Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/n7FqNgB42yMNZn9HsllZdTK6BM4.roa
File: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (raw, json)
Hash identifier: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=
Subject key identifier: 9F:B1:6A:36:00:78:DB:23:0D:66:7F:47:B2:59:59:75:32:BA:04:CE
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0196F795D8999595D6AB224803F83401FC7D
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/n7FqNgB42yMNZn9HsllZdTK6BM4.roa
Signing time: Thu 22 May 2025 10:41:54 +0000
ROA not before: Thu 22 May 2025 10:41:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215089
IP address blocks: 46.235.8.0/24 maxlen: 24
46.235.11.0/24 maxlen: 24
77.245.157.0/24 maxlen: 24
185.87.254.0/24 maxlen: 24
185.87.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:95:d8:99:95:95:d6:ab:22:48:03:f8:34:01:fc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: May 22 10:41:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb16a360078db230d667f47b259597532ba04ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:ef:c8:c8:0d:bb:49:22:6d:d4:be:7f:ed:
ff:b6:30:1d:cf:6f:d8:66:53:be:88:b0:fb:e1:3b:
39:41:b9:61:c8:00:14:7a:70:df:9c:74:a4:a4:16:
f0:5b:e2:00:7f:b7:5a:64:94:6e:32:3a:10:9b:f6:
41:a8:cf:80:a8:68:b4:46:2b:bd:3e:ee:51:c8:13:
c4:15:a0:ca:ca:26:10:ff:b4:77:7e:b6:68:96:bb:
2f:8e:8b:94:e6:69:3c:34:fd:12:ed:dd:cc:72:18:
9e:a9:ba:79:59:ef:7e:a1:57:a1:83:28:6b:07:f8:
7e:dd:9f:3c:d8:95:61:86:ca:5f:3b:68:ef:12:df:
01:42:ac:44:87:de:80:c5:92:33:40:35:bb:59:cc:
d2:e3:fe:59:d0:0e:a0:ef:c1:0f:63:9a:d7:48:c8:
59:a0:9d:7b:6b:c0:a6:09:ee:c0:81:c9:35:d9:3e:
d6:a7:db:0a:b3:d1:d5:7a:3c:d9:85:f2:15:8e:4a:
7c:5b:89:73:e6:11:f7:54:5e:e1:19:af:04:7b:11:
5f:b2:3b:5b:e9:ff:d4:39:df:4b:a1:e5:d3:30:4f:
b0:7e:41:57:ef:d7:33:9d:18:a5:78:b8:e1:b4:67:
63:c1:5b:f3:71:5f:2c:b1:8f:6b:b7:e4:09:be:5e:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:6A:36:00:78:DB:23:0D:66:7F:47:B2:59:59:75:32:BA:04:CE
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/n7FqNgB42yMNZn9HsllZdTK6BM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/24
46.235.11.0/24
77.245.157.0/24
185.87.254.0/23
Signature Algorithm: sha256WithRSAEncryption
49:44:55:ce:ad:ef:9d:09:99:7e:bf:cc:da:51:d0:30:9e:4c:
26:5c:eb:bc:ae:74:ab:0a:d7:27:74:71:6a:4a:56:0f:d7:be:
f7:6d:fa:07:28:1d:02:ba:e5:78:64:d1:5d:0b:2d:b9:04:b3:
37:6c:b5:a7:5f:70:9b:1c:07:8f:96:2a:46:7a:f2:60:09:91:
d0:5b:f6:ee:e5:75:4d:42:a6:e0:f6:9a:6f:33:6b:d4:22:af:
22:b7:90:29:d2:40:12:61:d2:2a:4e:4b:ae:a9:f3:66:5c:46:
5a:52:d5:a5:6d:a5:9f:22:c1:4f:07:be:dd:cc:eb:c3:76:31:
7d:1f:d6:c0:d9:18:c0:f1:20:21:86:8e:eb:fa:20:38:39:df:
ed:0a:8b:72:69:fc:36:e2:88:94:60:2b:6e:9b:4c:55:78:49:
6c:0f:a7:e4:44:ea:d5:fe:9e:77:4e:b7:94:77:16:d9:5c:51:
a1:60:9d:d1:2b:72:31:9b:ac:4b:db:8b:67:52:5d:00:29:3a:
ca:47:ef:49:73:5e:5a:92:bf:ff:ea:b7:b1:bb:ee:08:f0:f1:
ba:2e:6b:78:50:e5:4e:0f:3a:57:7e:9c:b5:19:3b:a1:45:d4:
89:ec:c2:b2:4c:e1:29:36:71:a3:7e:b0:06:3b:07:71:e0:05:
10:3c:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:05 2025 by rpki-client