Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa
File: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (raw, json)
Hash identifier: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=
Subject key identifier: 1E:C7:C0:CD:B6:0D:9A:31:E0:29:3C:93:28:4D:5E:E8:34:DD:60:16
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 0198CBB30482A6FFED94D03132E69C21BC6A
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa
Signing time: Thu 21 Aug 2025 08:16:03 +0000
ROA not before: Thu 21 Aug 2025 08:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 78.153.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:b3:04:82:a6:ff:ed:94:d0:31:32:e6:9c:21:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Aug 21 08:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ec7c0cdb60d9a31e0293c93284d5ee834dd6016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:bb:fe:10:6b:1a:81:75:19:8f:b6:be:e1:
4c:60:de:24:ed:f8:ea:6a:28:e0:e9:f0:77:e4:8f:
12:06:ae:9b:b8:bf:8b:91:45:ab:73:fb:27:d9:a9:
2d:ad:d4:b6:99:c6:cf:9a:0d:e5:45:bc:e3:d4:a9:
da:e4:1f:fb:75:ec:db:0b:f6:e7:f2:eb:19:f2:08:
48:f9:98:2a:ae:c7:c2:4c:b2:50:2b:c4:9e:90:07:
36:9a:a3:6d:dc:cb:1c:df:13:d3:0a:2e:06:2e:5c:
22:72:ff:07:86:83:c8:a6:3c:81:e1:fd:6a:f1:d6:
06:32:d7:d9:dc:24:d6:0e:9a:70:f9:0d:ce:21:93:
c6:76:e9:55:af:65:4f:12:a5:27:a5:be:55:3e:bb:
c7:9a:df:1c:cc:9f:a9:93:8e:bb:45:0e:32:60:e0:
97:a3:76:9d:84:5b:58:4c:be:fb:b4:1c:32:03:61:
cc:92:80:f0:19:42:75:2f:ef:c7:fa:1c:63:7f:f4:
ba:11:8a:41:00:66:4e:c5:19:3f:84:19:d7:2a:9e:
5d:53:fa:c9:1c:20:c0:86:b1:f0:a5:83:3b:4a:30:
85:d7:fa:a7:eb:3a:a2:d9:08:0e:2d:b3:ae:c5:b7:
6a:51:46:f0:62:8f:cc:0c:a6:77:30:b2:b0:29:9d:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:C0:CD:B6:0D:9A:31:E0:29:3C:93:28:4D:5E:E8:34:DD:60:16
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:c4:16:f7:f5:b7:16:c9:0b:24:36:03:84:7c:2a:3c:00:e7:
57:e6:47:88:d0:c9:fc:14:0e:79:58:85:4a:90:09:f5:ed:7d:
7f:7a:bf:22:18:ea:27:78:1e:aa:15:7d:60:a8:d5:5c:f0:5a:
3f:16:20:e2:fd:e6:fb:65:88:e6:b2:e1:19:e9:57:b8:71:6c:
cc:46:23:3b:d8:0e:75:5c:af:8e:be:88:9c:1d:d4:3c:0e:c8:
f6:7c:a0:00:f3:61:7c:64:8d:02:ab:54:05:bc:82:52:48:61:
74:ab:fe:61:5e:5e:7d:3b:ba:f7:e8:4e:a9:8c:88:86:3d:89:
00:73:ab:10:05:f1:61:ae:2c:c5:75:5e:ad:1e:96:01:30:7d:
45:00:30:7d:e1:72:d8:95:c9:eb:ac:38:d2:69:c1:09:41:ec:
06:4d:6e:87:32:ba:49:f9:6f:7f:c2:2a:58:66:69:fd:1b:0a:
a2:f1:d9:b2:a7:4b:86:56:df:cd:53:f5:d6:77:8c:89:4c:56:
3f:3a:36:c9:e7:db:04:91:e8:46:b3:89:67:ee:b2:31:d9:2e:
36:3a:24:e7:a9:c5:6e:18:e8:59:ba:59:b5:1b:f1:4d:d9:cc:
11:84:05:2b:0f:80:0e:38:5f:9f:b1:b5:be:f0:a7:f6:be:d9:
3c:a1:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:00:05 2025 by rpki-client