Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l4eOcPZDHTez-p0lbQXHLGtg7Wg.roa
File: l4eOcPZDHTez-p0lbQXHLGtg7Wg.roa (raw, json)
Hash identifier: GtfNT9tAXsDs3+z4EeoGk7Z8DOhSevBdD5xtkcasibI=
Subject key identifier: 97:87:8E:70:F6:43:1D:37:B3:FA:9D:25:6D:05:C7:2C:6B:60:ED:68
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0199F0C3AB934C27C7F722B96A997FEBFE93
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l4eOcPZDHTez-p0lbQXHLGtg7Wg.roa
Signing time: Fri 17 Oct 2025 06:02:59 +0000
ROA not before: Fri 17 Oct 2025 06:02:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5606
IP address blocks: 85.120.16.0/24 maxlen: 24
85.120.17.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
193.226.68.0/24 maxlen: 24
193.226.69.0/24 maxlen: 24
193.226.70.0/24 maxlen: 24
193.226.71.0/24 maxlen: 24
194.102.91.0/24 maxlen: 24
217.156.46.0/24 maxlen: 24
217.156.47.0/24 maxlen: 24
217.156.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:c3:ab:93:4c:27:c7:f7:22:b9:6a:99:7f:eb:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 17 06:02:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97878e70f6431d37b3fa9d256d05c72c6b60ed68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:63:55:04:c9:8a:c4:31:82:43:67:a2:90:
f1:e7:45:20:b3:ca:c6:95:5c:24:5c:ab:69:80:67:
ae:06:97:2c:bd:9a:77:5b:5f:64:09:15:1d:6a:ef:
bf:40:d0:93:40:09:c7:8d:8e:34:82:32:87:d3:b6:
46:a0:4f:d2:9f:7d:64:28:a0:21:cc:d3:5d:03:d9:
2b:b9:52:79:8d:28:cd:d2:43:c4:ed:0a:d4:ca:65:
8b:77:6c:7a:11:33:a8:06:03:72:00:1e:b3:04:0b:
7c:36:42:63:d4:d5:f4:a2:ba:d7:80:55:2f:74:60:
10:e6:4f:42:46:ff:51:40:ae:d8:4a:31:1a:29:32:
32:d5:ee:dd:c1:8d:00:e1:7d:6e:dd:6d:cc:53:e4:
30:69:9f:90:55:a7:9f:d3:28:25:db:8e:41:d1:b2:
6a:ae:04:ce:eb:99:b2:fb:89:91:a9:75:22:dc:e9:
ed:67:d7:d0:63:56:81:bd:2e:ff:66:2c:c9:1a:ba:
c1:ad:8c:98:3b:3d:72:0d:ca:73:e0:35:0e:7d:68:
7d:1d:92:67:09:7e:bb:24:12:4f:bf:de:af:3c:d9:
8e:6a:55:0b:bb:25:0a:89:9d:64:c3:1a:62:ee:f2:
bd:e1:43:d5:81:56:96:fc:7f:4f:0e:6b:46:ba:5b:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:8E:70:F6:43:1D:37:B3:FA:9D:25:6D:05:C7:2C:6B:60:ED:68
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l4eOcPZDHTez-p0lbQXHLGtg7Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.16.0/22
85.122.182.0/23
193.226.68.0/22
194.102.91.0/24
217.156.46.0/23
217.156.86.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0c:c1:e6:84:ac:b3:05:53:1f:a9:40:74:9c:3a:a6:89:30:
0e:41:5a:6d:b6:57:2b:e7:04:f8:50:eb:a1:28:83:d3:7b:3e:
8a:72:6d:7e:80:3e:40:de:b3:fc:be:e2:c8:c6:25:1d:42:1e:
be:70:76:e8:15:cd:ea:ef:f0:de:0a:46:d8:e7:25:90:a2:00:
3e:14:52:e3:b6:86:33:d6:7b:66:67:a9:53:4d:62:89:38:9b:
8e:1a:e0:40:6f:a6:1a:ea:92:43:9b:d3:83:cf:0b:98:db:fb:
c4:39:05:1d:6c:29:9f:02:2f:12:d6:35:d8:24:8b:01:c9:09:
7b:51:14:2d:06:b4:0c:8d:66:9f:e9:4a:e1:2e:40:fc:6d:a6:
82:06:0b:6e:8d:2e:96:d7:05:9c:ea:8f:00:b1:6a:0b:08:e0:
f3:8d:40:b7:b0:4b:3c:f7:39:dd:cb:0e:15:48:2b:14:5d:b8:
c6:25:33:02:7b:5d:4a:28:04:dc:ae:69:0c:ac:d1:05:63:ee:
cc:aa:57:9b:24:af:60:5d:e6:bc:8a:a9:6d:fb:01:38:66:18:
a8:80:0a:a7:bf:15:3d:79:6e:6b:89:17:43:43:a5:af:4f:44:
26:bd:b9:fe:e0:32:de:71:de:d7:1c:04:6d:76:a5:ba:e5:ab:
48:ee:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:55 2025 by rpki-client