Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/FVXRCQIIyV7V1ceZzTsK8-2EiQg.roa
File: FVXRCQIIyV7V1ceZzTsK8-2EiQg.roa (raw, json)
Hash identifier: DLPLwGMZosDy6CRDEFCvozw8q4ofzzYuWHIjuR2iM+s=
Subject key identifier: 15:55:D1:09:02:08:C9:5E:D5:D5:C7:99:CD:3B:0A:F3:ED:84:89:08
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0197B292ECE98A0F9A540D499BE30771CB0B
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/FVXRCQIIyV7V1ceZzTsK8-2EiQg.roa
Signing time: Fri 27 Jun 2025 18:07:42 +0000
ROA not before: Fri 27 Jun 2025 18:07:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47645
IP address blocks: 94.137.64.0/21 maxlen: 21
94.137.72.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.77.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.80.0/22 maxlen: 22
94.137.84.0/22 maxlen: 22
94.137.88.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
94.137.95.0/24 maxlen: 24
2a05:c440::/48 maxlen: 48
2a05:c441::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:92:ec:e9:8a:0f:9a:54:0d:49:9b:e3:07:71:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jun 27 18:07:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1555d1090208c95ed5d5c799cd3b0af3ed848908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:f9:bd:8d:71:54:fe:ff:62:31:18:8e:52:
57:aa:10:f0:97:a5:69:3a:a4:de:3e:17:a3:90:6f:
a9:87:b9:7a:f9:20:ad:c9:25:1f:57:67:8a:2e:94:
47:b3:a6:d3:9d:b6:2c:b1:2b:9c:5f:25:a6:42:0a:
68:df:f6:23:e0:54:46:b0:f7:17:5a:a6:5f:83:80:
04:24:d7:87:b4:10:ea:ad:75:2b:06:75:82:c7:b1:
5e:fc:ae:6d:36:ba:00:a9:53:b9:11:dd:c4:d8:9c:
40:91:a0:c6:74:08:e6:50:82:15:9f:1f:39:2b:84:
5e:ac:f6:a4:14:0f:e0:45:9a:9a:a7:32:91:c4:6a:
08:f6:19:1e:5f:34:8c:f6:8e:6a:9e:49:6e:3d:f1:
eb:42:99:2e:7e:2c:93:05:0d:87:68:aa:6f:fb:c4:
4c:18:83:3f:b2:ac:b0:f7:c5:f0:95:ad:3e:8a:95:
2f:36:cc:5a:09:10:ae:58:58:92:48:ac:38:7c:b3:
93:a1:0a:98:d5:5a:02:17:d8:83:68:4a:ad:4f:44:
bd:14:44:a8:21:7b:b3:fa:2f:52:a5:25:7c:8e:d0:
f8:21:88:1a:26:f3:7e:54:25:a6:28:e6:a0:84:d6:
e9:69:82:da:59:68:9b:f3:60:0a:59:64:dc:0f:fb:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:D1:09:02:08:C9:5E:D5:D5:C7:99:CD:3B:0A:F3:ED:84:89:08
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/FVXRCQIIyV7V1ceZzTsK8-2EiQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.64.0-94.137.88.255
94.137.94.0/23
IPv6:
2a05:c440::/48
2a05:c441::/32
Signature Algorithm: sha256WithRSAEncryption
0b:24:5c:15:e3:9f:14:91:b6:bc:90:b2:9a:99:d9:84:ca:d7:
03:1b:62:33:18:31:31:36:0a:89:b6:54:f9:70:3e:6d:f0:9b:
5e:40:94:ed:bf:38:66:04:f5:3c:fe:62:57:30:56:b3:3d:68:
58:4d:a0:81:f5:14:2e:29:98:0d:46:8f:0d:0d:73:32:1d:01:
f6:45:7f:46:3e:10:a9:a0:97:07:fe:f0:31:07:8a:8d:f7:64:
9c:3a:69:e1:3b:59:f4:7a:3a:e0:d7:d4:1b:0f:15:f0:4b:ca:
ef:2b:cf:51:48:e6:49:24:74:37:e0:b0:05:81:c9:46:9d:b7:
0f:1b:7e:3c:06:4c:51:af:9e:22:11:f3:f2:34:0d:b9:6b:be:
b2:4b:b8:2a:0e:66:4c:0a:50:db:e7:20:ff:8d:c1:12:0b:57:
03:5e:7e:f1:f8:db:39:52:ff:e9:4f:22:39:bd:ff:bb:1a:6d:
d2:5d:0c:95:5f:c1:aa:43:f3:ce:f0:db:0c:94:26:10:52:e1:
ca:17:4e:b2:e5:65:53:01:68:ee:1d:5e:fa:56:97:b4:18:fe:
02:35:bf:e1:4f:68:c7:c5:0f:ac:d2:cc:d3:8f:81:ab:0a:69:
05:d3:15:80:f3:4e:8e:18:3f:62:8a:d1:4b:c7:88:3b:78:1d:
5a:a4:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:08 2025 by rpki-client