Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/kP_UonF_HmGL8CdyIq9MPQXOuRU.roa
File: kP_UonF_HmGL8CdyIq9MPQXOuRU.roa (raw, json)
Hash identifier: LRVYEE97/wxDRdlTMPL7LRHkb4g/QhRynslxAPVZx0s=
Subject key identifier: 90:FF:D4:A2:71:7F:1E:61:8B:F0:27:72:22:AF:4C:3D:05:CE:B9:15
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0198CE27FE4031BAEECE3D060EFBEA8C19AE
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/kP_UonF_HmGL8CdyIq9MPQXOuRU.roa
Signing time: Thu 21 Aug 2025 19:43:04 +0000
ROA not before: Thu 21 Aug 2025 19:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211057
IP address blocks: 46.253.87.0/24 maxlen: 24
46.253.88.0/23 maxlen: 23
46.253.88.0/24 maxlen: 24
46.253.91.0/24 maxlen: 24
46.253.92.0/24 maxlen: 24
185.21.120.0/24 maxlen: 24
185.21.121.0/24 maxlen: 24
185.21.122.0/24 maxlen: 24
185.21.123.0/24 maxlen: 24
185.71.140.0/22 maxlen: 22
185.71.140.0/23 maxlen: 23
185.71.140.0/24 maxlen: 24
185.71.140.0/25 maxlen: 25
185.71.140.128/25 maxlen: 25
185.71.141.0/24 maxlen: 24
185.71.141.0/25 maxlen: 25
185.71.141.128/25 maxlen: 25
185.71.142.0/24 maxlen: 24
185.71.142.0/25 maxlen: 25
185.71.142.128/25 maxlen: 25
185.71.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:27:fe:40:31:ba:ee:ce:3d:06:0e:fb:ea:8c:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Aug 21 19:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ffd4a2717f1e618bf0277222af4c3d05ceb915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:93:86:33:7b:29:92:f4:5c:ea:25:de:39:
0d:9f:39:ac:7b:a2:c5:9e:a2:74:15:35:a9:48:a9:
cb:ee:14:7f:7b:b8:fd:72:be:e3:ce:69:d5:5f:3f:
79:5d:77:0c:c9:64:97:dd:46:de:15:f8:06:45:8b:
0f:cc:47:c6:b1:ff:a4:94:07:88:8a:2f:f8:65:97:
b3:06:9a:a5:10:50:7c:d9:48:43:54:ac:73:6b:e1:
38:98:34:13:40:99:b5:3b:b1:4e:17:8d:65:c6:ee:
16:9f:a8:40:0e:d1:39:ac:1b:bd:d4:e9:82:2b:8b:
7c:c2:32:47:4b:c2:ca:8a:5b:70:bd:10:3c:17:7e:
09:d1:51:9c:0d:1c:4c:49:78:be:2b:8a:ba:8a:ec:
74:07:f8:c0:29:dc:28:7c:9a:16:ac:71:a9:c3:ab:
7f:68:82:33:9c:c6:9d:b1:84:19:e3:c3:b0:fa:c6:
88:e3:2d:8e:40:ad:74:18:0c:4e:68:12:67:df:81:
d7:af:cc:17:95:e6:e6:8c:42:e2:42:0f:32:39:ed:
09:4b:88:43:0a:cd:fc:ab:1c:3f:db:77:cc:b7:85:
72:74:42:e3:27:09:e1:f6:dc:57:e0:7c:c1:38:ec:
36:16:78:51:5f:5f:30:95:06:81:36:be:ef:b1:d8:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:D4:A2:71:7F:1E:61:8B:F0:27:72:22:AF:4C:3D:05:CE:B9:15
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/kP_UonF_HmGL8CdyIq9MPQXOuRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.87.0-46.253.89.255
46.253.91.0-46.253.92.255
185.21.120.0/22
185.71.140.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:04:23:c5:ca:28:6f:7d:22:d7:8d:c6:88:1a:6b:30:28:ad:
69:1e:2e:d5:71:3a:78:25:9c:06:4a:b9:81:69:1e:c4:eb:35:
54:25:58:fd:c3:0d:f9:ff:20:91:22:2e:06:5c:72:5e:51:5c:
17:ff:8d:be:28:5b:81:ab:f4:fb:b9:64:63:ea:9c:c6:95:62:
28:3a:ca:7e:2c:bc:86:04:bc:95:c5:0d:69:cb:8b:19:93:d1:
a6:21:af:1a:f2:81:f3:be:83:76:e3:e4:03:4c:33:72:73:57:
84:4a:43:39:d7:5c:ad:36:ce:3b:04:a3:2a:ae:c8:c0:a0:94:
5d:62:19:fc:93:0e:b3:0a:48:d1:ba:46:6c:c9:01:37:be:93:
9b:60:c2:bf:02:26:ba:e1:3e:5b:83:b6:d8:68:c5:e4:20:47:
ec:95:a7:6c:a8:21:a6:77:f9:b8:ab:02:b5:b6:f1:d7:ce:9b:
9c:67:1e:f0:63:78:62:1f:4a:53:80:2b:c3:20:74:70:d9:c1:
3a:9b:86:79:33:a3:22:c1:a7:9a:19:ca:0e:ed:d1:7c:87:e5:
ea:ba:63:27:a4:79:86:90:e0:d0:54:6d:d9:6b:03:ad:ba:d4:
ca:cd:2b:71:92:71:49:8c:35:9d:12:1e:0c:b3:18:24:47:0e:
34:2f:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:15 2025 by rpki-client