Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XCk3Ob8m5T6BkydLg8wPUnUSxZk.roa
File: XCk3Ob8m5T6BkydLg8wPUnUSxZk.roa (raw, json)
Hash identifier: dznI9K+xDRfgoV/ZVsn2UpZ1i+mQNdXeMcVueBvEpOI=
Subject key identifier: 5C:29:37:39:BF:26:E5:3E:81:93:27:4B:83:CC:0F:52:75:12:C5:99
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0198997F2B0402577FE2AA38F1D47ABC10A3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XCk3Ob8m5T6BkydLg8wPUnUSxZk.roa
Signing time: Mon 11 Aug 2025 14:18:24 +0000
ROA not before: Mon 11 Aug 2025 14:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 195.143.0.0/21 maxlen: 24
195.143.15.0/24 maxlen: 24
195.143.17.0/24 maxlen: 24
195.143.18.0/24 maxlen: 24
195.143.22.0/23 maxlen: 24
195.143.28.0/22 maxlen: 22
195.143.34.0/24 maxlen: 24
195.143.36.0/22 maxlen: 22
195.143.82.0/24 maxlen: 24
195.143.84.0/24 maxlen: 24
195.143.86.0/23 maxlen: 24
195.143.88.0/23 maxlen: 24
195.143.98.0/23 maxlen: 24
195.143.107.0/24 maxlen: 24
195.143.108.0/22 maxlen: 22
195.143.113.0/24 maxlen: 24
195.143.114.0/23 maxlen: 24
195.143.116.0/24 maxlen: 24
195.143.118.0/23 maxlen: 24
195.143.121.0/24 maxlen: 24
195.143.123.0/24 maxlen: 24
195.143.132.0/24 maxlen: 24
195.143.134.0/24 maxlen: 24
195.143.144.0/22 maxlen: 22
195.143.148.0/24 maxlen: 24
195.143.152.0/22 maxlen: 22
195.143.160.0/23 maxlen: 24
195.143.163.0/24 maxlen: 24
195.143.164.0/22 maxlen: 22
195.143.176.0/24 maxlen: 24
195.143.178.0/24 maxlen: 24
195.143.187.0/24 maxlen: 24
195.143.190.0/23 maxlen: 24
195.143.192.0/20 maxlen: 20
195.143.208.0/21 maxlen: 21
195.143.216.0/24 maxlen: 24
195.143.224.0/22 maxlen: 22
195.143.230.0/23 maxlen: 24
195.143.232.0/21 maxlen: 21
195.143.240.0/22 maxlen: 22
195.143.246.0/23 maxlen: 24
195.143.248.0/22 maxlen: 22
195.143.252.0/24 maxlen: 24
195.143.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:7f:2b:04:02:57:7f:e2:aa:38:f1:d4:7a:bc:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 11 14:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c293739bf26e53e8193274b83cc0f527512c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:f3:f0:6d:fc:39:d5:9b:0a:22:7f:6d:a9:
b0:09:ca:8a:45:d5:0e:4d:9f:32:ec:70:86:e1:14:
87:de:29:6c:fa:4c:9a:2d:68:ee:51:06:d7:3e:35:
b2:a5:cb:5d:98:42:7c:80:bc:ba:46:82:0a:ff:0b:
bf:96:53:4a:76:50:21:6d:63:81:7f:7e:e0:c8:fc:
fe:e6:b1:bc:34:a2:16:64:8d:ac:35:af:6e:5a:17:
52:82:bb:2f:a3:dc:d1:89:25:dd:a9:65:79:ce:ed:
81:51:92:fa:0b:04:ee:a5:8b:e2:04:0d:b9:d6:ac:
0a:5d:a8:0d:5a:12:7e:fd:4e:ca:57:24:41:0d:60:
09:ff:6e:a8:a1:86:dd:ff:27:5b:d6:f2:72:be:a4:
76:d0:4f:a5:db:62:92:20:70:ae:8c:6f:4e:3a:05:
2a:fd:f7:f9:c1:8d:64:1e:a3:89:4f:8a:36:d6:18:
20:43:b0:2f:4c:30:49:c3:f0:f4:e9:90:e9:8b:09:
cc:25:c2:81:cf:a7:a3:a4:e9:52:a5:90:5a:4e:6a:
c5:44:06:50:cb:db:f4:33:a4:72:1e:46:79:73:58:
72:38:40:5f:e6:0c:e8:01:8e:25:42:3a:78:5b:b7:
93:d9:14:31:d2:f9:64:5b:50:86:b7:9e:50:6e:c4:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:29:37:39:BF:26:E5:3E:81:93:27:4B:83:CC:0F:52:75:12:C5:99
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XCk3Ob8m5T6BkydLg8wPUnUSxZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.143.0.0/21
195.143.15.0/24
195.143.17.0-195.143.18.255
195.143.22.0/23
195.143.28.0/22
195.143.34.0/24
195.143.36.0/22
195.143.82.0/24
195.143.84.0/24
195.143.86.0-195.143.89.255
195.143.98.0/23
195.143.107.0-195.143.111.255
195.143.113.0-195.143.116.255
195.143.118.0/23
195.143.121.0/24
195.143.123.0/24
195.143.132.0/24
195.143.134.0/24
195.143.144.0-195.143.148.255
195.143.152.0/22
195.143.160.0/23
195.143.163.0-195.143.167.255
195.143.176.0/24
195.143.178.0/24
195.143.187.0/24
195.143.190.0-195.143.216.255
195.143.224.0/22
195.143.230.0-195.143.243.255
195.143.246.0-195.143.252.255
195.143.254.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ba:e4:09:91:51:cd:1c:ac:81:e6:b1:25:37:ce:eb:b5:05:
7d:c9:b7:37:8f:cf:08:48:65:5f:3b:2e:5c:f9:9b:c8:f8:a5:
1f:7e:4a:e0:08:2d:b0:98:a1:e9:63:1c:e4:bd:4e:49:8c:40:
37:67:dc:7f:2f:11:27:12:0d:f6:1b:3c:35:6d:b5:70:a0:75:
94:2d:a5:59:4b:15:25:f7:43:fd:ee:4b:f0:30:04:b3:ab:50:
67:47:88:91:22:ea:5b:e4:da:49:38:da:b8:11:88:4a:36:ce:
68:c0:b1:2e:92:05:89:fe:76:cd:cf:ba:1e:19:ab:64:64:07:
c4:51:2e:c7:38:81:f5:c0:f3:59:b2:61:3c:35:a9:a3:7e:ce:
c5:ae:47:de:83:cf:ee:3f:d5:dc:5c:e7:33:1c:f3:90:dd:c1:
d9:8b:7d:6f:76:de:c7:05:78:d0:14:0b:6d:8a:99:a9:2e:b3:
7c:d4:70:b7:42:7f:ec:c8:70:4c:44:c3:a3:5e:1c:88:13:e7:
ec:76:51:9a:ce:52:3d:48:68:cf:d9:a0:cb:34:16:34:0f:41:
a9:2d:a3:28:98:93:6f:54:c2:ac:51:83:bd:cb:35:22:36:0c:
97:d5:62:d0:3e:6e:33:72:50:fe:87:fe:b0:fa:86:5f:4a:77:
ad:8e:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:35 2025 by rpki-client