Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/rhHZBrR5DDkzkDSwq2N2DFoItdo.roa
File: rhHZBrR5DDkzkDSwq2N2DFoItdo.roa (raw, json)
Hash identifier: gfniJmHb/llxXTuf6zA06t/WamUafcFVdlCv/KyOq4E=
Subject key identifier: AE:11:D9:06:B4:79:0C:39:33:90:34:B0:AB:63:76:0C:5A:08:B5:DA
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 0197AE8FB2D768E2C1A616211EE30D1BA5DD
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/rhHZBrR5DDkzkDSwq2N2DFoItdo.roa
Signing time: Thu 26 Jun 2025 23:25:42 +0000
ROA not before: Thu 26 Jun 2025 23:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5619
IP address blocks: 139.105.0.0/16 maxlen: 16
139.106.0.0/15 maxlen: 15
139.108.0.0/14 maxlen: 14
139.112.0.0/13 maxlen: 13
139.120.0.0/16 maxlen: 16
146.192.0.0/17 maxlen: 17
153.110.0.0/16 maxlen: 16
192.68.76.0/22 maxlen: 22
192.68.80.0/20 maxlen: 20
192.146.163.0/24 maxlen: 24
192.146.164.0/24 maxlen: 24
192.146.165.0/24 maxlen: 24
192.146.167.0/24 maxlen: 24
192.146.169.0/24 maxlen: 24
192.146.170.0/24 maxlen: 24
212.18.128.0/19 maxlen: 19
217.17.0.0/20 maxlen: 20
2a02:9c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ae:8f:b2:d7:68:e2:c1:a6:16:21:1e:e3:0d:1b:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Jun 26 23:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae11d906b4790c39339034b0ab63760c5a08b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:6b:75:a7:57:0b:45:4f:15:59:e6:1e:77:
96:a2:be:26:68:c2:27:ae:a5:55:9e:0b:b6:38:1b:
28:ec:2d:34:10:08:78:43:bd:0c:4d:bf:19:9b:f1:
c4:9c:6e:72:ad:78:e1:5d:9b:b0:1a:c4:8b:ab:a0:
b3:8d:d5:8b:4b:0e:61:17:3e:f8:ae:3d:30:66:04:
97:81:1c:20:e7:25:52:3d:d4:15:b4:0e:ab:6e:3a:
57:97:26:8b:5b:41:0d:f3:de:6d:b3:ea:1e:04:6c:
c9:76:9c:0c:5a:be:b5:45:c9:95:98:ac:6f:90:6d:
80:82:c7:b8:c0:09:06:62:58:68:f9:6b:ea:b9:56:
f0:74:96:84:ac:dd:a0:92:c8:7b:43:b1:51:99:8d:
11:98:4c:79:1a:1b:02:87:6d:7a:2e:cd:a9:b7:32:
b8:b7:65:ff:fe:d0:d7:25:c3:34:2b:2f:a1:af:79:
09:c7:34:ef:52:b2:0c:90:bc:f0:d1:26:cb:8d:b0:
de:c8:2a:ae:67:69:99:ab:0c:d2:5f:be:7f:21:b4:
77:25:a8:8f:c4:3f:be:68:ca:a8:b8:0b:34:48:77:
9b:2d:3e:84:3e:3e:02:28:34:ca:cc:12:db:70:2d:
0d:ca:18:ce:d5:02:d3:97:e5:ae:1a:18:85:93:e2:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:D9:06:B4:79:0C:39:33:90:34:B0:AB:63:76:0C:5A:08:B5:DA
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/rhHZBrR5DDkzkDSwq2N2DFoItdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.105.0.0-139.120.255.255
146.192.0.0/17
153.110.0.0/16
192.68.76.0-192.68.95.255
192.146.163.0-192.146.165.255
