Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SNlgKzpZpwSRGCdREoVpIBEsiQk.roa
File: SNlgKzpZpwSRGCdREoVpIBEsiQk.roa (raw, json)
Hash identifier: eopSjWIjPS0dU5IJl+IOoETgQTmOTz1H/8no0hFFVn8=
Subject key identifier: 48:D9:60:2B:3A:59:A7:04:91:18:27:51:12:85:69:20:11:2C:89:09
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0197A22103CBEA2FDDD4ABCB03477B182EB1
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SNlgKzpZpwSRGCdREoVpIBEsiQk.roa
Signing time: Tue 24 Jun 2025 13:29:22 +0000
ROA not before: Tue 24 Jun 2025 13:29:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 46.102.175.0/24 maxlen: 24
85.204.242.0/24 maxlen: 24
86.105.233.0/24 maxlen: 24
89.34.178.0/24 maxlen: 24
89.38.236.0/24 maxlen: 24
89.43.53.0/24 maxlen: 24
89.43.63.0/24 maxlen: 24
89.46.93.0/24 maxlen: 24
93.114.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:21:03:cb:ea:2f:dd:d4:ab:cb:03:47:7b:18:2e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 24 13:29:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48d9602b3a59a7049118275112856920112c8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:08:18:88:dd:7e:ae:b4:bc:68:b5:5a:11:
45:b4:60:a4:b6:89:9e:05:74:60:ae:d4:0d:f0:39:
07:bb:f4:9b:d9:cf:fa:a1:78:92:93:75:28:d7:df:
bd:07:40:63:80:71:b0:5d:56:e3:16:ff:d3:83:ed:
96:ee:20:19:38:48:83:5b:ca:97:e8:53:7d:cf:b5:
cd:6b:61:b9:a9:fb:4e:fd:fc:06:4f:71:34:0a:c3:
ed:d3:ef:8a:50:dd:31:0e:94:1d:d1:08:84:73:1a:
1f:41:f6:78:27:33:3b:4b:7b:12:22:85:97:ae:23:
ff:99:7d:31:01:ee:68:5d:c1:c8:0c:da:af:74:80:
66:ff:d7:2e:f5:ba:90:69:89:10:bb:1c:28:de:f9:
fd:21:1a:d9:49:9b:79:ac:b3:13:73:16:0d:4a:17:
11:f5:88:19:f8:5d:fb:84:56:a1:5e:18:39:9b:5c:
7b:9f:12:b4:f8:de:4b:bd:a2:30:81:4f:fa:76:10:
fc:80:c5:a7:fa:00:b4:8f:c8:fe:05:d8:2a:4f:50:
0b:36:25:af:bb:5c:f9:b0:a7:e7:2e:6e:cd:b8:b5:
14:e6:30:d0:4d:97:ac:f3:f5:4e:ec:9a:9f:f0:63:
04:7f:a9:b3:eb:09:29:d5:3a:81:a9:69:ee:74:d2:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:60:2B:3A:59:A7:04:91:18:27:51:12:85:69:20:11:2C:89:09
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SNlgKzpZpwSRGCdREoVpIBEsiQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.175.0/24
85.204.242.0/24
86.105.233.0/24
89.34.178.0/24
89.38.236.0/24
89.43.53.0/24
89.43.63.0/24
89.46.93.0/24
93.114.57.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3d:53:b4:f9:8b:fc:b3:fc:ed:9c:cd:17:c5:83:00:63:5f:
bd:7a:f7:e5:48:e2:0e:07:2b:d9:52:8a:1f:2f:31:c3:a1:01:
39:9a:71:59:bc:0c:d9:7b:97:ad:17:52:f5:f0:86:b3:da:12:
26:ce:de:cc:00:d9:46:22:03:90:6f:c8:36:b7:df:18:0b:2a:
35:af:51:fa:b8:d9:8b:c7:60:29:01:13:21:cf:fa:fa:2f:87:
f3:d7:06:2a:a7:52:8f:08:b3:10:f6:99:60:37:bf:c9:a8:f6:
b6:f2:ef:ff:d8:a1:49:00:79:98:54:e0:02:77:90:9d:b6:66:
a9:28:29:2b:e1:93:2a:f4:bd:01:7e:a5:58:14:74:ee:10:da:
a4:1f:59:5d:ff:16:df:02:1b:5f:b4:5b:27:72:dc:da:ba:69:
47:db:ee:f4:7c:0a:0f:79:4a:a5:d6:c0:48:e8:0b:ed:ba:94:
c5:bc:02:cd:ad:f8:f3:53:90:ee:12:2f:6a:91:87:c1:84:a9:
37:43:62:ad:07:ac:e0:95:bb:0c:3f:c6:56:d5:06:3e:0e:e7:
78:ae:b5:6c:47:e7:cf:36:5e:e1:cb:ab:8a:66:81:ab:74:88:
cb:a1:fa:e2:c6:86:6f:75:62:11:d2:9e:22:f5:24:23:7f:dd:
e0:78:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:58:13 2025 by rpki-client