Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/b_UoGYayb5QfNyeneZjJT_QtOFI.roa
File: b_UoGYayb5QfNyeneZjJT_QtOFI.roa (raw, json)
Hash identifier: sbBWaGAbXLw5znugIJpl3PpXDykuGkPKUMcQNjuB0qE=
Subject key identifier: 6F:F5:28:19:86:B2:6F:94:1F:37:27:A7:79:98:C9:4F:F4:2D:38:52
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 01978C67D153C64E901967F528331C50AC5B
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/b_UoGYayb5QfNyeneZjJT_QtOFI.roa
Signing time: Fri 20 Jun 2025 08:15:03 +0000
ROA not before: Fri 20 Jun 2025 08:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 37.17.232.0/21 maxlen: 21
45.80.136.0/22 maxlen: 22
77.74.80.0/21 maxlen: 21
77.109.128.0/18 maxlen: 18
77.109.128.0/19 maxlen: 19
77.109.160.0/19 maxlen: 19
80.253.88.0/21 maxlen: 21
81.6.32.0/20 maxlen: 20
82.197.160.0/19 maxlen: 19
82.197.160.0/20 maxlen: 20
82.197.176.0/20 maxlen: 20
85.195.192.0/18 maxlen: 18
85.195.192.0/20 maxlen: 20
85.195.208.0/20 maxlen: 20
85.195.224.0/19 maxlen: 19
85.195.224.0/20 maxlen: 20
85.195.240.0/20 maxlen: 20
109.202.192.0/19 maxlen: 19
141.195.80.0/20 maxlen: 20
185.72.64.0/22 maxlen: 22
185.137.172.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
185.201.248.0/22 maxlen: 22
185.246.104.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
193.223.80.0/20 maxlen: 20
195.134.128.0/19 maxlen: 19
212.51.128.0/19 maxlen: 19
212.51.128.0/20 maxlen: 20
212.51.144.0/20 maxlen: 20
213.144.128.0/19 maxlen: 19
213.144.128.0/20 maxlen: 20
213.144.144.0/20 maxlen: 20
217.118.192.0/21 maxlen: 21
217.118.200.0/22 maxlen: 22
2001:1620::/32 maxlen: 32
2a02:168::/30 maxlen: 30
2a02:168::/32 maxlen: 32
2a02:169::/32 maxlen: 32
2a07:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:67:d1:53:c6:4e:90:19:67:f5:28:33:1c:50:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Jun 20 08:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ff5281986b26f941f3727a77998c94ff42d3852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:dc:9e:e3:65:0b:f6:fd:31:a3:12:49:bf:
04:38:6a:3c:14:cc:cf:40:70:b6:23:72:14:6a:56:
52:36:dd:17:3f:d9:56:86:99:d4:d3:77:f1:8d:d6:
ed:14:5c:c8:1c:0f:0a:e4:18:a4:23:b9:80:18:58:
2a:45:45:36:df:0d:2d:a4:ec:4d:2c:4d:7e:ef:70:
bb:c1:d1:51:66:a9:6b:95:e6:65:ba:42:4a:92:b0:
1c:f0:8c:3c:5c:e8:f9:30:ac:25:76:ca:ee:0e:97:
9a:73:29:72:50:ff:6c:f0:8b:80:c3:f7:cf:2b:e0:
6f:7a:85:b7:0d:8c:0e:81:8b:65:7c:db:87:5c:b1:
a3:fe:61:f2:e2:69:ff:77:46:b0:eb:89:bb:3e:c4:
3d:eb:9c:c9:3c:f3:0c:eb:fb:3c:2a:2b:bb:81:6f:
3b:f7:00:fd:8a:92:d5:1e:38:56:1f:5c:a1:6c:eb:
74:5d:a2:7d:90:b3:c5:48:e8:18:af:48:84:d7:78:
06:7b:a5:3d:f2:a9:a5:67:48:63:8e:bb:92:3a:1b:
a0:3b:92:12:67:38:41:b4:4b:f3:df:79:a6:08:22:
d5:13:ff:8e:0b:32:e5:64:de:77:bb:8f:5c:ca:be:
4f:1a:91:56:55:3f:ed:42:22:67:64:c9:03:2e:99:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:28:19:86:B2:6F:94:1F:37:27:A7:79:98:C9:4F:F4:2D:38:52
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/b_UoGYayb5QfNyeneZjJT_QtOFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.232.0/21
45.80.136.0/22
77.74.80.0/21
77.109.128.0/18
80.253.88.0/21
81.6.32.0/20
82.197.160.0/19
85.195.192.0/18
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.201.248.0/22
185.246.104.0/22
193.47.153.0/24
193.223.80.0/20
195.134.128.0/19
212.51.128.0/19
213.144.128.0/19
217.118.192.0-217.118.203.255
IPv6:
2001:1620::/32
2a02:168::/30
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
76:9b:0a:5e:d7:7a:0f:e6:f1:ca:55:41:0e:e7:a9:69:6d:64:
c7:7a:87:37:2d:9e:d2:ca:82:f9:2b:9f:6b:2c:99:58:86:2c:
ee:db:7a:14:20:8c:47:d2:53:f5:fd:46:6b:a6:99:17:af:e5:
07:c1:8e:af:35:b8:ec:6c:bd:a8:32:81:31:09:2f:1c:29:71:
31:4c:7b:22:09:69:70:11:97:dd:5c:00:c7:bf:d5:d3:31:a5:
b4:b9:1f:7c:cc:ec:59:a1:2b:10:52:9f:d6:00:ea:7a:c4:d8:
29:37:ca:74:aa:6b:6a:08:15:17:9f:17:38:ee:6c:ac:7a:52:
d6:31:f7:47:8f:38:1d:3e:82:70:74:80:82:8e:b2:c9:af:13:
4c:ce:e3:af:9b:d8:49:2e:33:03:0c:10:c9:49:c7:0c:f0:7f:
94:39:75:9d:d4:02:07:d0:56:52:89:8a:83:6d:47:ea:b4:29:
b6:0b:39:b4:e1:c4:84:14:fa:3c:2a:91:ba:b1:29:ee:96:45:
6c:55:42:87:93:af:88:7c:97:8c:29:6c:99:32:f3:ed:6c:76:
f7:51:35:dd:94:f9:a6:1f:c7:63:4b:14:4c:06:5c:bd:16:68:
e9:12:8e:b4:41:22:8f:14:cb:d1:db:5f:1d:85:13:a4:61:cc:
d7:ef:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:48:52 2025 by rpki-client