
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/fCbpeuPkw7-WeltvV11giyI0D1c.roa
File: fCbpeuPkw7-WeltvV11giyI0D1c.roa (raw, json)
Hash identifier: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=
Subject key identifier: 7C:26:E9:7A:E3:E4:C3:BF:96:7A:5B:6F:57:5D:60:8B:22:34:0F:57
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01985C3C410755E872FD93A93FEC19922FE0
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/fCbpeuPkw7-WeltvV11giyI0D1c.roa
Signing time: Wed 30 Jul 2025 16:48:29 +0000
ROA not before: Wed 30 Jul 2025 16:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204798
IP address blocks: 185.122.255.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:3c:41:07:55:e8:72:fd:93:a9:3f:ec:19:92:2f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jul 30 16:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c26e97ae3e4c3bf967a5b6f575d608b22340f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:10:84:7b:91:82:ef:98:31:57:9d:05:0e:
f9:14:e1:17:5a:a2:4d:83:f6:f1:c6:cc:05:82:1c:
36:d3:74:0c:b7:63:e8:ad:ec:cc:2f:f3:48:4f:28:
18:0f:ba:96:e2:90:fd:1d:d5:ff:a0:e2:9a:0d:7a:
a8:93:a8:ad:12:55:64:29:3e:5c:3b:12:d9:a7:22:
fe:f6:bb:e2:b8:ab:5f:51:fd:2f:e6:c8:a2:13:99:
5f:7e:9d:6f:98:67:f7:92:5e:fa:20:d5:37:fb:e1:
13:ce:70:18:dd:e1:85:6e:41:c4:d1:e5:a3:4d:cd:
fa:2e:4b:73:dc:63:90:e3:7e:21:80:b6:72:ca:c2:
75:24:20:2f:35:6e:44:5b:64:5c:69:cb:3e:08:91:
10:fa:ee:25:84:01:a9:44:ca:71:ef:7e:f7:ad:fe:
cb:d5:99:3b:0e:64:2a:9f:37:52:ea:30:39:e9:bc:
0d:39:18:c5:c9:bc:75:d0:89:85:e5:07:00:40:cb:
63:1c:89:01:66:c1:6c:d9:b2:9e:22:59:d8:c1:12:
92:54:79:10:81:13:f3:4d:11:f5:14:0a:6d:51:29:
aa:20:8f:c2:2f:ff:7a:9b:6b:5f:5a:91:5f:54:0c:
20:09:b8:1c:bf:13:e7:44:c1:df:74:44:8e:b6:18:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:E9:7A:E3:E4:C3:BF:96:7A:5B:6F:57:5D:60:8B:22:34:0F:57
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/fCbpeuPkw7-WeltvV11giyI0D1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.255.0/24
185.133.224.0/23
185.133.227.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:1b:bc:4f:04:44:00:10:5a:1a:e1:8c:ce:6e:36:f0:bc:b3:
7e:04:cb:2c:d6:e2:21:16:d0:67:e2:2f:7b:6d:f2:f3:e7:2b:
a7:9d:dc:a1:49:71:25:9d:2a:3b:60:19:dd:21:30:68:b5:e5:
75:1e:3c:64:b8:65:56:f1:58:85:fd:3b:ec:16:2a:21:d2:cc:
5e:4f:0c:46:fa:78:df:32:0a:7d:d2:72:cd:e7:11:d3:90:9c:
36:ff:ec:5c:f2:f0:df:72:fe:d7:6e:1e:7f:2e:09:61:69:2a:
0e:42:73:22:ff:95:d0:fa:e1:8a:dc:a2:9e:72:01:34:99:a9:
41:d7:09:fe:76:33:df:b3:0e:9a:9d:2d:1e:d3:37:0b:04:88:
13:e9:57:f1:2f:a9:45:ae:0d:0d:c4:9d:20:8c:55:16:e0:8c:
7e:d5:be:f6:25:36:05:43:7c:19:de:c8:a3:0a:88:77:bc:d2:
f5:8c:d1:2f:76:da:e3:32:b6:0a:2f:79:37:8d:d8:f8:ec:9c:
a4:7f:ac:61:f7:6b:65:34:09:b2:56:29:dd:26:4b:09:94:7c:
fd:ff:39:4e:d9:65:5d:52:d9:9f:41:64:60:a8:c5:f1:4e:0e:
e4:01:55:3d:a3:16:d1:1f:4d:2d:0f:ad:f2:6f:e3:07:f6:00:
bf:60:fd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:08 2025 by rpki-client