Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/J6nse8dwvqg2RyDCDxlxErDyg-U.roa
File: J6nse8dwvqg2RyDCDxlxErDyg-U.roa (raw, json)
Hash identifier: 5CHv+aSAxn0JyT/new/n6XjeZXiLiujoW2vAOnOnPCU=
Subject key identifier: 27:A9:EC:7B:C7:70:BE:A8:36:47:20:C2:0F:19:71:12:B0:F2:83:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 0198D0EF5C98E1119C2424BAF2B0DF6EE8C4
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/J6nse8dwvqg2RyDCDxlxErDyg-U.roa
Signing time: Fri 22 Aug 2025 08:40:04 +0000
ROA not before: Fri 22 Aug 2025 08:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 78.40.216.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
89.191.228.0/24 maxlen: 24
90.156.228.0/24 maxlen: 24
90.156.231.0/24 maxlen: 24
94.228.122.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
185.247.16.0/24 maxlen: 24
185.247.18.0/24 maxlen: 24
185.247.19.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
194.35.116.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
194.35.118.0/24 maxlen: 24
194.35.119.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
217.151.229.0/24 maxlen: 24
217.151.231.0/24 maxlen: 24
2a03:6f02::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:ef:5c:98:e1:11:9c:24:24:ba:f2:b0:df:6e:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Aug 22 08:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a9ec7bc770bea8364720c20f197112b0f283e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:06:e5:5a:d5:ea:21:09:ef:0e:19:49:64:
b8:98:f3:34:6b:e0:1c:e9:a5:e7:6e:49:c4:6a:56:
99:ed:b9:07:fa:2d:85:c4:e5:03:b5:07:17:56:23:
28:e1:9f:d8:bd:8b:7c:cc:76:72:26:4f:9c:f2:b7:
54:ec:a6:0d:e7:b8:c8:a3:27:98:3c:fe:37:11:21:
5f:f5:7c:f9:d8:9c:90:f1:35:70:3d:c4:16:1e:e2:
c4:c7:30:d7:c7:4c:64:69:37:3e:ba:88:d7:e7:f1:
19:2a:9a:9e:19:fb:50:12:13:4f:dd:10:a9:fd:8b:
b6:a3:39:00:03:e7:9e:37:f0:79:0f:f7:12:d9:ca:
19:d9:d7:56:93:3b:df:95:d1:82:1b:df:61:f7:3d:
a4:63:e8:61:89:c6:33:d1:bc:fd:f1:29:e5:12:f5:
f9:3d:93:bc:31:11:61:e5:41:07:9d:a6:b5:85:19:
e1:4a:26:93:b8:77:01:9a:fa:ab:d1:b6:3f:de:60:
47:b3:24:36:d2:16:68:51:3a:52:36:60:01:f6:e6:
ad:a1:54:d7:34:4f:c5:0a:2e:ae:be:51:18:1f:a2:
6d:c5:2a:17:da:f1:21:1c:87:23:16:da:27:69:77:
d5:00:64:ce:42:a7:d5:a6:7f:d8:b6:bd:4d:8a:30:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:EC:7B:C7:70:BE:A8:36:47:20:C2:0F:19:71:12:B0:F2:83:E5
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/J6nse8dwvqg2RyDCDxlxErDyg-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
87.249.50.0/24
89.191.228.0/24
90.156.228.0/24
90.156.231.0/24
94.228.122.0/24
176.57.212.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
185.247.16.0/24
185.247.18.0/23
188.225.14.0/24
194.35.116.0/22
217.25.91.0/24
217.25.95.0/24
217.151.229.0/24
217.151.231.0/24
IPv6:
2a03:6f02::/64
Signature Algorithm: sha256WithRSAEncryption
19:8a:2d:61:fe:65:22:26:8c:dc:9b:16:cf:47:1f:0b:02:5a:
fb:e0:4d:ba:d7:84:01:8c:fc:f9:e5:6d:d7:0d:cc:e6:33:4a:
1c:7f:2a:24:7d:8e:33:d8:c5:de:5f:92:90:42:2c:dd:f2:8b:
39:df:08:80:80:31:d5:b0:12:97:1c:88:4f:62:c2:06:91:0a:
da:75:73:9a:5d:7f:6f:4f:db:df:09:3f:3a:88:4f:ce:47:7b:
4d:72:8f:8c:86:36:51:61:c6:77:85:79:3a:d6:6f:96:ed:7e:
19:61:b5:3e:a9:53:89:0f:d3:42:d9:90:c5:de:2f:ee:65:33:
4d:fa:21:e4:30:4c:ac:15:52:90:ee:20:7a:e0:65:61:74:d5:
30:17:c7:57:15:c1:8a:51:88:f2:69:16:da:c8:dd:4a:d3:ff:
f8:5f:0b:59:95:15:dd:90:78:f6:94:d3:25:e2:1a:8d:f4:ca:
b5:ad:6e:22:37:9c:4f:c6:84:8d:81:60:f6:0f:1d:93:c6:35:
f4:3f:2e:b1:33:dd:42:54:91:4a:3b:ac:ca:b5:73:80:0e:44:
f2:de:9c:96:6a:ca:b9:d2:77:15:4d:c0:8d:16:4a:ef:b8:15:
52:a8:01:9b:bb:34:70:5f:5f:bd:d0:34:0a:17:cd:e7:51:b5:
f4:d6:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:02:13 2025 by rpki-client