Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa
File: I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa (raw, json)
Hash identifier: Zd+eY+EVCzF5gjwTJThQ6dJvOjSgC7ThbQkI/3E4k6Q=
Subject key identifier: 23:C4:ED:F9:9B:BE:E0:AB:92:2C:1C:9C:57:7F:A8:98:A0:A0:03:69
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019939969B5AAE51B61F1D1D196E9E8952A3
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa
Signing time: Thu 11 Sep 2025 16:23:15 +0000
ROA not before: Thu 11 Sep 2025 16:23:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.96.0/20 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.102.0/24 maxlen: 24
94.228.103.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
94.228.107.0/24 maxlen: 24
94.228.108.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
185.251.52.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
2a00:e30::/41 maxlen: 41
2a00:e30:64::/64 maxlen: 64
2a00:e30:80::/41 maxlen: 64
2a00:e30:280::/41 maxlen: 41
2a00:e30:a00::/40 maxlen: 48
2a00:e30:2100::/41 maxlen: 41
2a00:e30:3000::/41 maxlen: 41
2a00:e30:6900::/41 maxlen: 41
2a00:e30:ed00::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:96:9b:5a:ae:51:b6:1f:1d:1d:19:6e:9e:89:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Sep 11 16:23:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c4edf99bbee0ab922c1c9c577fa898a0a00369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:a1:2d:50:18:8f:e5:16:95:0a:f7:d3:3b:
bb:c6:52:9c:1e:ad:20:d8:90:39:67:60:ef:37:a8:
d1:58:e1:3f:1c:7f:05:9e:7f:ab:d9:4a:2f:5a:cf:
d3:b9:3d:43:57:0f:9e:b1:ba:18:d5:6a:cc:bf:ce:
58:58:18:57:47:96:81:6f:2a:ab:79:04:bb:8a:47:
cd:35:dd:21:49:b7:89:6c:04:d0:76:43:25:65:a0:
9c:56:31:26:12:b5:03:99:b6:1d:5b:0b:e1:a7:2f:
b3:d1:94:1d:58:36:2e:d6:00:e3:35:a2:62:c2:3c:
38:b8:c9:5c:17:dc:92:ab:ce:92:f0:4b:57:41:be:
96:2c:8c:d9:88:f7:0a:e0:49:8b:b2:74:b6:e5:33:
5a:e5:1b:ea:f1:15:d9:16:54:95:47:17:48:b5:34:
8e:e3:71:4b:c0:68:d0:fc:00:36:9a:e7:57:39:40:
4b:69:df:38:55:d3:29:f2:c5:0d:2b:37:83:13:ed:
29:5b:84:b7:98:ef:d5:01:7e:c9:42:11:d6:8c:77:
21:66:1a:b6:a9:67:20:ce:1b:b1:de:e2:db:2a:c6:
ca:bb:96:52:64:f5:f8:a4:4d:db:a2:44:eb:e3:a3:
47:7c:0a:f5:01:a3:a4:6e:6c:4b:9e:15:a8:62:90:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:ED:F9:9B:BE:E0:AB:92:2C:1C:9C:57:7F:A8:98:A0:A0:03:69
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.52.0-185.251.54.255
194.169.198.0/24
IPv6:
2a00:e30::/40
2a00:e30:280::/41
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:6900::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
48:ce:68:8e:c8:3f:e9:37:fd:d5:93:17:c0:da:fe:60:b2:13:
38:b0:8e:4f:8e:23:87:09:3f:1e:5f:f1:6a:35:91:2a:71:36:
eb:34:24:f9:ba:f8:5e:e2:8f:36:cf:4b:36:f1:65:21:69:39:
9e:54:10:b7:5c:5e:c1:bc:a7:7e:d2:d3:2e:fc:e8:44:72:f8:
6a:aa:e6:96:ed:d0:41:e5:14:ca:fb:91:93:28:7c:d6:68:1f:
e6:50:6e:91:cf:4d:e6:1e:2d:4e:b8:f5:97:09:44:06:8b:b4:
80:1f:a0:d0:46:fb:8e:54:80:7e:78:06:d7:32:e6:9f:41:5c:
0e:4a:12:1e:89:dc:4c:1c:49:6c:f8:0d:21:2a:cb:08:35:89:
85:83:f7:2f:7e:e2:aa:d5:13:8d:0c:e0:ae:4e:6b:09:d5:91:
f3:b5:91:5d:42:75:c6:db:83:3f:20:c5:54:a5:a9:3a:5f:82:
63:c3:6c:3e:5f:be:0d:00:cd:a7:2f:48:97:71:b5:d2:64:35:
d4:08:1c:aa:11:e2:2a:6e:b4:4a:5e:42:a5:0c:9a:73:53:0c:
a9:64:97:ca:17:cd:de:50:db:38:0e:4a:6b:b0:cf:6f:a6:21:
86:1b:67:e4:d8:5a:c8:78:24:ed:3d:c0:a6:0e:be:81:0a:e1:
ff:c7:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:25 2025 by rpki-client