Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-m8l9bmUGLPhFFhEEM6Mqc-zkWs.roa
File: 1-m8l9bmUGLPhFFhEEM6Mqc-zkWs.roa (raw, json)
Hash identifier: orDkUh07KmMUq0uIQDqZDqLPnghwSMVGxSnwEjXrPsc=
Subject key identifier: FA:6F:25:F5:B9:94:18:B3:E1:14:58:44:10:CE:8C:A9:CF:B3:91:6B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01989851F7168C4DD5C86F954BA0EABB68AA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-m8l9bmUGLPhFFhEEM6Mqc-zkWs.roa
Signing time: Mon 11 Aug 2025 08:49:25 +0000
ROA not before: Mon 11 Aug 2025 08:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:51:f7:16:8c:4d:d5:c8:6f:95:4b:a0:ea:bb:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 11 08:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa6f25f5b99418b3e114584410ce8ca9cfb3916b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:19:1a:52:f7:39:45:ff:51:91:f0:33:df:
42:09:a9:de:d3:00:83:6b:fb:ef:78:7c:a9:d9:d9:
1f:02:35:3c:cd:18:cf:21:58:e6:d4:31:02:f1:c2:
27:85:4b:d4:35:e3:8c:06:19:ff:a9:58:b6:93:68:
30:cd:87:48:59:b1:60:f5:9f:64:0b:5e:8f:d3:7d:
d5:3a:08:f3:1d:1e:c6:53:1e:a3:4f:32:9d:40:3e:
54:02:f9:be:7c:2c:18:02:ac:7c:58:e2:e8:cc:1b:
ce:ed:77:96:1c:a5:be:69:28:ba:4e:bf:0a:d9:4a:
23:6a:26:52:5b:f1:6a:9b:bf:90:10:a3:8a:75:90:
7b:24:b0:da:28:16:4b:7c:a0:b9:4c:98:e8:67:28:
07:44:f0:f0:5a:4c:1e:16:cc:2c:e2:5f:15:a2:b8:
a2:05:f8:13:69:de:e7:61:d4:88:fe:66:67:53:9c:
49:9e:fb:1a:5c:04:1d:b5:33:9e:4e:b6:3f:a8:e4:
95:d9:36:a7:ff:11:17:0d:b9:d2:85:71:40:55:9a:
43:34:b8:c0:cd:08:ba:ca:46:96:67:c0:23:9d:12:
bc:fb:69:18:89:d7:a6:b5:65:03:9b:4a:01:03:9a:
eb:4d:ad:b3:c1:a4:bc:8c:1f:59:72:af:a7:b8:0b:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:25:F5:B9:94:18:B3:E1:14:58:44:10:CE:8C:A9:CF:B3:91:6B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-m8l9bmUGLPhFFhEEM6Mqc-zkWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/24
185.209.73.0/24
185.210.233.0/24
185.222.30.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9c:8a:cb:9c:12:57:6e:d6:e6:a6:4b:b3:4e:80:b4:42:10:
e5:12:1f:2b:6b:4e:ef:b3:9d:71:b5:2e:a7:62:cf:65:7c:6c:
37:ef:f8:59:65:18:56:2e:23:82:de:a7:07:2b:19:68:bf:fd:
f3:4a:0e:94:ed:de:d6:55:80:66:d7:50:07:9f:d6:fc:80:6b:
24:e1:0a:c5:76:3b:76:e9:07:b4:2b:bd:fb:58:4c:6d:c1:1c:
30:2f:13:81:54:fe:12:88:7d:df:20:3f:f0:31:7f:f6:a1:69:
e0:63:4b:e5:fb:19:a1:e4:a0:e8:b5:e6:a1:c9:2e:ab:4e:60:
f3:f7:84:d3:93:bc:4e:48:f6:96:18:bf:50:f0:e3:2b:42:f5:
12:c8:46:50:12:e1:72:57:c2:05:2c:d8:b8:0f:e8:99:1c:fd:
62:f6:25:0f:93:6f:74:c4:d5:28:ae:d1:bf:95:df:ae:d3:01:
1c:de:5f:1f:06:6e:05:a9:4d:bc:a3:43:90:50:e9:fd:89:88:
fd:3d:56:46:fe:fa:05:b8:db:e3:af:15:b4:fc:54:35:1d:e5:
e7:8b:17:6c:93:4f:96:3e:9d:9c:3e:d1:39:f0:4a:d8:4d:b4:
01:0e:5e:77:c2:6d:fe:ed:85:b3:63:2a:cf:10:7f:f2:f0:09:
36:c8:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:35 2025 by rpki-client