192.146.167.0/24
192.146.169.0-192.146.170.255
212.18.128.0/19
217.17.0.0/20
IPv6:
2a02:9c8::/29
Signature Algorithm: sha256WithRSAEncryption
40:84:0b:3c:75:5c:30:7a:93:a0:9d:3f:8c:66:d2:a3:2a:95:
95:02:7f:79:17:ad:14:eb:ab:07:25:f7:d6:25:98:fc:10:10:
77:fd:ca:63:3b:87:04:92:40:c9:54:34:44:6a:e0:29:b4:ba:
76:cb:97:5a:02:65:26:c9:39:e5:76:f1:6c:d3:dc:f8:bc:db:
81:fd:0e:af:03:14:10:cb:a7:71:f2:e5:de:a5:eb:0c:a0:7d:
4c:6b:54:0e:45:30:78:4a:16:74:77:4e:43:fa:0d:25:9b:e6:
04:fd:f9:d0:61:3b:9d:a0:d8:2e:fa:19:0d:12:eb:d6:15:32:
73:06:5c:01:04:dd:13:a4:51:6c:7e:19:ab:3b:fe:48:b4:64:
77:1e:9c:97:b0:02:53:3b:a8:66:45:3a:d9:4d:c4:fb:df:f4:
5c:e4:45:94:75:1c:4e:41:06:e1:4f:d4:bb:c7:2f:3c:6d:de:
43:44:d7:54:9e:be:51:1e:e7:d1:0e:dd:b6:a8:1e:ec:2b:1c:
f3:d2:88:79:65:bf:4d:10:e5:91:c8:8a:41:f4:06:8d:0f:10:
79:1f:aa:84:03:6c:fe:5e:cb:b6:aa:03:d4:dc:4e:a0:21:33:
90:86:34:9c:c4:cb:07:ae:6b:14:a5:f1:2b:97:0c:72:f9:64:
33:2a:75:47
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZeuj7LXaOLBphYhHuMNG6XdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw
MGU1ODEwHhcNMjUwNjI2MjMyNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTExZDkwNmI0NzkwYzM5MzM5MDM0YjBhYjYzNzYwYzVhMDhiNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0hrdadXC0VPFVnmHneWor4maMIn
rqVVngu2OBso7C00EAh4Q70MTb8Zm/HEnG5yrXjhXZuwGsSLq6CzjdWLSw5hFz74
rj0wZgSXgRwg5yVSPdQVtA6rbjpXlyaLW0EN895ts+oeBGzJdpwMWr61RcmVmKxv
kG2Agse4wAkGYlho+WvquVbwdJaErN2gksh7Q7FRmY0RmEx5GhsCh216Ls2ptzK4
t2X//tDXJcM0Ky+hr3kJxzTvUrIMkLzw0SbLjbDeyCquZ2mZqwzSX75/IbR3JaiP
xD++aMqouAs0SHebLT6EPj4CKDTKzBLbcC0NyhjO1QLTl+WuGhiFk+IRiQIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFK4R2Qa0eQw5M5A0sKtjdgxaCLXaMB8GA1UdIwQY
MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt
NDI5NTFjMmNhNzM4LzEvcmhIWkJyUjVERGt6a0RTd3EyTjJERm9JdGRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4
LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBZBAIAATBTMAoDAwCLaQMD
AIt4AwQHksAAAwMAmW4wDAMEAsBETAMEBcBEQDAMAwQAwJKjAwQBwJKkAwQAwJKn
MAwDBADAkqkDBADAkqoDBAXUEoADBATZEQAwDQQCAAIwBwMFAyoCCcgwDQYJKoZI
hvcNAQELBQADggEBAECECzx1XDB6k6CdP4xm0qMqlZUCf3kXrRTrqwcl99YlmPwQ
EHf9ymM7hwSSQMlUNERq4Cm0unbLl1oCZSbJOeV28WzT3Pi824H9Dq8DFBDLp3Hy
5d6l6wygfUxrVA5FMHhKFnR3TkP6DSWb5gT9+dBhO52g2C76GQ0S69YVMnMGXAEE
3ROkUWx+Gas7/ki0ZHcenJewAlM7qGZFOtlNxPvf9FzkRZR1HE5BBuFP1LvHLzxt
3kNE11SevlEe59EO3baoHuwrHPPSiHllv00Q5ZHIikH0Bo0PEHkfqoQDbP5ey7aq
A9TcTqAhM5CGNJzEyweuaxSl8SuXDHL5ZDMqdUc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:11:59 2025 by rpki-client