Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/1-LckRNqKjyMesAtPmDCk4KEP-Mo.roa
File: 1-LckRNqKjyMesAtPmDCk4KEP-Mo.roa (raw, json)
Hash identifier: VeolAIgJZ9hmwKtlthUu1eDV7cA/Ju6WExSii+eRJAY=
Subject key identifier: F8:B7:24:44:DA:8A:8F:23:1E:B0:0B:4F:98:30:A4:E0:A1:0F:F8:CA
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 0198D0B204F161B3A534B88C3B89F92D5A7D
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/1-LckRNqKjyMesAtPmDCk4KEP-Mo.roa
Signing time: Fri 22 Aug 2025 07:33:04 +0000
ROA not before: Fri 22 Aug 2025 07:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198144
IP address blocks: 93.113.102.0/24 maxlen: 24
93.117.65.0/24 maxlen: 24
103.97.206.0/23 maxlen: 23
128.65.152.0/21 maxlen: 21
128.65.152.0/23 maxlen: 23
128.65.152.0/24 maxlen: 24
128.65.153.0/24 maxlen: 24
128.65.154.0/24 maxlen: 24
128.65.155.0/24 maxlen: 24
128.65.156.0/24 maxlen: 24
128.65.157.0/24 maxlen: 24
128.65.158.0/24 maxlen: 24
128.65.159.0/24 maxlen: 24
176.97.228.0/22 maxlen: 22
176.97.228.0/23 maxlen: 23
176.97.228.0/24 maxlen: 24
176.97.229.0/24 maxlen: 24
176.97.230.0/23 maxlen: 23
176.97.230.0/24 maxlen: 24
176.97.231.0/24 maxlen: 24
185.78.212.0/22 maxlen: 22
185.78.212.0/23 maxlen: 23
185.78.214.0/23 maxlen: 23
188.208.111.0/24 maxlen: 24
188.211.239.0/24 maxlen: 24
212.85.236.0/22 maxlen: 22
212.85.236.0/23 maxlen: 23
212.85.238.0/23 maxlen: 23
212.85.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:b2:04:f1:61:b3:a5:34:b8:8c:3b:89:f9:2d:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Aug 22 07:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b72444da8a8f231eb00b4f9830a4e0a10ff8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:c9:68:86:cb:05:06:d5:8c:56:be:b8:b0:
6e:8e:3a:fa:4a:d9:16:d5:03:5f:59:77:2b:df:77:
f8:ed:b2:f7:8e:91:b7:90:3a:b6:13:7f:8e:b6:d3:
55:39:61:16:c7:93:8b:63:4c:ec:2d:6b:6a:b3:f4:
f7:db:cf:52:b8:e0:9f:c1:ba:a3:e4:1a:1e:b1:9f:
78:13:5b:eb:3a:8b:1a:4c:14:fd:7e:2d:8c:a1:d3:
fd:bf:1d:a0:ca:1f:ff:1a:5f:58:64:f4:58:4d:28:
33:d6:80:a9:cb:6f:bf:f8:ab:1a:4d:9f:6c:d4:cd:
30:bc:93:b2:dc:c8:96:3e:d0:7a:4b:b5:02:8e:7e:
3c:31:33:27:5d:f5:b0:d6:62:f8:0f:c5:47:93:ca:
62:a5:a2:2a:4d:77:4a:44:9c:a8:a5:3d:57:2e:24:
30:67:78:7e:45:28:1a:f3:f7:4c:ad:9b:d3:b9:d5:
da:9d:2c:c2:66:9a:8d:bc:14:70:f5:f7:4d:b2:2c:
a9:8b:1c:8c:b9:86:83:6e:43:61:17:6e:a0:df:f1:
9f:6a:8c:88:3b:4f:45:8b:19:4a:67:8f:44:ba:b4:
c0:ef:be:c4:14:bf:26:de:65:3a:49:9d:de:23:7a:
ba:82:c4:3e:46:52:8b:c6:47:99:c6:66:b0:a1:60:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:24:44:DA:8A:8F:23:1E:B0:0B:4F:98:30:A4:E0:A1:0F:F8:CA
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/1-LckRNqKjyMesAtPmDCk4KEP-Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.102.0/24
93.117.65.0/24
103.97.206.0/23
128.65.152.0/21
176.97.228.0/22
185.78.212.0/22
188.208.111.0/24
188.211.239.0/24
212.85.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:fd:79:06:22:0c:c7:d4:48:a4:c2:c7:fb:df:43:b4:66:23:
1b:25:75:57:00:f8:57:d8:02:87:d7:d7:7a:24:58:38:2f:6e:
87:a2:46:1b:a6:95:04:b0:19:88:01:27:c8:50:f3:cb:25:8b:
81:83:72:7b:ea:77:ca:76:5b:6f:7c:e5:0e:a6:c6:11:f0:16:
6d:35:f5:66:54:03:2d:fe:25:72:ff:74:7a:56:9d:92:30:0f:
f9:6d:92:8d:db:06:43:70:12:55:b1:60:2f:4f:38:91:69:f4:
92:0e:59:15:e5:42:1b:0a:f5:76:85:a4:6d:80:c0:cb:26:11:
15:ce:5e:f3:e6:1d:21:60:88:52:30:7f:cd:dd:c2:00:12:46:
f8:9a:90:db:b1:b3:ff:f9:ec:da:7c:88:a1:4a:bd:5c:e7:a5:
ed:f1:64:a5:60:cd:4a:ed:69:e9:bb:53:5c:72:15:6b:92:13:
6d:62:a8:c3:52:7a:00:90:87:50:4f:54:57:a4:5e:f0:96:bd:
1d:70:a7:7a:54:f9:52:f6:74:23:c7:64:e2:c3:9a:f1:eb:e4:
a1:f2:4c:d4:28:dc:e6:7a:ea:3d:11:ab:1b:3d:e3:1d:1d:e8:
d5:b8:57:58:9f:d2:36:18:51:36:dc:d0:e7:25:a9:c8:0d:b6:
83:a7:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:46 2025 by rpki-client