Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa
File: FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa (raw, json)
Hash identifier: 2GgPUgLEEuhVk0MSxFLT+LbEd2G3F3hNCc8xhLO7cXs=
Subject key identifier: 14:8A:FF:A1:1A:66:40:55:08:4F:A7:31:B5:07:BB:18:71:A6:A0:00
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 0197A705BC6F4E33EF356C18F4B752DF7BFA
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa
Signing time: Wed 25 Jun 2025 12:17:40 +0000
ROA not before: Wed 25 Jun 2025 12:17:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31225
IP address blocks: 83.219.224.0/19 maxlen: 19
83.219.224.0/22 maxlen: 22
83.219.225.0/24 maxlen: 24
83.219.226.0/24 maxlen: 24
83.219.227.0/24 maxlen: 24
83.219.228.0/24 maxlen: 24
83.219.229.0/24 maxlen: 24
83.219.230.0/24 maxlen: 24
83.219.231.0/24 maxlen: 24
83.219.232.0/24 maxlen: 24
83.219.233.0/24 maxlen: 24
83.219.235.0/24 maxlen: 24
83.219.236.0/24 maxlen: 24
83.219.237.0/24 maxlen: 24
83.219.238.0/24 maxlen: 24
83.219.239.0/24 maxlen: 24
83.219.240.0/24 maxlen: 24
83.219.241.0/24 maxlen: 24
83.219.242.0/24 maxlen: 24
83.219.244.0/24 maxlen: 24
83.219.246.0/24 maxlen: 24
83.219.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:05:bc:6f:4e:33:ef:35:6c:18:f4:b7:52:df:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jun 25 12:17:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=148affa11a664055084fa731b507bb1871a6a000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:81:da:42:3a:c5:ae:95:42:aa:c4:a5:e9:
69:b6:3f:7f:bd:27:96:c7:e3:35:01:cf:77:73:11:
ba:79:06:e9:19:74:9e:7d:eb:b6:8e:9c:1b:50:cc:
06:c8:ac:be:fd:bb:c8:d8:3c:43:1c:05:38:db:22:
16:b4:6e:51:27:64:64:76:16:38:d6:17:e1:f8:60:
c3:af:b6:0f:85:37:af:e9:d2:60:39:1b:78:8f:ec:
7b:ba:e6:64:60:2d:43:6e:e9:81:e3:e7:0d:37:ee:
7d:89:6d:d0:73:db:06:42:2e:0a:eb:c6:36:b8:37:
48:85:03:3d:94:9b:d3:d0:d4:89:27:ce:a8:aa:8f:
b4:b4:07:3b:81:15:06:c7:79:4c:81:93:32:7c:d0:
2c:d7:8b:b5:ef:ac:79:a6:e0:3d:a3:1a:e3:fa:64:
66:42:36:e5:d0:e5:99:48:ae:f1:bb:0a:b5:14:9c:
73:f2:e3:9a:a1:aa:bb:ec:2f:ca:09:1e:09:5c:96:
4d:c3:dd:ee:e5:88:49:d6:e4:3d:85:a3:88:34:cc:
ce:73:7e:2a:5f:11:a1:be:0a:09:35:17:5d:39:25:
01:55:30:e6:cb:d8:e2:38:96:f2:de:bb:a9:d2:08:
db:51:33:7b:ab:58:8a:fc:dc:7e:5c:90:34:b5:3c:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:FF:A1:1A:66:40:55:08:4F:A7:31:B5:07:BB:18:71:A6:A0:00
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:2a:a1:d4:14:2d:83:0f:c0:65:27:2b:a3:11:06:8e:0d:ad:
8f:70:fa:12:79:fd:bb:ff:fa:47:07:22:33:37:cd:4e:9c:93:
e3:f2:81:94:42:1c:8d:e6:5b:e4:c8:80:23:71:10:89:58:86:
b7:d4:4e:23:53:f6:46:32:86:68:71:f4:80:57:0a:ba:56:3c:
1b:e1:97:37:4e:b2:e8:54:4a:06:7e:61:61:cf:d7:6c:8f:2f:
e4:e5:f2:48:86:f0:0c:46:67:2a:11:ad:64:eb:60:88:24:82:
66:12:d2:32:c7:f8:56:61:16:81:99:b7:2e:4d:e2:79:d8:4e:
43:d4:c2:03:3f:a0:7c:cf:c1:b9:6d:80:ee:2d:01:4c:95:bd:
6a:a2:aa:37:23:f5:2b:92:f4:f6:f2:8a:5b:d8:39:f6:41:7e:
3e:55:a6:7a:58:55:b7:11:b8:ee:21:45:b3:ef:fe:4b:66:2d:
83:29:c3:c0:e1:00:01:8c:06:9a:36:44:a9:c4:70:f5:e9:35:
19:c5:61:2d:89:55:75:ad:c7:5b:e1:ab:d2:cb:23:dd:41:b5:
16:dc:f9:64:cb:15:b3:6a:48:87:72:38:3b:ed:5e:f2:29:e0:
23:3e:ca:d1:88:ed:5a:b3:d5:97:e6:b5:c6:20:aa:4e:c5:ae:
39:e9:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:56:58 2025 by rpki-client