Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa
File: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (raw, json)
Hash identifier: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=
Subject key identifier: 26:7E:B1:D9:00:A4:D8:5A:A8:48:5D:44:CA:25:18:57:C2:73:4A:4D
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0197538CFCA307BDE63D5714161761168BD9
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa
Signing time: Mon 09 Jun 2025 07:17:17 +0000
ROA not before: Mon 09 Jun 2025 07:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12963
IP address blocks: 94.232.208.0/21 maxlen: 21
94.232.208.0/24 maxlen: 24
94.232.209.0/24 maxlen: 24
94.232.210.0/24 maxlen: 24
94.232.211.0/24 maxlen: 24
94.232.212.0/24 maxlen: 24
94.232.213.0/24 maxlen: 24
94.232.214.0/24 maxlen: 24
94.232.215.0/24 maxlen: 24
176.100.0.0/19 maxlen: 19
176.100.0.0/24 maxlen: 24
176.100.1.0/24 maxlen: 24
176.100.2.0/23 maxlen: 24
176.100.2.0/24 maxlen: 24
176.100.3.0/24 maxlen: 24
176.100.4.0/24 maxlen: 24
176.100.5.0/24 maxlen: 24
176.100.6.0/24 maxlen: 24
176.100.8.0/24 maxlen: 24
176.100.9.0/24 maxlen: 24
176.100.10.0/23 maxlen: 24
176.100.10.0/24 maxlen: 24
176.100.11.0/24 maxlen: 24
176.100.12.0/24 maxlen: 24
176.100.13.0/24 maxlen: 24
176.100.14.0/24 maxlen: 24
176.100.15.0/24 maxlen: 24
176.100.16.0/20 maxlen: 20
176.100.16.0/24 maxlen: 24
176.100.17.0/24 maxlen: 24
176.100.18.0/24 maxlen: 24
176.100.19.0/24 maxlen: 24
176.100.20.0/24 maxlen: 24
176.100.21.0/24 maxlen: 24
176.100.22.0/24 maxlen: 24
176.100.23.0/24 maxlen: 24
176.100.24.0/24 maxlen: 24
176.100.25.0/24 maxlen: 24
176.100.26.0/24 maxlen: 24
176.100.27.0/24 maxlen: 24
176.100.28.0/24 maxlen: 24
176.100.29.0/24 maxlen: 24
176.100.30.0/24 maxlen: 24
176.100.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:8c:fc:a3:07:bd:e6:3d:57:14:16:17:61:16:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jun 9 07:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=267eb1d900a4d85aa8485d44ca251857c2734a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:2c:29:b6:74:71:f0:fd:34:e3:d0:95:02:
08:98:32:0c:fd:4e:c0:33:40:47:76:78:05:2b:d3:
16:e9:1d:05:14:46:88:c1:82:ee:d6:ce:78:ba:7a:
2c:50:4b:2c:ed:f1:47:5f:bb:36:89:b0:12:7f:22:
8b:46:dd:00:56:4f:68:13:09:6d:e1:d2:72:af:6c:
b0:5f:18:74:48:c1:7a:fc:cd:84:04:6d:c8:e4:30:
22:3f:86:a2:f3:62:aa:34:53:32:b0:47:8f:20:bb:
75:ae:b1:2d:d3:e6:8d:76:18:5c:c7:07:1e:a5:19:
8c:f8:6f:b5:18:cf:c8:57:59:72:6c:23:4d:a1:2b:
3b:95:27:c8:e5:9f:d0:17:57:22:c2:ca:22:eb:48:
0b:ed:93:1e:c5:fa:88:f5:a6:fe:49:ed:16:2f:7a:
0b:95:54:29:49:3d:c0:24:6e:4c:50:e1:54:15:bc:
82:8c:16:c5:5f:a8:6d:a6:16:21:6d:c1:54:43:33:
15:0e:19:ec:e0:dc:7e:55:ef:7b:16:41:b7:cf:10:
cf:03:73:4b:33:5e:29:f6:86:f4:4b:bf:77:40:e8:
49:e2:17:25:52:40:50:a1:1c:f1:6d:d7:89:2f:2b:
ea:c1:e9:97:e0:d6:ec:3f:ab:62:51:bf:3e:49:cf:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:B1:D9:00:A4:D8:5A:A8:48:5D:44:CA:25:18:57:C2:73:4A:4D
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.208.0/21
176.100.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:c9:cf:5f:9e:a2:25:1f:eb:32:f5:9f:de:9e:86:57:84:5f:
6a:68:e7:81:06:68:0b:e7:25:50:6b:98:e5:f1:a3:4f:b0:e6:
18:f9:f9:05:3d:bf:de:d3:42:36:d0:30:db:1b:9c:b6:64:85:
0a:44:ca:ff:0d:37:3a:e4:32:9b:71:7f:e5:48:07:43:30:33:
15:20:de:33:c9:b2:c5:b2:0c:8d:cd:91:43:68:00:89:8c:ac:
8e:89:14:47:1f:4b:29:11:63:c2:88:89:39:f5:b9:38:7a:b5:
e0:ab:3a:bb:57:a4:1d:65:34:c2:75:3c:ad:de:db:17:35:1d:
d7:31:a8:e3:e8:08:4d:5a:65:15:dc:5a:1d:0e:2e:27:0e:07:
12:65:c8:46:68:fa:48:6a:39:5a:58:df:fb:61:6f:17:23:bf:
bb:89:8c:07:2d:ed:3a:1e:94:e0:7d:1f:42:bb:aa:47:7e:81:
a5:00:e8:07:11:67:20:52:18:a1:f5:01:ef:b8:02:42:e4:ea:
41:a3:4a:47:57:1e:2e:fe:0a:d5:23:66:51:c8:ce:36:6f:90:
bd:6f:95:41:0b:ed:70:bf:67:68:3d:05:fb:65:32:1c:e2:5c:
54:76:66:b6:8e:66:11:51:c8:df:9c:c3:eb:ce:48:fe:ce:5a:
ae:03:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:24:22 2025 by rpki-client