Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m2NL3eIJm_cUHDILefIB4gXg9Wk.roa
File: m2NL3eIJm_cUHDILefIB4gXg9Wk.roa (raw, json)
Hash identifier: SwQx/ftmut0Ropf7a/wpAS5hheLfkibIk5yB3bhHNyY=
Subject key identifier: 9B:63:4B:DD:E2:09:9B:F7:14:1C:32:0B:79:F2:01:E2:05:E0:F5:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01985AF56B808B510B8D59ED96C5E0B4CCB9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m2NL3eIJm_cUHDILefIB4gXg9Wk.roa
Signing time: Wed 30 Jul 2025 10:51:29 +0000
ROA not before: Wed 30 Jul 2025 10:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.139.128.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:f5:6b:80:8b:51:0b:8d:59:ed:96:c5:e0:b4:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 30 10:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b634bdde2099bf7141c320b79f201e205e0f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:ec:2a:aa:69:6d:f6:9f:57:5b:db:39:e4:
0a:58:d7:c2:71:cf:f2:fa:d9:91:d5:61:2d:bb:70:
b0:e1:d0:8f:d0:09:a4:ec:09:dd:b6:3f:83:94:a2:
53:ab:58:87:73:61:a2:3d:e3:6d:0f:78:85:bb:76:
14:a4:1f:cb:4c:38:10:17:67:56:57:ee:d7:0d:c5:
ed:1e:c4:76:ae:11:89:e6:34:42:eb:bd:8c:83:0b:
38:0e:0a:c0:3c:7c:bb:12:7b:13:7a:b6:38:64:69:
d5:10:c6:82:12:4d:70:c7:3a:36:41:72:99:eb:39:
5f:bc:4e:5d:56:48:72:ad:d5:16:90:6e:f8:a7:6d:
bd:d4:f2:2d:0a:64:a4:c5:1b:f6:cd:00:9a:90:68:
3f:dc:02:2a:11:98:11:04:51:64:48:24:c3:e2:b2:
31:99:4b:67:9a:14:39:98:aa:64:b1:d7:92:a9:d2:
1a:8f:bc:6b:20:a2:5b:c6:e3:ec:18:a2:65:eb:b2:
86:ba:8e:b5:32:75:ac:4e:ee:38:e3:fb:e5:6c:ad:
75:45:c3:54:34:cb:41:29:2b:13:e9:03:21:59:6c:
82:97:db:41:14:7f:0d:a8:a8:bb:7d:e7:8a:13:87:
e5:49:6a:5b:1e:f2:d6:5f:1c:12:fd:f8:c7:dc:ba:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:4B:DD:E2:09:9B:F7:14:1C:32:0B:79:F2:01:E2:05:E0:F5:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m2NL3eIJm_cUHDILefIB4gXg9Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.128.234.0/23
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
91.92.21.0/24
109.206.240.0/24
109.206.243.0/24
185.218.138.0/24
185.246.221.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:82:17:cc:82:a9:57:06:db:7a:b8:9e:17:09:7b:a1:75:6e:
5b:0e:60:fc:70:61:5e:97:6f:f9:a3:a4:27:36:8f:93:06:97:
54:c4:cd:97:5b:82:8b:e5:52:85:ed:e1:26:24:11:00:be:71:
3e:bd:55:35:ca:8b:7c:ee:cc:b7:8a:c7:6e:be:b5:99:9d:2b:
f5:cb:2d:38:60:50:df:79:b3:ef:df:ba:9a:f0:f8:34:fb:33:
2c:10:5c:db:b2:94:62:07:46:71:26:75:54:50:0f:76:e6:ec:
1b:ff:7b:9b:c5:ad:67:5c:05:61:4d:23:e9:4c:48:60:bd:47:
57:6f:5b:23:a3:ce:78:69:a6:8f:b2:34:00:7b:ba:f0:c6:f6:
95:98:fb:fe:fa:0b:53:f6:7f:5b:c0:df:b1:01:6a:27:cd:99:
d9:72:63:39:d6:d5:83:2f:e1:38:57:88:70:02:8c:d8:55:8a:
16:fb:6b:94:85:4d:86:8a:7c:f3:d8:be:36:56:b0:e3:2c:36:
ed:71:44:7e:de:b6:12:e4:f2:26:97:01:6a:15:32:a0:c5:f9:
f1:6d:9d:d0:2a:45:9b:2b:46:e5:5e:6a:d6:6a:b4:14:ef:db:
b5:4d:26:c8:12:8f:64:82:7c:ef:cc:00:d5:6e:a4:27:4e:47:
fa:76:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:15 2025 by rpki-client