Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa
File: h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa (raw, json)
Hash identifier: h3p/LWTg/DWcs8xgDXGpmbcqHQbGvNr+C69wyUtdibA=
Subject key identifier: 87:8B:B0:EA:E7:F0:14:E4:22:E2:60:EB:B5:C6:7A:5D:AA:A6:3D:5D
Certificate issuer: /CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Certificate serial: 01974A243A8F211B4A429DB1738BFD48C18A
Authority key identifier: B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa
Signing time: Sat 07 Jun 2025 11:26:17 +0000
ROA not before: Sat 07 Jun 2025 11:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25150
IP address blocks: 193.0.228.0/24 maxlen: 24
195.189.8.0/22 maxlen: 22
195.189.8.0/24 maxlen: 24
195.189.9.0/24 maxlen: 24
195.189.10.0/24 maxlen: 24
195.189.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:24:3a:8f:21:1b:4a:42:9d:b1:73:8b:fd:48:c1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Validity
Not Before: Jun 7 11:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878bb0eae7f014e422e260ebb5c67a5daaa63d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:51:67:cd:09:9d:af:04:1d:b6:76:96:83:
19:fb:72:96:f1:94:db:0f:eb:47:68:3d:5a:d9:e5:
27:58:79:6b:bd:0e:a9:55:e9:0c:05:8c:b4:7d:72:
d9:a9:8c:9d:4f:8c:c7:92:ce:64:40:c6:1c:82:71:
dc:4a:29:ac:96:41:40:b0:72:d9:79:4b:d7:fe:e3:
65:3a:9d:a9:78:3f:55:01:f0:c0:75:a2:9f:9b:b8:
45:46:a9:41:12:11:8e:18:79:7a:79:95:04:56:f8:
e9:c2:8f:d7:37:c4:c1:d1:58:dd:ec:90:a0:0f:38:
bf:19:3b:27:88:da:a0:bc:41:71:c9:51:78:88:fe:
d5:e7:12:57:2e:e0:56:10:90:2d:95:59:b6:ef:61:
3f:3b:b2:56:4e:86:ee:45:49:e6:d2:43:af:88:29:
54:04:79:22:93:3f:d9:f9:f0:d6:a0:6a:10:a8:4f:
93:b9:67:c0:c7:ab:8a:7a:42:37:11:4f:36:51:3d:
bc:70:3f:c3:b3:91:72:d0:cb:75:82:fa:22:a6:dd:
3f:bf:a0:16:5c:d4:59:1a:08:1c:10:eb:90:b9:f9:
5d:9c:d1:4f:69:56:6a:57:76:d0:8c:7b:fb:6d:4a:
4f:26:9e:92:90:cf:8e:69:5f:76:8c:b9:1e:7f:03:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8B:B0:EA:E7:F0:14:E4:22:E2:60:EB:B5:C6:7A:5D:AA:A6:3D:5D
X509v3 Authority Key Identifier:
keyid:B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.228.0/24
195.189.8.0/22
Signature Algorithm: sha256WithRSAEncryption
78:4e:3c:7b:db:90:ac:93:16:2d:39:44:55:42:16:d4:96:60:
91:c3:e7:95:88:47:bd:0f:05:df:cd:a7:a4:28:93:18:ff:1f:
4e:c4:b4:58:98:1e:33:17:1b:dc:ea:21:70:a4:52:d1:db:e8:
4d:b2:bf:a8:25:07:4a:8c:9f:5e:55:b3:2b:4a:6c:8d:d4:fd:
f9:9c:3f:f7:44:8c:ed:31:97:65:40:88:37:dd:21:9f:3f:50:
ea:48:b1:ca:5d:5d:ec:52:b5:66:d0:07:61:bc:f5:b1:a1:b0:
da:db:f9:bb:aa:e0:f9:6b:f0:7a:be:fc:a2:67:20:f2:67:34:
c2:e2:0a:da:8c:10:5a:bd:ef:7e:c6:29:c1:6a:cf:ab:4f:d7:
79:e2:f2:5f:99:47:56:87:7e:17:d4:e8:5a:4d:3f:b3:ac:3c:
d5:1a:25:4e:c5:93:d9:66:f6:5b:ed:7a:4f:95:47:7a:db:4d:
ce:00:5e:92:48:47:05:26:6e:00:38:82:ae:b6:59:b3:6a:fa:
1a:36:9f:8c:08:c0:d0:26:e8:7a:b2:60:cd:9d:82:f4:c8:8c:
7c:db:05:63:65:48:be:17:2e:13:65:1f:b1:f2:d9:5a:e9:6b:
99:6a:8e:66:a8:bb:ef:d4:e8:c1:11:af:06:3a:6f:2d:ed:84:
3a:3b:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:03 2025 by rpki-client