59:1e:cf:8f:14:9f:8e:6b:ae:
d5:cb:e2:80:41:c5:81:d4:09:d2:b5:81:a9:ec:33:
e9:e6:fb:90:a8:e0:66:e7:55:df:ff:06:79:0b:ff:
80:62:4f:8c:91:31:17:7f:9f:3b:77:fc:70:76:ae:
af:90:e4:11:bc:dc:92:d7:d9:03:ad:c0:a1:05:08:
17:72:bf:21:ff:d9:5b:74:59:e4:48:5b:a3:ab:f0:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:C7:AA:D7:56:33:0A:85:31:5D:00:CF:32:8C:B5:4F:00:CB:7B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hgLHqtdWMwqFMV0AzzKMtU8Ay3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.205.0/24
82.153.217.0/24
82.163.23.0/24
89.213.50.0/24
89.213.164.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
109.176.244.0/24
212.38.79.0/24
213.130.130.0/24
213.130.149.0/24
213.210.54.0/24
213.218.214.0/24
213.218.234.0/24
213.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b7:93:ea:b7:df:51:ff:cb:25:fe:6f:37:0a:9f:1d:aa:00:
d7:22:2e:71:14:f3:43:f8:48:04:1b:7d:ff:13:bb:91:e5:21:
a5:d2:fa:90:0d:2a:94:cf:b1:12:bb:6e:99:8e:fd:23:ec:92:
c0:3b:dd:a8:45:80:8a:84:87:9e:a7:5a:4c:06:fd:c6:3a:aa:
d9:7a:74:8f:d0:6a:1e:34:16:2b:40:4d:e8:99:4e:81:ee:29:
7e:52:40:bc:2c:af:18:ce:93:1e:27:3a:ab:c6:dd:87:f8:24:
cf:55:2f:4a:44:94:46:8b:4e:a6:74:73:f2:8a:96:d3:55:92:
aa:d4:5d:f8:44:fd:3d:98:c4:c3:2e:4a:f9:96:05:ea:88:09:
71:76:60:db:ff:e6:ac:33:42:0c:7e:5f:b7:83:52:d8:bf:25:
63:16:d9:64:17:de:28:48:cb:8e:be:c5:e5:52:f5:b7:7d:94:
b0:e0:44:a9:0c:bb:ba:55:98:76:c4:69:d2:3f:1c:6e:06:4e:
68:92:ad:45:11:a3:92:a1:2e:46:18:14:ac:9f:20:99:a0:33:
29:5d:e7:c1:96:c8:d8:b9:10:9b:ab:bb:8a:6d:de:d5:44:78:
f4:23:2b:22:cd:ca:a9:8f:9e:8b:5c:ee:70:e2:2a:17:86:78:
b3:bf:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:59 2025 by rpki-client