Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa
File: Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa (raw, json)
Hash identifier: 0YDfRJkLurctQB+o/ewy6zBfFbZnDiGSOFrKrpKkhg8=
Subject key identifier: 23:3E:28:83:56:0D:8D:96:DE:F9:9C:C2:DD:1A:24:E9:F5:93:C4:0B
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 0198D1FB9CBAFE8D232436F41064A918E138
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa
Signing time: Fri 22 Aug 2025 13:33:04 +0000
ROA not before: Fri 22 Aug 2025 13:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200428
IP address blocks: 77.93.92.0/22 maxlen: 22
185.151.60.0/22 maxlen: 22
185.163.4.0/22 maxlen: 22
185.229.208.0/22 maxlen: 22
2a0a:2640::/29 maxlen: 29
2a0a:5800::/29 maxlen: 29
2a0d:ce00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:fb:9c:ba:fe:8d:23:24:36:f4:10:64:a9:18:e1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Aug 22 13:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=233e2883560d8d96def99cc2dd1a24e9f593c40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:e2:33:01:4f:d4:90:a7:59:41:a0:f0:4d:
c0:9d:81:50:56:49:a5:4b:23:e7:5a:a2:7c:46:c7:
cb:f9:3b:af:44:0c:c7:c7:4d:de:4c:10:a2:b4:9d:
21:a2:ea:9a:94:c6:85:e1:59:18:0a:1a:26:0d:bf:
62:8c:fb:6f:a0:bf:16:7b:c1:06:2e:0e:c6:71:13:
d5:3c:71:0e:b3:59:e4:5e:b7:c3:f2:c7:fd:0d:06:
42:94:7d:4a:bb:cc:41:5c:b9:ac:27:65:be:c4:88:
00:58:4d:81:06:2d:52:7b:71:a5:3f:2d:b5:f0:c5:
5e:b5:7e:89:b5:b0:2c:93:37:74:d1:7a:b4:13:0c:
ec:9e:86:87:c6:a3:88:06:77:bc:c0:13:38:dc:86:
39:ea:1a:a6:0a:f3:9c:92:fa:74:c1:b9:54:ff:f1:
7c:2c:07:b3:5b:0b:64:5d:4c:f6:4e:5b:1b:00:63:
aa:01:16:4d:80:d1:3b:30:37:eb:81:61:27:10:9a:
45:31:86:45:af:bd:98:86:7e:2a:52:a0:bc:6a:58:
65:b0:1e:ca:46:a1:b5:22:b5:6c:87:75:c6:d7:9d:
57:8c:2e:02:26:78:d7:67:1c:b7:33:b9:8e:fa:71:
5f:31:8b:3d:b0:62:ea:54:45:36:0c:3b:01:84:a6:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:28:83:56:0D:8D:96:DE:F9:9C:C2:DD:1A:24:E9:F5:93:C4:0B
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/Iz4og1YNjZbe-ZzC3Rok6fWTxAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.92.0/22
185.151.60.0/22
185.163.4.0/22
185.229.208.0/22
IPv6:
2a0a:2640::/29
2a0a:5800::/29
2a0d:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
6f:28:17:39:35:9d:32:c1:6e:9d:c6:18:f3:33:09:61:8c:d4:
7e:af:ca:2d:82:b5:ec:86:05:ca:ce:45:7f:13:3c:4f:8d:54:
7b:5a:34:9d:4c:d1:f6:e1:74:fd:7e:ce:f5:f7:3a:7e:16:03:
43:d1:ef:a0:16:63:a8:d8:ae:53:5c:11:34:d8:ba:04:30:70:
d8:f3:d8:10:b4:7b:5e:84:1e:10:58:65:e5:59:ae:0e:e4:3f:
57:8b:08:2f:db:5c:f1:a4:c8:df:be:4d:3e:ba:ac:ec:55:16:
6c:0a:92:12:c4:6f:32:67:76:e7:55:9d:78:f9:94:65:4d:4f:
09:d3:9a:a8:e6:52:a0:a3:96:98:31:fd:8f:76:2c:9f:df:f6:
52:21:60:67:ba:f2:93:3e:75:ec:5f:41:aa:1b:c5:2b:c7:de:
0a:37:04:85:3c:bb:37:3c:90:16:c4:7b:b7:44:30:be:c9:d9:
3e:5d:cb:92:91:a0:fb:fc:a8:42:f0:42:0f:0f:2d:d0:a4:6b:
2d:45:72:aa:49:e4:50:58:76:cf:9c:b1:4b:ed:4e:02:e3:96:
e6:10:e9:77:d3:11:1b:d2:49:41:c2:9b:1e:86:45:39:52:5d:
b2:d1:6b:81:4f:60:0a:57:9d:a9:ba:dd:3b:29:cc:d4:49:36:
07:70:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:38 2025 by rpki-client