Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa
File: HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa (raw, json)
Hash identifier: sP0bXOhnayW/C5U8LWSRTmyBREQH+K1GXgkc2hDCxmE=
Subject key identifier: 1D:E0:19:58:F9:95:6E:69:03:63:D9:47:13:C0:0A:C3:D9:71:BE:15
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0198BCBAA103664C7873D4EE354B10F37121
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa
Signing time: Mon 18 Aug 2025 10:30:04 +0000
ROA not before: Mon 18 Aug 2025 10:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197695
IP address blocks: 79.174.78.0/23 maxlen: 24
79.174.80.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
89.104.64.0/21 maxlen: 24
89.111.152.0/22 maxlen: 24
89.111.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:ba:a1:03:66:4c:78:73:d4:ee:35:4b:10:f3:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Aug 18 10:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de01958f9956e690363d94713c00ac3d971be15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:20:0b:29:c0:e3:ba:dd:12:13:a2:4d:57:
9f:17:84:ff:b8:99:64:12:03:c2:93:91:c9:9f:ca:
2d:87:c5:93:00:72:f7:b0:d0:94:3e:27:47:6c:9e:
1d:62:a5:db:d0:28:84:70:f2:86:52:a0:eb:8d:96:
a6:ce:cf:13:46:f3:cc:66:52:18:80:fc:bf:78:6c:
4f:64:d0:4a:8d:e5:c3:71:cd:41:28:9a:91:9a:a3:
64:a1:60:8f:04:76:bc:2e:e1:ba:11:d5:65:d4:72:
4e:70:de:df:54:09:af:45:3e:63:c2:66:11:d5:12:
27:0a:bb:25:ae:33:16:28:42:b0:42:2c:bf:e1:44:
5f:94:5c:23:89:ee:32:5f:1c:bb:5e:85:67:5b:3a:
d0:f6:02:61:79:11:55:df:98:f4:a9:b2:c7:26:d5:
4f:50:6e:f7:29:18:c0:52:bd:4f:6c:69:cc:bf:63:
91:c3:c5:ba:04:f3:5a:27:a7:b5:64:cf:96:c1:a5:
35:ba:96:ac:38:a7:59:e2:4d:9a:52:49:ac:b2:b1:
07:dd:3f:59:4c:03:ba:e8:07:80:5a:ae:c6:8a:59:
4e:d5:2c:53:41:dc:aa:ed:60:f5:69:20:d7:cb:a3:
e1:cf:f8:f2:72:cc:f8:a1:de:c5:ef:3c:33:8b:c2:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:19:58:F9:95:6E:69:03:63:D9:47:13:C0:0A:C3:D9:71:BE:15
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.78.0-79.174.95.255
89.104.64.0/21
89.111.152.0/22
89.111.168.0/21
Signature Algorithm: sha256WithRSAEncryption
37:76:58:43:fd:ad:3e:e0:b3:7d:13:53:3e:d3:86:cc:1b:56:
6f:0b:14:60:d6:f6:7f:ca:fa:96:20:1f:eb:2e:bf:41:04:64:
30:7d:60:e7:b7:2b:db:58:aa:a7:97:57:1d:56:4d:ef:65:01:
1f:25:88:0d:35:db:fa:31:33:6d:49:c3:7f:50:be:0b:82:f3:
ac:42:68:9e:a7:cc:d2:94:28:2f:42:3d:5b:87:b1:98:a2:b9:
35:fc:92:b6:f7:8e:46:79:f3:8e:37:b8:f3:b5:b8:b7:28:9f:
24:b8:12:9a:3b:0a:84:68:e1:cd:ad:32:b9:96:15:80:bc:7d:
c2:60:fe:2d:9c:40:71:7d:a4:73:fa:74:bd:dd:e4:f1:f6:f8:
0e:77:42:d8:38:86:70:f1:f7:76:72:48:97:e2:4b:92:91:3b:
a8:7d:23:3b:40:f5:aa:eb:67:34:85:52:38:8c:82:b2:37:ac:
59:8a:30:eb:5e:25:bd:bf:7e:e8:12:4e:91:b5:ee:af:e4:9e:
34:b8:b8:ae:01:44:c1:20:a6:0f:9b:b3:b6:4e:0b:17:f4:b8:
29:62:7e:6a:71:77:8b:fb:ea:2a:7d:7f:58:06:dc:3f:04:e2:
2b:50:c9:82:90:8c:17:46:2f:ba:fa:ee:72:8a:a8:d1:50:a2:
15:0c:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:21 2025 by rpki-client