Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hmZk7_EO66kyhUheda2ARSCfECg.roa
File: hmZk7_EO66kyhUheda2ARSCfECg.roa (raw, json)
Hash identifier: JT+9JKu+lvI44igozQ+TWssdSrDfAnnQ0NYyRDpALZo=
Subject key identifier: 86:66:64:EF:F1:0E:EB:A9:32:85:48:5E:75:AD:80:45:20:9F:10:28
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019934BE127814C25A7F5290282AA49836D9
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hmZk7_EO66kyhUheda2ARSCfECg.roa
Signing time: Wed 10 Sep 2025 17:48:15 +0000
ROA not before: Wed 10 Sep 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.142.212.0/24 maxlen: 24
45.142.213.0/24 maxlen: 24
45.142.214.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
188.119.112.0/24 maxlen: 24
188.119.113.0/24 maxlen: 24
213.226.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:be:12:78:14:c2:5a:7f:52:90:28:2a:a4:98:36:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 10 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=866664eff10eeba93285485e75ad8045209f1028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:3d:c7:14:b5:dd:61:fc:a7:c7:ee:b3:fd:
ac:47:97:de:f5:dd:03:1b:d4:f2:c9:20:f5:5d:02:
c2:aa:f3:f4:5c:e9:4e:73:ee:09:1e:c2:f6:97:cc:
11:ee:40:e1:95:12:3c:4d:0a:d0:18:c6:b7:2d:b7:
57:04:46:bf:74:70:26:81:13:47:7a:a1:3c:61:c4:
3b:cb:56:4d:93:41:3b:1e:35:93:75:37:de:47:00:
81:1c:eb:b7:d8:2d:88:87:a9:bc:c4:10:97:80:36:
ca:dc:06:f9:5a:2f:b9:91:2c:8d:58:f9:05:8e:c9:
08:0e:87:24:71:c7:9b:1e:5d:c2:03:f9:19:f7:28:
81:d2:3f:1f:9c:42:b7:8a:49:a1:23:d1:73:15:84:
9c:4a:39:30:8f:b8:b9:30:0b:02:ec:d5:94:15:cb:
91:26:31:d2:c3:d7:69:d3:41:df:fb:bf:15:5b:e7:
e4:5b:5b:2a:56:a0:84:86:e3:c1:f7:3b:fa:a4:55:
e9:03:86:21:be:2f:05:5a:ec:1d:e7:e7:17:73:0d:
34:c3:9c:c4:3d:40:3c:35:bd:38:86:ca:a0:83:f9:
3d:94:7e:8e:96:f5:51:2e:ac:bb:7c:20:c7:6d:b9:
03:34:dc:cf:4e:9a:8c:99:5e:03:46:79:4a:57:f5:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:64:EF:F1:0E:EB:A9:32:85:48:5E:75:AD:80:45:20:9F:10:28
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hmZk7_EO66kyhUheda2ARSCfECg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.212.0/22
188.119.112.0/23
213.226.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c4:9c:1a:0e:c5:82:d4:b1:84:38:ae:8e:3b:04:59:6e:08:
61:9b:fc:46:55:cb:39:c3:f4:8f:41:64:51:bd:af:39:cd:9d:
a8:e3:fc:16:81:74:28:21:65:3c:a8:3b:03:61:e5:c3:14:c8:
8f:52:f4:44:be:12:4c:41:4d:2c:c2:67:55:38:26:cc:99:9c:
3f:10:ea:b8:8d:15:be:d5:bc:1e:42:01:17:37:3e:45:43:ea:
17:38:cf:1f:09:20:cd:04:75:74:2e:48:e8:dc:75:41:90:be:
0f:af:bb:2f:35:64:7e:aa:29:71:d2:d1:f9:6c:15:c4:f8:54:
71:4b:3f:5a:ac:97:d0:1a:be:f6:12:d7:e7:d3:f4:d5:c0:ec:
8c:c1:c1:e4:0a:73:0e:ac:2d:bb:c0:7c:e6:b1:62:c0:69:32:
a0:b4:8d:c8:7a:f2:b1:77:a4:18:2d:e9:ab:3e:ff:11:7e:2f:
db:db:4c:4a:96:9d:ad:3c:63:e3:17:d7:5a:94:c5:cb:7c:ad:
2f:0b:a2:de:49:36:20:67:ef:79:a8:b8:1e:90:67:c4:73:28:
49:42:2f:1d:4a:00:a1:c0:2d:72:87:2d:a0:44:32:08:6a:8e:
fc:0f:ad:23:6e:fc:21:8a:9f:81:32:d9:ba:56:1a:89:96:33:
3d:81:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:09 2025 by rpki-client