Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/CU0pD-qyopGrF2gG1g9vsUEj3PE.roa
File: CU0pD-qyopGrF2gG1g9vsUEj3PE.roa (raw, json)
Hash identifier: 0vq62FNq9PmPpi5DYpzPDW7Ij6TgGimr0Wq2pd7Z3Os=
Subject key identifier: 09:4D:29:0F:EA:B2:A2:91:AB:17:68:06:D6:0F:6F:B1:41:23:DC:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 019883CFA2182F600048408FFD8BCB2CA601
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/CU0pD-qyopGrF2gG1g9vsUEj3PE.roa
Signing time: Thu 07 Aug 2025 09:14:39 +0000
ROA not before: Thu 07 Aug 2025 09:14:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21051
IP address blocks: 95.163.32.0/23 maxlen: 23
95.163.32.0/24 maxlen: 24
95.163.33.0/24 maxlen: 24
178.22.90.0/23 maxlen: 23
178.22.90.0/24 maxlen: 24
178.22.91.0/24 maxlen: 24
178.22.92.0/23 maxlen: 23
195.211.20.0/24 maxlen: 24
195.211.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:cf:a2:18:2f:60:00:48:40:8f:fd:8b:cb:2c:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Aug 7 09:14:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=094d290feab2a291ab176806d60f6fb14123dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:59:66:73:4d:04:2c:92:23:9e:f7:97:2b:
02:0e:cd:73:b4:61:86:1c:80:cb:d5:a4:38:2a:62:
2e:81:31:d5:51:4b:e9:5a:1c:47:71:88:98:b6:5a:
74:b5:41:b7:7f:0d:95:08:80:ee:75:9d:10:68:fc:
4a:97:4d:94:07:b1:61:f8:9c:68:20:b5:de:55:dc:
fb:32:d5:1b:07:e1:6d:d1:ff:3e:fb:37:1c:2f:42:
dc:20:13:fd:95:e4:10:1e:49:a2:a0:72:4a:c7:6d:
06:85:ee:d0:60:07:d3:8e:fb:63:a7:a1:ed:46:db:
36:15:85:1b:20:04:a7:6c:57:03:fb:12:0e:49:ba:
77:62:54:ea:3c:40:82:69:45:4b:36:c3:51:de:e7:
60:eb:3c:c5:75:bd:3c:9d:5e:93:ca:6b:cc:78:28:
9c:34:52:1a:c3:54:85:8c:9e:bd:c2:64:48:a4:d7:
85:57:bc:17:46:20:df:8c:b2:89:dc:6c:88:1b:0f:
5a:3b:3a:85:18:3f:8f:c2:2e:5b:25:8a:ec:1a:0f:
a9:e0:86:c6:e2:64:6e:82:28:9b:2f:84:17:c4:d4:
c5:14:46:57:37:e8:9c:90:7b:0e:3e:12:e0:2f:8f:
87:61:16:bf:27:e9:09:04:6e:c4:07:f3:b3:7b:15:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4D:29:0F:EA:B2:A2:91:AB:17:68:06:D6:0F:6F:B1:41:23:DC:F1
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/CU0pD-qyopGrF2gG1g9vsUEj3PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.163.32.0/23
178.22.90.0-178.22.93.255
195.211.20.0/23
Signature Algorithm: sha256WithRSAEncryption
90:4d:0c:6d:ec:b8:44:44:00:a0:d0:c9:06:ef:a5:b2:ba:5c:
6c:db:82:fa:0a:fa:7c:69:c1:92:aa:ea:a9:a1:99:d4:d9:c4:
14:ed:c4:60:9f:dc:de:9f:fc:56:7d:09:7c:96:56:bc:4a:c7:
64:67:dc:b7:1b:66:32:cd:c3:c8:04:41:91:36:02:46:a8:5f:
c5:63:5c:62:ce:fb:5c:9b:99:7c:dd:9d:1e:c3:12:52:46:86:
e4:5e:f5:0a:dc:40:10:64:a2:0f:ef:b6:d7:a0:0c:c8:88:83:
3a:aa:03:f3:2c:a2:8d:b5:51:c6:62:e2:06:51:31:b9:fe:98:
59:c0:7d:39:bd:81:61:fe:d9:ab:65:cd:ad:13:83:9f:ac:ca:
5c:2e:3a:82:a3:76:2b:ba:b5:a3:34:05:20:e9:4d:96:8d:de:
69:49:1f:68:5f:ad:24:7a:57:f0:ca:0d:1e:03:87:82:0d:50:
39:2f:79:4f:17:93:c4:7e:9c:79:79:0b:7f:49:63:da:40:0a:
11:69:08:19:5d:3c:af:3d:51:bf:12:26:49:e2:3a:f9:31:12:
f0:f9:68:65:b9:9b:e0:4e:0f:5e:92:12:8b:81:8f:32:0c:b0:
2c:3e:c2:0e:6d:87:ac:bd:c7:71:dd:51:54:23:56:1b:07:29:
92:3a:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:26 2025 by rpki-client