Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/CNIEoZIziaoslXjxziyj4Mdy2Eo.roa
File: CNIEoZIziaoslXjxziyj4Mdy2Eo.roa (raw, json)
Hash identifier: 4PTTm5j22xd4jPqtcvlATSikSzXljAnxaAWrrtmpJlA=
Subject key identifier: 08:D2:04:A1:92:33:89:AA:2C:95:78:F1:CE:2C:A3:E0:C7:72:D8:4A
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 019884345A428BECD7EB00C4A364C2DCA735
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/CNIEoZIziaoslXjxziyj4Mdy2Eo.roa
Signing time: Thu 07 Aug 2025 11:04:40 +0000
ROA not before: Thu 07 Aug 2025 11:04:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199608
IP address blocks: 185.9.36.0/24 maxlen: 24
185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
217.70.10.0/24 maxlen: 24
2a03:48c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:34:5a:42:8b:ec:d7:eb:00:c4:a3:64:c2:dc:a7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Aug 7 11:04:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d204a1923389aa2c9578f1ce2ca3e0c772d84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:37:cf:d1:92:2d:d9:58:01:5b:a8:88:4b:
fa:0b:35:f7:bc:4b:92:a5:07:e2:2c:af:82:26:6f:
e8:0d:7c:e2:60:a7:a8:08:b9:45:df:2e:28:ab:0a:
fe:8b:1d:61:15:4a:be:9f:26:f6:7e:d8:f9:f3:91:
f9:c3:80:5c:43:a2:94:4b:02:78:03:b7:ec:eb:00:
d5:eb:d7:ed:86:a7:d4:df:6a:49:d2:12:66:3f:37:
4d:bf:b3:96:f9:3f:82:a1:f8:f0:3b:fc:be:38:80:
8f:4e:1e:6b:3a:9d:d8:a5:7e:e9:4c:4e:ad:fe:28:
d3:4a:aa:a9:4f:b5:74:27:1f:e2:e7:a4:38:7f:8e:
fd:09:d0:71:d9:65:f1:2b:8d:24:24:25:11:ee:82:
df:41:b3:3e:c3:79:be:af:7d:c8:a1:36:e1:38:d1:
54:99:2e:db:99:fd:6d:9e:91:51:87:dd:b7:04:b9:
4b:28:4e:60:ef:0b:2d:5a:eb:f9:51:d0:68:1b:26:
43:11:7a:7d:e1:bf:4e:5a:f1:d6:04:6d:07:a1:93:
e2:49:df:c4:a8:88:4f:98:f4:bc:34:7b:88:15:5e:
72:4e:81:2f:fd:97:98:67:5c:f9:1a:5e:39:2e:73:
74:5e:01:84:b8:80:17:ba:2b:33:fb:7a:56:59:7d:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:04:A1:92:33:89:AA:2C:95:78:F1:CE:2C:A3:E0:C7:72:D8:4A
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/CNIEoZIziaoslXjxziyj4Mdy2Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
217.70.10.0/24
IPv6:
2a03:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
60:2d:b9:6a:22:e4:5a:cb:a6:ad:11:75:d4:7c:ee:18:3f:61:
dd:7b:00:53:fe:f0:c2:09:27:26:bb:47:d7:5f:da:f8:42:88:
9e:84:2a:f5:bb:03:2d:62:eb:81:6c:9e:50:a4:e1:f4:4a:20:
cf:7f:48:97:1b:d3:6e:24:33:0e:4f:27:00:72:9f:10:fd:33:
41:2a:50:c7:8f:50:58:97:fb:97:a6:38:ea:bb:fc:40:e0:b5:
8a:cd:88:4a:94:cd:9a:31:29:62:46:2e:5f:e3:6c:02:a9:0b:
c2:b2:e1:de:fb:94:3b:e3:cc:1f:fe:72:fb:00:9a:8e:75:64:
99:4e:77:e0:26:59:af:42:74:c6:6f:8d:55:7a:df:31:25:92:
e7:c3:f4:1f:97:33:6e:75:8c:b7:80:df:95:1f:4c:3f:b7:b1:
4b:88:4f:d4:65:65:01:df:59:c6:b1:08:cb:02:60:c6:96:17:
d7:5c:fb:53:65:11:fb:0e:b3:ec:09:bc:06:41:e6:5a:fe:44:
7d:5d:10:b7:ea:64:4d:f1:25:ab:52:a8:b3:d1:ac:98:15:ff:
2b:1b:89:9e:e0:cd:39:f2:b4:59:00:51:b4:3c:ae:e0:5c:68:
4b:42:7a:72:a2:91:33:72:14:a5:de:6d:2c:9d:4d:29:42:6b:
c8:74:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:35:05 2025 by rpki-client