Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/feLtnRMkzU1rqe5DPxi47-2h3dM.roa
File: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (raw, json)
Hash identifier: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=
Subject key identifier: 7D:E2:ED:9D:13:24:CD:4D:6B:A9:EE:43:3F:18:B8:EF:ED:A1:DD:D3
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 0198AD3712059C60294A407DB3E82852E48A
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/feLtnRMkzU1rqe5DPxi47-2h3dM.roa
Signing time: Fri 15 Aug 2025 10:12:04 +0000
ROA not before: Fri 15 Aug 2025 10:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34191
IP address blocks: 185.213.32.0/22 maxlen: 22
185.213.32.0/24 maxlen: 24
185.213.33.0/24 maxlen: 24
185.213.34.0/24 maxlen: 24
194.145.239.0/24 maxlen: 24
2a0c:ed80::/29 maxlen: 29
2a0c:ed80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:37:12:05:9c:60:29:4a:40:7d:b3:e8:28:52:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Aug 15 10:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de2ed9d1324cd4d6ba9ee433f18b8efeda1ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:1f:a3:de:88:11:46:50:b3:9c:19:8f:fb:
b0:bb:29:19:aa:5a:d0:6b:9a:0b:6c:4b:e0:ed:84:
1d:f0:df:cf:9f:92:c2:c4:a7:d3:1c:48:42:5f:c7:
ad:4d:5a:68:b9:62:2e:07:4b:fd:58:16:89:bf:18:
61:40:bd:af:c2:45:45:a6:45:5f:9f:86:f5:6e:f3:
ea:04:bf:65:ad:3d:70:79:54:68:39:51:fd:3d:95:
77:a4:66:3f:f1:e4:20:09:3e:1f:87:80:1c:fc:00:
78:6f:89:4d:f7:5c:b4:ce:f6:f9:f1:3a:1b:db:70:
3d:27:34:3c:2f:9a:7b:95:4a:19:1c:7b:b6:64:61:
c4:a9:5f:a4:ae:fb:2e:70:95:47:d1:23:0f:92:6d:
9e:f0:1d:32:2b:9a:73:22:81:00:95:c9:d2:ba:12:
91:3a:dd:27:98:39:0d:b5:19:e6:b8:d6:0e:c5:03:
a6:2d:43:05:c6:e8:be:50:5a:ad:1f:72:78:12:c2:
06:35:2b:91:1f:37:ac:3e:48:6d:c6:75:92:44:80:
e0:ae:3f:39:0f:1e:66:d2:e1:d7:a7:52:3c:a0:75:
49:80:1d:72:ea:6e:da:31:a0:db:5b:2f:3e:7c:b5:
33:c9:99:2a:2d:81:8c:44:00:54:e0:e8:ae:11:b1:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:ED:9D:13:24:CD:4D:6B:A9:EE:43:3F:18:B8:EF:ED:A1:DD:D3
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/feLtnRMkzU1rqe5DPxi47-2h3dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.32.0/22
194.145.239.0/24
IPv6:
2a0c:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
62:90:8a:e7:0c:2a:fa:33:8c:06:f6:e0:e1:ee:7c:4e:72:f7:
3e:61:39:f4:c0:d9:4d:e2:b0:85:b5:63:4c:c6:5b:95:db:55:
f4:88:cf:19:a0:56:e9:97:45:c2:ae:a6:d0:ac:06:d1:e5:d8:
33:9f:95:96:06:e1:1c:10:d7:d4:d7:44:16:b8:44:c1:a0:b1:
48:94:09:0b:5d:1c:9f:62:6c:e4:61:a2:3f:87:68:bf:b4:d2:
9f:f4:ed:57:8d:99:79:d6:6f:7e:31:41:d7:60:20:1a:35:0f:
88:b5:e7:0a:34:79:33:88:75:16:bb:14:8b:96:c7:be:fe:ed:
60:c7:89:1b:d8:6b:56:6e:75:2c:16:17:17:ac:b8:4f:d2:ba:
06:76:33:25:6a:9f:c1:be:90:39:ef:33:6e:f5:75:0c:90:d4:
94:a4:77:54:9b:12:e9:e3:c1:3f:9a:0a:68:28:de:86:07:1c:
ba:81:7d:43:2b:6a:3d:6d:80:38:34:d1:c9:68:2d:0b:03:18:
71:e3:81:d8:6f:d6:10:f6:bb:cc:c2:e5:75:b5:fe:90:84:2a:
f3:7c:37:8d:c2:d9:ed:15:18:f3:a1:58:47:4e:e4:9e:cf:9d:
1c:34:d3:0f:21:9f:bd:b1:55:34:0f:2c:af:e3:2d:8e:96:b5:
2a:f2:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:18 2025 by rpki-client