Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zO4xctctClIscJ2x3tsGp6tIplM.roa
File: zO4xctctClIscJ2x3tsGp6tIplM.roa (raw, json)
Hash identifier: LRfMZBE/Ep2lQtujzSGyRMNJaNMGhkkfCR7eg83fMCQ=
Subject key identifier: CC:EE:31:72:D7:2D:0A:52:2C:70:9D:B1:DE:DB:06:A7:AB:48:A6:53
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197998B79C3C89E955DDF73EE291E3E3F2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zO4xctctClIscJ2x3tsGp6tIplM.roa
Signing time: Sun 22 Jun 2025 21:29:04 +0000
ROA not before: Sun 22 Jun 2025 21:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
80.240.88.0/21 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.228.0/24 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.249.0/24 maxlen: 24
89.213.250.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:8b:79:c3:c8:9e:95:5d:df:73:ee:29:1e:3e:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 22 21:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccee3172d72d0a522c709db1dedb06a7ab48a653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ab:cd:33:38:71:c2:e6:31:1a:0b:79:22:e0:
f6:63:66:da:e6:33:e6:4a:2c:f6:03:42:c1:f3:9d:
2f:31:00:49:16:49:b8:24:dc:a9:fb:02:bb:66:01:
8b:8c:b1:9d:21:a7:2c:74:a5:07:a3:2f:59:0e:c9:
b7:ca:70:d4:e4:69:4a:b2:cd:c0:22:55:08:8f:f7:
39:b0:a2:97:91:a5:54:1b:20:bf:ae:ba:69:8d:d1:
17:1e:e4:c4:8c:1d:d8:55:8c:4b:16:8c:09:c2:07:
7f:60:f2:76:40:1f:8a:0e:02:ff:63:4d:ea:ce:94:
5b:2a:84:82:09:d8:9a:69:7a:04:76:cd:af:b0:c5:
52:89:91:b5:76:1c:19:91:9c:2d:94:b7:8f:e2:e8:
19:c7:fe:d1:34:14:ac:50:9c:f1:86:a5:5f:b0:5a:
70:51:a4:fb:38:3a:48:02:74:b6:1f:53:4f:ce:16:
43:02:36:fa:19:2d:7d:d7:00:f2:e8:2c:73:66:2b:
10:6d:19:f8:82:8c:96:f9:45:d7:32:d9:04:db:0e:
34:4c:9d:82:cc:75:f9:cc:c5:ac:fc:65:43:dd:66:
f4:aa:6b:1c:49:f8:cb:da:08:a0:33:0d:81:e9:b2:
4c:6e:f8:7e:89:42:56:65:f6:70:d5:98:73:08:9d:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:31:72:D7:2D:0A:52:2C:70:9D:B1:DE:DB:06:A7:AB:48:A6:53
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zO4xctctClIscJ2x3tsGp6tIplM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
80.240.88.0/21
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.147.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.228.0/24
89.213.240.0/23
89.213.249.0-89.213.250.255
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
94:40:e2:a2:f0:5d:00:5d:58:a5:73:89:b3:c7:69:1a:ae:d6:
36:18:5b:3b:4f:6e:30:da:91:1f:19:dc:6e:bc:e6:c3:fd:f7:
e3:fa:32:e6:15:8f:7c:34:06:07:5b:29:81:a4:ba:95:a6:f9:
9d:cc:72:8d:a8:b2:06:86:b3:cc:c6:7c:51:6c:97:83:5c:6e:
fd:a2:ad:3e:7d:ea:b2:60:d8:9b:af:44:dd:33:2b:e0:c7:de:
38:c8:a7:2a:71:de:2f:fb:02:d1:93:0f:b7:b2:d9:9c:9f:87:
fa:cd:ab:49:9a:5c:6d:da:55:90:e2:12:16:f1:e9:fc:a7:55:
90:dd:a4:04:14:27:0e:85:e1:61:97:32:48:93:fa:36:d8:e7:
e0:4e:bf:8d:8a:79:c0:58:7b:35:58:88:83:11:6e:46:60:ed:
c1:31:43:9b:f9:32:85:f2:ae:8a:9b:a4:da:53:a1:1d:bd:a0:
b1:8a:a8:ed:9c:98:0f:e8:dd:b8:76:f8:de:cf:a2:e9:4b:12:
fd:db:c8:17:5f:c6:7d:ed:a6:9d:96:c7:7f:92:21:89:6a:88:
fc:0b:c3:a9:09:b5:0a:36:92:3a:c5:c8:19:da:92:64:77:4b:
31:2e:80:c9:f1:d1:f2:08:49:3a:fe:13:30:b0:a8:0b:6d:15:
19:a9:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:10 2025 by rpki-client