Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/fXp2YLb9utt2TFGha8-RTam3B0Y.roa
File: fXp2YLb9utt2TFGha8-RTam3B0Y.roa (raw, json)
Hash identifier: 61ubSs249xzCDSgDwzNtRtDXlWBoGSEut+pTkfzSHkA=
Subject key identifier: 7D:7A:76:60:B6:FD:BA:DB:76:4C:51:A1:6B:CF:91:4D:A9:B7:07:46
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01977CDA685E7D673D3F4F968E85969A411E
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/fXp2YLb9utt2TFGha8-RTam3B0Y.roa
Signing time: Tue 17 Jun 2025 07:46:17 +0000
ROA not before: Tue 17 Jun 2025 07:46:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.64.0/24 maxlen: 24
84.22.65.0/24 maxlen: 24
84.22.67.0/24 maxlen: 24
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.79.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
84.22.86.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
213.180.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:da:68:5e:7d:67:3d:3f:4f:96:8e:85:96:9a:41:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jun 17 07:46:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7a7660b6fdbadb764c51a16bcf914da9b70746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:bb:71:ff:ec:13:4e:a6:e7:83:4d:79:72:
8d:bf:81:bb:81:32:ee:fe:f8:21:d3:18:72:ca:8f:
f4:86:99:9d:d5:3b:6e:75:35:d4:60:d6:7d:26:31:
36:ee:8e:0b:da:44:fb:e3:64:70:98:44:c5:16:3c:
f7:5f:53:df:f3:b2:8a:67:e7:75:8a:bd:3a:a2:d1:
0d:70:14:7e:c3:71:02:fa:e3:45:49:b5:3f:97:b5:
a9:2a:60:29:6e:8b:95:94:0b:03:37:14:2c:a2:b9:
30:b9:d8:1a:d9:89:b9:d6:0e:b3:54:53:75:7e:2a:
e7:89:f3:26:6a:ae:46:19:e7:35:7b:9f:2c:df:20:
e1:20:4c:9e:1c:2e:57:51:fd:9d:7b:71:6f:ca:3b:
f3:4e:03:75:db:a6:a6:a2:43:32:1f:e3:9e:25:92:
bd:ec:ad:8b:69:b5:cf:79:9f:3f:5f:10:c7:85:94:
e5:dc:d5:ab:7b:5b:cf:91:83:c1:c3:2a:2c:d4:1b:
f4:d0:39:35:68:85:78:26:42:60:e7:73:fc:9b:d2:
d1:d9:32:81:84:b8:7e:fb:7d:6f:58:85:3a:35:30:
47:b3:74:44:57:81:8d:23:c0:c7:a6:ce:32:82:bd:
0a:4d:cd:f2:60:2f:7b:66:0f:f8:3c:0a:48:e7:e0:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:76:60:B6:FD:BA:DB:76:4C:51:A1:6B:CF:91:4D:A9:B7:07:46
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/fXp2YLb9utt2TFGha8-RTam3B0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
af:a5:aa:e3:31:5a:c9:3c:4d:83:92:47:b8:c1:17:78:f0:b1:
62:09:eb:bb:6e:d0:63:89:99:46:35:2d:01:df:97:12:6b:25:
61:70:88:94:b8:e7:34:90:56:10:59:50:52:23:fd:d7:ff:18:
5a:04:2c:83:8a:53:b3:d8:cb:c0:66:2e:9c:57:32:20:af:32:
95:05:a7:f4:28:56:6e:2d:c2:9b:20:fc:aa:e0:f2:b3:f1:56:
f4:e9:71:b6:a7:3d:8d:2c:96:5b:fe:8e:e5:7a:6f:50:4b:ea:
36:70:d0:8b:26:43:fd:7b:07:1e:c0:5a:41:64:8e:34:d0:fa:
41:09:a1:76:68:b4:a3:95:ec:86:05:7b:72:4a:08:bd:fe:98:
5b:e3:43:01:42:82:7b:cc:10:ff:df:3e:51:23:20:82:1a:18:
02:5a:cb:c8:53:78:68:50:cf:4b:ea:46:af:fc:b7:5f:ff:75:
8c:00:37:d6:18:0b:15:c8:47:69:15:53:28:bb:99:e8:92:b5:
69:6a:e3:83:1b:e6:f1:74:6d:c4:6c:56:d4:0f:52:c6:a5:59:
cc:5e:e4:87:3c:1b:71:82:d7:a5:ba:0b:91:8d:ec:6d:e0:d6:
f5:89:e2:59:cc:51:10:46:c7:f0:a2:84:a0:2b:4d:d8:0e:60:
2b:48:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:57 2025 by rpki-client