Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/84A8A9OZnxIUqPZOPuZ1SL335vk.roa
File: 84A8A9OZnxIUqPZOPuZ1SL335vk.roa (raw, json)
Hash identifier: QhbIhRBDT4d83POXbw97pfd/CjguaahBjlUY+K9lPVw=
Subject key identifier: F3:80:3C:03:D3:99:9F:12:14:A8:F6:4E:3E:E6:75:48:BD:F7:E6:F9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0198BD7567BC325594D9063D093B0635C20B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/84A8A9OZnxIUqPZOPuZ1SL335vk.roa
Signing time: Mon 18 Aug 2025 13:54:04 +0000
ROA not before: Mon 18 Aug 2025 13:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31479
IP address blocks: 49.0.184.0/21 maxlen: 21
80.66.116.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
201.77.58.0/24 maxlen: 24
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:75:67:bc:32:55:94:d9:06:3d:09:3b:06:35:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 18 13:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3803c03d3999f1214a8f64e3ee67548bdf7e6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:85:52:ce:95:9e:30:02:1e:38:82:5b:5d:
0d:50:32:4e:a9:47:6b:e3:ce:51:ff:ee:ee:a5:0d:
0a:c9:d9:09:5d:56:52:a0:35:76:ed:45:95:a5:6f:
3d:29:68:e0:3e:a9:72:17:82:9d:18:4c:44:6d:e8:
b7:01:4d:82:c0:62:2f:b7:2c:ab:30:21:6b:58:ce:
75:2f:f2:92:27:01:cd:85:37:67:0c:15:1d:85:88:
0b:75:da:92:a6:76:c4:de:e0:cb:d7:40:30:ac:e0:
31:98:5d:02:61:73:1f:4a:e6:af:30:07:be:95:60:
ef:8f:db:dd:ce:70:c8:c5:cc:af:c3:1a:db:e6:bd:
ed:7e:b5:2d:d6:51:e6:94:7d:ff:5e:4b:9b:8d:be:
b1:ab:55:b7:b0:37:dc:0f:d7:35:f2:6c:1f:13:d9:
da:26:af:3a:ba:6b:13:c2:48:7e:0b:25:84:fb:9f:
58:ea:2d:fb:d0:c2:b8:76:e3:99:65:b5:e8:a4:e6:
e3:0a:b6:6f:c7:da:0f:0c:8c:14:87:f9:3d:35:18:
41:50:2b:f1:9d:1d:a6:0f:4c:d2:37:90:0e:a6:d1:
f2:d6:70:b3:5d:67:1c:21:59:f0:d3:e0:bb:c5:bd:
41:d4:46:40:8a:3e:70:55:d2:53:9f:8b:e2:7c:7e:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:3C:03:D3:99:9F:12:14:A8:F6:4E:3E:E6:75:48:BD:F7:E6:F9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/84A8A9OZnxIUqPZOPuZ1SL335vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.184.0/21
80.66.116.0/24
94.198.46.0/24
178.19.32.0/23
185.28.48.0/23
201.77.58.0/24
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
24:98:36:bb:80:d5:c1:11:2b:23:3a:a3:57:20:3b:fa:a3:c9:
49:9d:d5:6a:77:08:79:94:a7:47:aa:20:65:4b:ac:e6:4b:64:
d1:15:2c:76:ac:b7:ef:53:85:aa:57:06:54:38:08:54:b3:f7:
65:a6:35:b1:68:9c:10:f5:23:81:53:d4:49:73:24:d0:8b:2e:
d5:97:ab:b7:a5:1f:4b:bc:c5:62:0f:4e:4b:2d:62:ad:21:20:
48:5d:0c:da:a0:7e:a3:ab:6d:74:24:6f:c4:c4:33:95:fe:a5:
a6:1b:da:5d:8c:7c:20:6a:f0:1b:eb:c6:c6:20:7b:e7:90:92:
b1:3d:36:f2:8a:ee:52:66:d2:8d:1a:66:71:b5:d6:39:90:4c:
7f:fc:f2:24:ab:d8:39:01:30:f5:0b:36:62:ef:ae:7a:a8:96:
77:49:fd:59:02:07:2e:29:c9:47:17:6f:a5:71:eb:87:00:c7:
c6:1b:9d:15:a8:03:ec:22:6d:4d:7d:b7:72:46:92:04:a9:bf:
ff:ea:60:c4:7d:9d:f0:34:12:7d:81:64:58:2a:67:fd:f1:f4:
25:d4:21:c2:f8:fc:88:b1:70:82:83:1d:7f:b6:90:73:c4:25:
42:12:b5:24:62:7b:63:fc:4f:ae:b9:6e:fa:11:8d:b8:9c:8f:
89:70:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:00 2025 by rpki-client