Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/euk47PXoK5T6-tp0xVlaMzoR2zU.roa
File: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (raw, json)
Hash identifier: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=
Subject key identifier: 7A:E9:38:EC:F5:E8:2B:94:FA:FA:DA:74:C5:59:5A:33:3A:11:DB:35
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0197C0A49B6075CE30D55CC97B871144CC4C
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/euk47PXoK5T6-tp0xVlaMzoR2zU.roa
Signing time: Mon 30 Jun 2025 11:41:42 +0000
ROA not before: Mon 30 Jun 2025 11:41:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 95.38.96.0/21 maxlen: 21
95.38.96.0/24 maxlen: 24
95.38.97.0/24 maxlen: 24
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/24 maxlen: 24
95.38.101.0/24 maxlen: 24
95.38.102.0/24 maxlen: 24
95.38.103.0/24 maxlen: 24
95.38.104.0/22 maxlen: 22
95.38.104.0/24 maxlen: 24
95.38.105.0/24 maxlen: 24
95.38.106.0/24 maxlen: 24
95.38.107.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.130.0/24 maxlen: 24
95.38.131.0/24 maxlen: 24
95.38.132.0/22 maxlen: 22
95.38.132.0/24 maxlen: 24
95.38.133.0/24 maxlen: 24
95.38.134.0/24 maxlen: 24
95.38.135.0/24 maxlen: 24
95.38.136.0/22 maxlen: 22
95.38.136.0/24 maxlen: 24
95.38.137.0/24 maxlen: 24
95.38.138.0/24 maxlen: 24
95.38.139.0/24 maxlen: 24
95.38.140.0/22 maxlen: 22
95.38.140.0/24 maxlen: 24
95.38.141.0/24 maxlen: 24
95.38.142.0/24 maxlen: 24
95.38.143.0/24 maxlen: 24
95.38.152.0/21 maxlen: 21
95.38.152.0/24 maxlen: 24
95.38.153.0/24 maxlen: 24
95.38.154.0/24 maxlen: 24
95.38.155.0/24 maxlen: 24
95.38.156.0/24 maxlen: 24
95.38.157.0/24 maxlen: 24
95.38.158.0/24 maxlen: 24
95.38.159.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.168.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.171.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/24 maxlen: 24
95.38.209.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.240.0/21 maxlen: 21
95.38.240.0/24 maxlen: 24
95.38.241.0/24 maxlen: 24
95.38.242.0/24 maxlen: 24
95.38.243.0/24 maxlen: 24
95.38.244.0/24 maxlen: 24
95.38.245.0/24 maxlen: 24
95.38.246.0/24 maxlen: 24
95.38.247.0/24 maxlen: 24
95.38.248.0/22 maxlen: 22
95.38.248.0/24 maxlen: 24
95.38.249.0/24 maxlen: 24
95.38.250.0/24 maxlen: 24
95.38.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:a4:9b:60:75:ce:30:d5:5c:c9:7b:87:11:44:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jun 30 11:41:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae938ecf5e82b94fafada74c5595a333a11db35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:36:fb:6b:ca:9c:6d:4d:c9:30:a1:3e:bf:
83:00:bf:9a:6a:9e:3b:cf:75:d6:5a:02:fb:a0:05:
f8:a4:32:27:e0:78:77:d1:e3:64:31:95:e7:da:10:
94:9b:01:30:05:a0:36:37:0d:15:dd:a8:e7:2d:c2:
95:a7:07:69:36:97:b6:35:99:e9:86:ac:e3:10:6b:
2d:b9:7a:a3:f0:fe:b5:d1:f4:8a:98:05:81:77:0b:
f0:3c:c4:21:da:3d:cd:3c:37:3a:00:33:7d:70:33:
e3:7c:52:97:0b:21:8a:91:2f:33:34:79:69:9b:e5:
5d:3d:6d:75:ab:9d:35:cc:04:a8:3b:1f:89:ee:e0:
19:fa:c2:bc:cf:5b:5b:91:95:67:8a:de:87:0c:5b:
30:a7:8a:8e:37:39:36:8c:e6:47:29:02:10:0a:42:
0a:bb:71:00:19:15:4a:04:5a:d7:1e:1a:1d:f0:57:
f9:e5:e0:5d:ec:aa:aa:f1:a4:31:f3:5f:6b:31:59:
e0:bf:0a:fe:8f:b5:a7:20:fe:a1:49:4c:63:a7:32:
91:10:8e:67:c8:a9:fd:a1:14:99:dd:6e:9e:c2:f4:
64:4a:e3:79:44:7d:10:52:86:c8:62:f8:2f:b4:e2:
cd:64:60:4b:75:31:c0:6b:96:cb:33:f2:6f:70:40:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E9:38:EC:F5:E8:2B:94:FA:FA:DA:74:C5:59:5A:33:3A:11:DB:35
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/euk47PXoK5T6-tp0xVlaMzoR2zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.96.0-95.38.107.255
95.38.130.0-95.38.143.255
95.38.152.0/21
95.38.168.0/22
95.38.174.0/24
95.38.200.0/22
95.38.208.0/22
95.38.240.0-95.38.251.255
Signature Algorithm: sha256WithRSAEncryption
32:c7:a4:77:dc:88:a8:df:1e:2f:12:ca:c8:94:c6:6e:3c:83:
4b:72:a7:48:77:1d:0f:af:7f:cd:88:f8:4a:60:f7:21:8e:83:
c3:ce:80:05:36:6e:66:e5:17:ca:55:cc:23:d0:6e:af:4f:64:
66:60:fb:0f:0f:9b:1f:ba:41:bc:d9:18:10:ec:5a:75:92:dc:
b3:a8:04:cd:39:a3:c5:2e:c5:b0:93:9d:7e:23:db:26:dd:3b:
3d:d5:02:3d:2f:de:1d:af:5b:70:d8:9c:cf:de:45:c0:33:9a:
99:10:63:1e:4f:cd:5b:1e:8f:f6:29:d0:9d:19:d3:25:7e:74:
72:fd:3b:1a:bf:f2:9e:2f:58:74:55:c9:29:84:8b:34:46:67:
27:69:7d:b5:9f:94:37:2b:2c:5a:d6:ec:2a:2e:79:39:7d:16:
53:bc:a7:3c:79:2d:ec:55:7e:9a:63:3f:b0:3f:62:bf:fd:70:
55:b4:73:aa:9d:3a:5c:e9:5c:cf:3e:bf:f8:99:09:bf:d7:48:
34:88:69:1d:07:43:01:a7:9a:55:41:3a:51:64:b4:f9:34:27:
08:d2:96:05:a3:35:b7:18:89:a5:8b:42:85:07:a9:25:0d:cd:
28:24:4c:37:0c:3f:8a:df:2d:b4:9a:a4:00:2d:59:9e:f9:5f:
88:c2:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:07:21 2025 by rpki-client