Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ftKqg29SRjRJXKDAVsF7MEByVOU.roa
File: ftKqg29SRjRJXKDAVsF7MEByVOU.roa (raw, json)
Hash identifier: S4JUsXSm9TDbV8gIqOXm4klSRGOIZJ1kZ6fPUBwJ0q0=
Subject key identifier: 7E:D2:AA:83:6F:52:46:34:49:5C:A0:C0:56:C1:7B:30:40:72:54:E5
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0198ADBDA7DE225007F0F04B3DF1BCB95959
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ftKqg29SRjRJXKDAVsF7MEByVOU.roa
Signing time: Fri 15 Aug 2025 12:39:04 +0000
ROA not before: Fri 15 Aug 2025 12:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:bd:a7:de:22:50:07:f0:f0:4b:3d:f1:bc:b9:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Aug 15 12:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ed2aa836f524634495ca0c056c17b30407254e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:93:1d:cb:6f:b9:59:3d:cf:9d:a6:27:a6:
0c:de:18:9c:a1:9b:7f:f5:de:98:a0:0c:22:c2:b9:
f7:13:3d:38:2a:01:35:a9:e2:f5:df:f1:83:a2:82:
b0:79:e4:7e:67:e4:25:9a:37:f7:f1:e3:c8:ec:d8:
f2:99:ee:96:b2:f5:be:c4:a4:a7:40:98:9c:3b:3d:
0b:7c:d2:0b:f4:8f:58:33:c2:36:66:de:5e:aa:0b:
e4:7c:c1:e4:aa:90:c7:2b:a0:6f:e9:2a:82:8c:11:
6c:fe:db:75:78:fe:90:cc:c5:e7:76:00:fb:91:70:
b5:d1:03:15:6c:ba:f3:23:24:c8:79:6b:75:e5:1d:
25:ab:be:9b:22:80:12:af:61:1d:2f:82:02:ff:ca:
d0:17:73:5d:02:0b:39:d3:d6:2c:ee:c8:a2:85:89:
22:41:f8:0c:31:aa:3b:c4:08:fe:29:e5:cb:7b:a4:
74:63:d4:a0:96:a0:b8:ba:ba:0e:7a:48:25:6b:e4:
cf:b8:64:12:42:bb:bb:36:c1:9d:7b:88:dd:4b:94:
d4:e8:3b:19:79:58:77:3e:41:3d:f0:32:44:42:e4:
c2:0d:39:e4:73:80:09:b4:63:71:08:bf:a0:b5:77:
e8:fe:84:9f:dc:a5:a2:7b:7a:2d:98:c9:35:8c:01:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:AA:83:6F:52:46:34:49:5C:A0:C0:56:C1:7B:30:40:72:54:E5
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ftKqg29SRjRJXKDAVsF7MEByVOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0/22
83.142.208.0/24
83.142.210.0-83.142.212.255
83.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cb:8b:cd:b6:20:14:ea:57:fa:dc:01:ca:5c:29:e4:16:85:
60:21:4e:0f:b1:1c:be:04:92:60:31:a2:04:6a:fa:80:92:12:
89:30:59:3b:2f:9d:09:d7:14:68:12:b0:7d:22:08:f6:eb:5a:
91:c3:f0:c8:8b:f3:68:35:66:5d:a3:13:47:16:7b:f3:d8:45:
e3:2b:64:8c:58:8b:31:3d:f2:4c:44:c7:98:97:7c:5a:12:e3:
84:8e:74:62:25:37:99:b7:d8:e1:b1:e2:2f:ea:5d:f8:45:92:
84:06:28:4d:06:9e:54:0c:1b:c0:2f:2a:d9:ba:c9:11:1a:1f:
3a:d8:32:6c:b6:1f:e0:c5:e0:9f:b8:58:6c:66:0b:67:83:0f:
fa:17:13:b7:85:3e:5f:3c:89:d1:5d:b4:fe:df:87:b3:0b:37:
d2:28:05:a9:5d:3a:ae:9d:45:d3:9c:9e:80:41:d8:ed:a0:00:
d7:8e:b4:0b:cc:90:28:1a:6c:65:eb:bf:6e:ad:fc:41:c7:48:
23:99:a4:29:29:34:1c:5c:33:82:46:49:84:bd:5d:7e:be:e0:
ee:fa:d7:e3:ae:ef:2a:66:4a:75:c6:62:18:48:8e:aa:66:99:
73:b4:60:4c:64:10:fd:de:ba:0b:13:32:bf:4f:0b:b4:ae:ce:
ee:0e:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:32:47 2025 by rpki-client