Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa
File: i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa (raw, json)
Hash identifier: 037VXUJZVI+mWu72PU8YPxD3JLA/Q6+4Wqo2f8ZWqyE=
Subject key identifier: 8B:4C:4E:67:D2:61:AD:AD:F4:61:93:C1:8C:E1:D7:6D:86:96:7E:A9
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01999F8C1907D65E91A07DB5A64CBA91708A
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa
Signing time: Wed 01 Oct 2025 11:33:02 +0000
ROA not before: Wed 01 Oct 2025 11:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 81.90.29.0/24 maxlen: 24
93.94.51.0/24 maxlen: 24
93.94.52.0/24 maxlen: 24
178.17.53.0/24 maxlen: 24
178.17.57.0/24 maxlen: 24
178.17.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:8c:19:07:d6:5e:91:a0:7d:b5:a6:4c:ba:91:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Oct 1 11:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4c4e67d261adadf46193c18ce1d76d86967ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:f9:c9:9a:c4:a7:33:1a:3d:20:27:23:84:
80:93:5c:d2:48:c0:11:5d:99:63:fa:25:99:d1:f0:
19:34:ce:b3:13:fd:2f:15:93:56:63:23:d7:61:85:
e1:c8:39:03:b1:23:68:82:c5:d3:71:b7:db:29:0c:
01:60:aa:a7:61:e7:3c:ab:37:b5:d6:6e:7e:d6:e0:
56:6f:da:57:33:63:a1:49:a5:22:36:cb:04:c0:f7:
78:86:78:d4:ed:f2:a8:74:91:a4:c4:25:67:5a:47:
68:b5:79:e7:f2:48:84:c5:80:93:dd:64:30:01:3e:
39:f4:b9:78:eb:54:6f:72:12:7b:8f:74:38:01:a7:
39:9a:98:bd:b2:74:d9:bb:2d:04:58:c8:fc:e0:29:
06:5f:6e:a2:30:00:84:60:52:ff:d6:1d:50:47:a2:
d9:2f:bc:df:3b:02:e0:d5:a0:e1:9b:23:0c:b9:29:
05:cf:cc:0c:67:bf:b8:60:37:25:c0:20:c7:3d:29:
74:c3:f7:e0:e3:12:47:22:a2:14:1d:a9:97:0d:72:
b7:06:03:46:19:61:e9:62:a1:ad:b3:43:57:4a:21:
96:6f:4b:a6:10:0c:4b:fa:ec:fd:c4:95:e1:68:47:
3a:85:90:8f:0b:cc:f0:c3:8d:af:8d:67:d6:32:91:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:4E:67:D2:61:AD:AD:F4:61:93:C1:8C:E1:D7:6D:86:96:7E:A9
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/i0xOZ9Jhra30YZPBjOHXbYaWfqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.29.0/24
93.94.51.0-93.94.52.255
178.17.53.0/24
178.17.57.0-178.17.58.255
Signature Algorithm: sha256WithRSAEncryption
2d:e2:81:92:55:ab:73:9f:86:7a:cf:00:db:ea:28:bb:f9:c9:
f1:c2:6f:d5:23:b3:48:e3:66:df:c7:ff:f1:f1:2f:aa:80:d2:
39:ba:35:83:89:b2:27:f7:fe:d4:fb:33:f1:ac:dd:e9:08:72:
7f:5d:c8:ad:db:a2:9d:04:71:4b:1e:1e:36:49:ac:3c:6b:34:
4c:00:e3:47:fd:a9:46:3f:16:84:7f:b4:15:74:6a:18:77:9a:
74:6d:cf:ca:58:39:c6:89:78:45:7f:6d:c8:18:f0:68:d6:e9:
21:45:c9:01:5f:8c:45:01:19:c2:2e:fc:9b:09:a2:f5:35:3b:
31:70:24:f7:dd:e2:53:5b:51:0e:59:73:b3:a9:6b:7d:e4:24:
f1:9e:b8:ac:de:a4:66:d6:4a:0c:c4:42:53:12:ca:79:fd:6f:
79:e6:12:eb:03:88:de:6e:f3:ac:29:9d:7e:7a:ac:31:fb:9f:
08:cf:5d:51:62:e6:5d:d9:2d:ed:1d:79:e7:f5:d6:d6:db:8a:
dc:01:a1:f8:7d:7d:5c:47:d8:ac:38:ac:bc:2e:b7:7c:31:62:
72:ce:9c:97:ea:71:77:de:07:be:81:2e:5b:68:b7:ed:04:c5:
eb:22:4e:91:50:7e:b8:30:1d:da:12:dc:93:ba:a9:60:57:b0:
8e:4b:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:01 2025 by rpki-client