Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6d2U2UN-3BLVWgtX8qaaoKHmXtk.roa
File: 6d2U2UN-3BLVWgtX8qaaoKHmXtk.roa (raw, json)
Hash identifier: EBbZ4pKv8f9OLBIefrghAUMWvU89X3msRJSQh3Bkd8A=
Subject key identifier: E9:DD:94:D9:43:7E:DC:12:D5:5A:0B:57:F2:A6:9A:A0:A1:E6:5E:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198C16CBB83496DE3C93005B4EF3B62E361
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6d2U2UN-3BLVWgtX8qaaoKHmXtk.roa
Signing time: Tue 19 Aug 2025 08:23:05 +0000
ROA not before: Tue 19 Aug 2025 08:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 45.95.3.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:6c:bb:83:49:6d:e3:c9:30:05:b4:ef:3b:62:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 08:23:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9dd94d9437edc12d55a0b57f2a69aa0a1e65ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:a6:41:04:64:89:b4:25:32:28:ce:a1:51:
22:3d:12:a6:c1:e2:44:58:ec:ab:79:1e:67:a6:f5:
76:3e:ad:99:60:11:1d:15:e3:5d:0a:5b:83:5d:4b:
e2:ef:cd:f2:31:a9:fa:1e:5d:53:05:77:7c:53:c8:
4d:84:33:32:c7:8f:47:38:b8:21:e1:df:79:ff:30:
4e:9b:38:84:6b:2f:96:5b:1c:59:20:1c:4b:a4:12:
d9:0c:7e:d9:44:f1:2b:f9:59:32:47:00:52:40:ca:
b4:71:00:e7:57:8c:92:cc:f0:00:10:bd:f7:ee:94:
4e:27:76:68:0c:a7:71:21:d1:64:d0:e3:79:12:eb:
f5:ef:bd:86:6f:17:58:bd:88:e6:cd:f3:71:cc:4c:
33:f8:4b:8b:35:d7:af:d9:9b:53:d9:21:9b:aa:bd:
64:ea:f3:f8:8a:7d:05:18:1c:18:f8:9b:f0:a1:79:
9d:d1:66:bf:02:10:d0:ad:ba:22:ef:ec:2c:5c:57:
5e:59:0f:40:8a:6e:9f:03:6d:88:38:f9:8c:d8:5a:
ed:b0:a4:3b:73:37:03:64:cb:32:43:60:83:96:8b:
18:83:02:0e:96:7c:22:84:1c:de:cd:6d:dd:e7:ae:
0c:64:e7:71:24:96:78:2e:82:8a:a8:88:b6:da:c2:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:94:D9:43:7E:DC:12:D5:5A:0B:57:F2:A6:9A:A0:A1:E6:5E:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6d2U2UN-3BLVWgtX8qaaoKHmXtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
83.143.113.0/24
85.209.135.0/24
87.120.88.0/24
87.121.98.0/24
87.121.218.0/24
185.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
97:50:66:31:95:39:bf:7e:b9:cb:9a:45:6e:87:24:ef:f7:c5:
6a:c0:b7:e7:5b:14:77:b8:5c:2b:a5:57:e1:be:ec:a6:91:c7:
8b:ab:8b:38:1f:9a:56:bf:62:27:b8:79:30:84:99:47:5d:2c:
3d:e2:1c:f2:d5:86:32:3c:4a:e2:55:28:d4:63:a0:6b:cb:76:
46:f9:57:fc:bb:2a:c0:7c:43:db:74:7a:e0:0f:bf:e2:5a:a9:
27:d2:e6:30:c4:41:1a:6a:30:f7:11:57:c2:7b:68:b8:81:5b:
3e:68:07:72:ea:f5:d3:1e:d1:4a:cc:3b:83:86:97:ab:a4:62:
60:bb:c1:63:ae:99:e0:bf:18:43:c7:ba:66:fc:f2:e1:bb:e2:
65:69:64:c4:69:0a:1f:83:da:67:55:e9:40:88:24:ab:a5:92:
0a:97:3b:4a:c2:3f:c2:17:e5:0f:50:24:6b:d7:81:21:24:ab:
0e:4c:07:18:d6:3b:80:b7:64:b0:eb:1a:52:af:3a:09:81:d5:
7f:1c:ab:ef:e1:bd:70:dd:48:06:38:d4:09:f4:1f:57:60:ac:
4f:05:7b:5e:0b:1c:16:52:d5:7b:71:8e:a6:fb:f3:bc:af:91:
98:23:b3:b7:96:07:80:bd:1e:30:77:dd:1f:f6:43:96:4e:0e:
5e:9f:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:01:26 2025 by rpki-client