Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/FBeQi5ArBf1E7cMHEimRw67RdIM.roa
File: FBeQi5ArBf1E7cMHEimRw67RdIM.roa (raw, json)
Hash identifier: YCzqM1ZbEMATGISnbwhdypmhM/poe4A/q36PN+W/c/M=
Subject key identifier: 14:17:90:8B:90:2B:05:FD:44:ED:C3:07:12:29:91:C3:AE:D1:74:83
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 0197A0FA0F1CA0D50DABD18B00A065951AE6
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/FBeQi5ArBf1E7cMHEimRw67RdIM.roa
Signing time: Tue 24 Jun 2025 08:07:11 +0000
ROA not before: Tue 24 Jun 2025 08:07:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51825
IP address blocks: 46.31.96.0/21 maxlen: 21
46.31.96.0/23 maxlen: 23
46.31.96.0/24 maxlen: 24
46.31.97.0/24 maxlen: 24
46.31.98.0/23 maxlen: 23
46.31.98.0/24 maxlen: 24
46.31.99.0/24 maxlen: 24
46.31.100.0/23 maxlen: 23
46.31.100.0/24 maxlen: 24
46.31.101.0/24 maxlen: 24
46.31.102.0/23 maxlen: 23
46.31.102.0/24 maxlen: 24
46.31.103.0/24 maxlen: 24
147.234.92.0/22 maxlen: 22
147.234.96.0/21 maxlen: 21
185.24.204.0/22 maxlen: 22
185.24.204.0/23 maxlen: 23
185.24.204.0/24 maxlen: 24
185.24.205.0/24 maxlen: 24
185.24.206.0/23 maxlen: 23
185.24.206.0/24 maxlen: 24
185.24.207.0/24 maxlen: 24
213.137.64.0/20 maxlen: 20
213.137.64.0/24 maxlen: 24
213.137.65.0/24 maxlen: 24
213.137.66.0/24 maxlen: 24
213.137.67.0/24 maxlen: 24
213.137.70.0/24 maxlen: 24
213.137.71.0/24 maxlen: 24
213.137.72.0/23 maxlen: 23
213.137.73.0/24 maxlen: 24
213.137.78.0/24 maxlen: 24
2a02:5080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:fa:0f:1c:a0:d5:0d:ab:d1:8b:00:a0:65:95:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Jun 24 08:07:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1417908b902b05fd44edc307122991c3aed17483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:b0:4f:fc:52:8f:2a:80:1a:81:52:a8:a5:
56:59:f7:6b:fc:41:7d:2f:16:fb:92:27:c8:ac:dc:
07:15:8f:5c:86:61:d3:91:89:3b:6b:3d:9d:9b:d8:
20:8e:b4:71:62:0d:9f:fb:43:4e:0c:dd:96:63:b1:
87:72:ea:93:88:f2:b1:32:de:64:53:4f:ab:10:3f:
a0:96:da:6c:29:de:84:3c:33:00:70:d3:9d:e6:b6:
aa:67:46:aa:00:a6:13:80:13:cf:c2:56:81:89:d9:
d4:05:9d:18:58:8a:7f:e7:a2:1d:f9:45:4f:5c:3f:
63:5c:b8:65:c0:1d:52:58:75:66:81:c4:84:a3:a3:
03:be:a9:24:60:ca:16:23:8e:16:b6:8e:3f:ea:b7:
32:e1:b0:18:82:ce:81:fd:92:b8:85:9e:38:d7:9b:
89:32:71:fe:ed:df:09:7c:4c:5a:59:c9:34:b6:d5:
61:c3:ab:70:d7:e9:38:56:f0:b7:1c:1d:80:00:1d:
06:94:45:03:65:3c:fd:fb:7b:72:e0:85:0e:25:d8:
7e:f7:20:ba:32:49:97:26:5b:2b:a7:79:da:c1:bf:
50:dc:3d:d7:bd:c5:6f:74:47:f7:a2:c5:3c:b8:18:
48:ee:f3:96:a5:97:61:8d:ee:6b:11:ce:5a:e8:f4:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:17:90:8B:90:2B:05:FD:44:ED:C3:07:12:29:91:C3:AE:D1:74:83
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/FBeQi5ArBf1E7cMHEimRw67RdIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.96.0/21
147.234.92.0-147.234.103.255
185.24.204.0/22
213.137.64.0/20
IPv6:
2a02:5080::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ed:c7:43:76:86:10:3b:b0:0e:76:61:9f:49:7f:ef:9e:64:
2d:5b:81:1c:a7:64:ee:fc:55:93:9b:20:3f:fd:a6:6c:36:5b:
b8:b3:d1:13:b1:f8:67:78:8d:2d:f2:bc:89:8f:ad:d2:e7:65:
c8:e1:0c:df:6f:02:88:a3:83:9d:5b:07:e5:38:27:13:3a:2e:
40:c2:e8:e4:df:97:aa:fe:d8:98:d6:a9:16:a5:62:f6:27:9a:
1a:9d:e3:77:43:f0:11:de:c7:82:72:91:43:5a:34:b9:44:69:
b0:8c:18:56:2d:59:26:00:57:27:c0:ae:a1:9d:6d:fc:3b:50:
6a:41:cd:d6:11:30:15:dc:41:51:59:e8:57:34:d7:1e:14:d3:
10:7e:a2:4b:9b:24:53:15:54:90:f1:d3:f1:eb:fa:80:c1:0a:
52:ca:9e:e9:3d:49:81:4f:36:43:75:9e:38:78:86:88:e8:f5:
13:1f:11:cf:4a:04:2b:03:91:c4:e4:38:6d:37:22:0d:6f:c2:
15:f5:86:c4:71:42:3c:27:02:63:df:bc:54:c2:eb:bc:dc:3b:
39:2d:d1:89:c6:01:49:36:86:2e:3b:34:28:78:df:d3:2b:bd:
5f:b1:44:23:5c:41:28:c8:e2:a0:25:b4:e0:0e:3a:43:64:8b:
b2:e4:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:30:04 2025 by rpki-client