Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jO0YHugIq7HCIPMGHVHj4kRva8Q.roa
File: jO0YHugIq7HCIPMGHVHj4kRva8Q.roa (raw, json)
Hash identifier: QRL5VnCHnmSVIj8k1MbQ4hocg0exEbhVxrcrQIT02ac=
Subject key identifier: 8C:ED:18:1E:E8:08:AB:B1:C2:20:F3:06:1D:51:E3:E2:44:6F:6B:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0197C3141487E339F2E92B6A3C75C07356BB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jO0YHugIq7HCIPMGHVHj4kRva8Q.roa
Signing time: Mon 30 Jun 2025 23:02:42 +0000
ROA not before: Mon 30 Jun 2025 23:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:14:14:87:e3:39:f2:e9:2b:6a:3c:75:c0:73:56:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 30 23:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ced181ee808abb1c220f3061d51e3e2446f6bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:dc:b6:cb:c5:8d:bf:64:82:5f:4b:12:94:
be:18:90:15:74:14:b1:76:ff:59:e2:0f:3c:01:30:
e3:b1:cc:39:bc:f6:77:a3:e6:a4:aa:35:0b:cf:26:
36:65:a6:df:bd:ae:4f:9e:73:26:75:4f:59:99:7a:
5c:dc:a7:23:f4:08:28:6b:c6:cb:67:ff:78:df:2b:
f1:05:ee:29:83:d5:74:79:3c:c5:35:47:58:a0:8f:
7e:26:b6:82:11:6f:c4:57:ea:fe:38:26:42:96:ec:
d1:35:80:d8:32:36:28:23:13:ec:38:d8:dc:db:37:
39:18:24:cc:12:fe:a3:bf:a6:f2:36:d6:5e:a9:a8:
8e:11:69:33:02:86:5f:85:2b:61:5d:f5:ba:ce:2d:
f4:da:5e:34:5c:36:e8:0c:dd:23:a0:9f:34:d4:00:
28:53:79:e3:c0:69:59:85:90:79:b4:c7:02:5b:df:
63:c1:c5:a4:77:97:0c:16:4a:e9:6d:a6:48:e2:db:
7e:38:f2:6a:84:5c:d0:2b:e9:b8:5e:c3:c9:8c:2a:
c4:35:b8:f5:b1:fe:15:53:60:e9:43:a7:fe:3e:db:
5f:4d:59:d2:df:87:29:81:59:79:41:c1:d5:4f:00:
b0:29:aa:18:b6:fe:87:59:f2:35:60:d5:4d:bf:2c:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:18:1E:E8:08:AB:B1:C2:20:F3:06:1D:51:E3:E2:44:6F:6B:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jO0YHugIq7HCIPMGHVHj4kRva8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.76.0/22
87.251.16.0/22
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e5:92:4a:28:4d:8e:40:e2:2e:da:87:f2:11:57:b7:85:53:
8a:a0:17:b6:83:21:0d:98:6b:e3:f9:3e:5b:99:46:32:58:89:
25:9b:e2:de:e4:fc:e0:84:2b:d2:af:ef:7b:26:0b:7e:e7:da:
18:51:0f:44:36:ca:0c:5a:95:b7:7c:2e:94:c4:f6:c5:13:5e:
c4:26:c9:5a:d7:45:9e:14:d3:af:35:2d:83:e5:bf:d9:64:26:
2c:c7:1b:6a:1c:6d:f0:6f:19:b3:b4:b9:d4:d1:c5:ca:46:84:
74:a6:2c:6b:95:fa:ff:60:c5:f5:7c:0a:88:fd:fd:7f:5c:28:
cf:56:18:5e:0c:2f:fe:a5:94:02:49:c0:54:28:24:e8:09:52:
29:e5:51:ef:c5:bd:06:bf:c5:ce:7c:c9:46:0e:05:29:66:74:
f3:4f:10:f2:38:4e:d3:66:83:39:8c:72:65:a5:c5:64:d3:be:
5e:b3:8c:41:17:d1:10:2c:51:ae:6c:c6:b0:4d:66:3f:b5:ff:
25:20:80:a5:bc:0b:38:38:39:92:d2:e7:6d:c5:fb:ba:39:eb:
6d:9c:f7:e9:4d:7d:2c:2f:3b:d6:c6:74:7f:a7:80:a2:4d:44:
d2:d1:9e:7f:b6:ac:ec:77:a6:f7:70:84:ac:14:ce:77:29:92:
ca:7b:73:01
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZfDFBSH4zny6StqPHXAc1a7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNjMwMjMwMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2VkMTgxZWU4MDhhYmIxYzIyMGYzMDYxZDUxZTNlMjQ0NmY2YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobLctsvFjb9kgl9LEpS+GJAVdBSx
dv9Z4g88ATDjscw5vPZ3o+akqjULzyY2Zabfva5PnnMmdU9ZmXpc3Kcj9Agoa8bL
Z/943yvxBe4pg9V0eTzFNUdYoI9+JraCEW/EV+r+OCZCluzRNYDYMjYoIxPsONjc
2zc5GCTMEv6jv6byNtZeqaiOEWkzAoZfhSthXfW6zi302l40XDboDN0joJ801AAo
U3njwGlZhZB5tMcCW99jwcWkd5cMFkrpbaZI4tt+OPJqhFzQK+m4XsPJjCrENbj1
sf4VU2DpQ6f+PttfTVnS34cpgVl5QcHVTwCwKaoYtv6HWfI1YNVNvyxlHQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIztGB7oCKuxwiDzBh1R4+JEb2vEMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvak8wWUh1Z0lxN0hDSVBNR0hWSGo0a1J2YThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQLxMAwQC
V/sQAwQAwRfYAwQAwRfdMA0GCSqGSIb3DQEBCwUAA4IBAQA35ZJKKE2OQOIu2ofy
EVe3hVOKoBe2gyENmGvj+T5bmUYyWIklm+Le5PzghCvSr+97Jgt+59oYUQ9ENsoM
WpW3fC6UxPbFE17EJsla10WeFNOvNS2D5b/ZZCYsxxtqHG3wbxmztLnU0cXKRoR0
pixrlfr/YMX1fAqI/f1/XCjPVhheDC/+pZQCScBUKCToCVIp5VHvxb0Gv8XOfMlG
DgUpZnTzTxDyOE7TZoM5jHJlpcVk075es4xBF9EQLFGubMawTWY/tf8lIIClvAs4
ODmS0udtxfu6OettnPfpTX0sLzvWxnR/p4CiTUTS0Z5/tqzsd6b3cISsFM53KZLK
e3MB
-----END CERTIFICATE-----
Generated at Wed Jul 2 10:52:40 2025 by rpki-client