Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IK9P1R_M7bYoKhVmfHPoO1MEDng.roa
File: IK9P1R_M7bYoKhVmfHPoO1MEDng.roa (raw, json)
Hash identifier: oRKV/YxLncSdkuhONXJwS2H1QPZOUAtcRx4wr4mfEA8=
Subject key identifier: 20:AF:4F:D5:1F:CC:ED:B6:28:2A:15:66:7C:73:E8:3B:53:04:0E:78
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198AABD871AC8BEB395E3DEFACB2CBE4EB0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IK9P1R_M7bYoKhVmfHPoO1MEDng.roa
Signing time: Thu 14 Aug 2025 22:40:04 +0000
ROA not before: Thu 14 Aug 2025 22:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 64.188.73.0/24 maxlen: 24
64.188.75.0/24 maxlen: 24
64.188.92.0/22 maxlen: 24
64.188.96.0/24 maxlen: 24
64.188.97.0/24 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
77.239.104.0/24 maxlen: 24
77.239.105.0/24 maxlen: 24
77.239.122.0/24 maxlen: 24
77.239.123.0/24 maxlen: 24
150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:bd:87:1a:c8:be:b3:95:e3:de:fa:cb:2c:be:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 14 22:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20af4fd51fccedb6282a15667c73e83b53040e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:61:d5:db:80:42:06:ce:90:d8:93:22:f6:
41:c4:09:ea:08:f5:8c:1f:91:72:85:eb:93:6c:85:
03:f8:90:ed:56:77:9d:6c:13:b1:cc:e2:31:66:08:
1d:ae:ca:56:0b:13:3c:78:c0:87:39:d6:ae:da:97:
56:21:bf:37:56:3d:99:73:40:da:7b:6e:e9:cc:47:
dc:dd:d9:47:aa:29:b7:c7:b7:d7:c3:31:9e:58:18:
7d:3b:9d:36:f4:da:88:fe:50:55:c1:ff:c9:58:d4:
a5:51:d9:ba:1e:7e:0c:98:22:fe:ab:67:1b:d4:85:
a4:28:74:ed:b6:bc:22:85:ff:89:17:36:56:5b:e6:
66:26:67:75:f3:e9:31:11:04:84:0a:3e:8d:c6:76:
21:eb:9a:2d:62:aa:e1:48:97:63:6e:01:ec:ad:aa:
70:74:22:06:03:dd:2d:e7:bc:83:f7:36:a5:83:b8:
f3:a7:95:7f:2d:d6:cd:82:6e:c5:2c:9c:ce:60:8e:
1f:fe:31:d0:7c:f2:f5:a1:d4:83:53:a8:c2:b7:1a:
ec:81:86:58:9e:f6:04:97:5c:bd:89:59:9a:a4:31:
7a:19:24:8e:06:4c:50:42:28:91:b3:13:50:4a:e9:
6a:d7:5b:8b:82:ea:07:ff:52:f0:9a:86:29:08:00:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:4F:D5:1F:CC:ED:B6:28:2A:15:66:7C:73:E8:3B:53:04:0E:78
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IK9P1R_M7bYoKhVmfHPoO1MEDng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.73.0/24
64.188.75.0/24
64.188.92.0-64.188.97.255
64.188.124.0-64.188.126.255
77.239.104.0/23
77.239.122.0/23
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
185.184.122.0/23
185.207.133.0/24
Signature Algorithm: sha256WithRSAEncryption
35:bf:d4:67:db:c5:e9:6c:ba:f5:2e:e7:0c:c1:68:59:38:15:
81:c2:ed:3a:be:06:13:0c:34:49:34:b2:9a:04:3a:52:27:96:
90:ad:64:12:8b:3d:63:a6:48:ea:1e:10:de:90:21:80:21:ea:
67:f8:93:6e:2e:94:95:df:24:12:a0:4a:17:68:12:32:73:e2:
1e:41:4a:ae:d0:67:9c:0f:e2:7f:78:c7:8f:b3:03:e7:6a:9d:
1e:54:27:74:df:15:89:b8:54:fe:71:41:7b:5b:0c:a6:cf:23:
bd:0f:33:d1:09:6d:27:98:9a:c5:f9:08:38:e1:54:ea:c7:a6:
7c:6c:c0:85:db:9f:69:e2:c0:c4:cd:c3:76:23:2c:05:38:f4:
fd:2b:b2:ea:10:a9:5f:61:8a:04:9e:ea:33:69:78:6b:98:66:
1c:91:0f:a8:af:84:70:1a:dd:9d:6b:79:60:10:5e:19:e9:57:
12:0c:1d:a1:ab:cb:1b:ea:86:62:13:68:cd:f5:4c:7e:c6:f1:
96:05:12:34:fd:cb:2e:2d:64:bf:a1:f2:aa:d5:75:17:3d:61:
a3:31:3b:9b:ae:6a:cd:26:ea:28:44:c7:7e:db:ed:80:c0:fb:
26:31:9f:5b:7d:f8:a2:50:bc:3e:68:87:b0:65:a0:76:e1:50:
81:b9:39:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:44 2025 by rpki-client