Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/FlnzfKEWQXvyzPbJunTOYgt_UAw.roa
File: FlnzfKEWQXvyzPbJunTOYgt_UAw.roa (raw, json)
Hash identifier: gO1Tnf/OgaAMr5cFfmPztpDAe1LPXtrDbGch2EErAao=
Subject key identifier: 16:59:F3:7C:A1:16:41:7B:F2:CC:F6:C9:BA:74:CE:62:0B:7F:50:0C
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 0198843458F4C4FCDD2146322A5BBA4B56E9
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/FlnzfKEWQXvyzPbJunTOYgt_UAw.roa
Signing time: Thu 07 Aug 2025 11:04:39 +0000
ROA not before: Thu 07 Aug 2025 11:04:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.9.36.0/24 maxlen: 24
185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
217.70.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:34:58:f4:c4:fc:dd:21:46:32:2a:5b:ba:4b:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Aug 7 11:04:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1659f37ca116417bf2ccf6c9ba74ce620b7f500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:9a:ee:e4:49:bd:18:d1:db:31:79:89:e3:
ea:ac:ba:2f:80:24:7a:dc:31:7d:ee:83:d9:7a:bf:
56:fc:59:26:ee:a6:db:da:d7:2a:4f:06:23:4b:5a:
00:58:2f:7c:29:73:0f:63:7d:53:59:8e:35:a1:88:
dc:9c:ef:93:5c:3a:d0:b8:2d:ab:22:e0:87:92:fd:
a7:c5:85:04:53:69:1f:b6:27:9b:a0:1b:52:e1:e6:
94:d5:73:bf:9c:d6:06:1f:1b:73:12:46:59:cc:06:
f1:cf:52:57:91:f5:af:b3:76:62:8d:dd:1f:4f:2a:
01:9c:fc:9c:a7:e7:55:49:e8:97:c4:4e:0e:59:0d:
5f:91:89:f4:5c:60:f1:4f:02:06:98:46:36:2e:cd:
0a:46:2b:45:ed:b7:46:9a:5b:64:14:24:98:91:f0:
09:fe:80:b2:28:5d:a9:e1:6a:21:b7:01:be:73:74:
5a:4c:f2:cd:62:d3:cf:d2:c5:3b:6a:ab:8e:6f:8d:
5f:df:5e:44:78:b7:43:7a:06:18:4c:10:a1:16:a3:
9a:63:44:52:e1:03:22:23:25:1d:fe:19:62:ad:2b:
a5:74:4c:40:b2:e1:3d:6c:ce:03:35:07:6b:7c:4d:
df:3a:c4:47:52:9a:24:a7:46:be:85:dd:60:2e:6d:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:F3:7C:A1:16:41:7B:F2:CC:F6:C9:BA:74:CE:62:0B:7F:50:0C
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/FlnzfKEWQXvyzPbJunTOYgt_UAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
217.70.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9e:f5:3f:cb:c5:a3:41:63:63:7e:90:d4:40:5a:36:81:a8:
1c:4d:62:ff:6a:21:7b:13:5a:5f:dc:7b:0d:15:ab:e2:85:69:
10:22:0e:59:d7:9a:ae:1a:17:8f:22:cc:e1:f1:dd:2a:58:a1:
4f:d3:d6:04:2c:7b:50:c6:5b:ef:b6:ed:5c:77:9f:d5:00:54:
be:59:92:68:ca:e7:95:a8:17:99:4e:29:ec:a6:cc:ee:a1:a6:
6f:12:30:e1:98:2a:d9:fe:40:89:48:99:f6:ac:88:c9:7b:c5:
2a:c8:25:97:c2:89:76:68:0c:54:62:06:d2:29:b4:ed:d9:bf:
2b:ca:47:72:7b:56:d4:82:fe:88:01:4a:f4:89:1b:02:22:01:
4c:98:4a:f0:b8:95:67:98:c1:78:31:d1:74:e9:78:9d:58:d3:
9b:1a:47:02:b3:07:af:ab:1f:12:cd:7b:e2:6e:74:3c:b8:cc:
e7:31:66:0d:5b:c0:6b:1d:9d:e6:e5:cc:6f:00:f2:c2:84:11:
63:d8:86:d8:58:b5:5f:ab:7b:35:90:db:0b:0b:b4:8e:c3:2e:
76:ee:b2:17:6c:d6:9b:ef:bf:a8:09:07:1a:0f:00:5f:10:91:
16:dc:df:c1:c6:43:17:3c:02:7b:ce:83:3c:39:6e:cb:6c:87:
37:2f:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:42 2025 by rpki-client