Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/k4qBHQ6jiJfLG2L_TKA_LAkzXqc.roa
File: k4qBHQ6jiJfLG2L_TKA_LAkzXqc.roa (raw, json)
Hash identifier: IoL9d0njCw5Z1D6RuqNw2gDrksY/Qu/NuXezGOociws=
Subject key identifier: 93:8A:81:1D:0E:A3:88:97:CB:1B:62:FF:4C:A0:3F:2C:09:33:5E:A7
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01975F8540A3C0BD8FB87C1B61ECF4881A78
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/k4qBHQ6jiJfLG2L_TKA_LAkzXqc.roa
Signing time: Wed 11 Jun 2025 15:04:17 +0000
ROA not before: Wed 11 Jun 2025 15:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:85:40:a3:c0:bd:8f:b8:7c:1b:61:ec:f4:88:1a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 11 15:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=938a811d0ea38897cb1b62ff4ca03f2c09335ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:80:25:c0:95:48:a7:fa:a4:a4:e1:6a:7f:
94:ec:05:9b:85:e3:8e:43:8d:6b:2d:cd:1f:39:d5:
c9:d7:f9:ab:62:1a:f7:66:ca:8d:d8:9e:41:f3:bb:
4a:b8:30:0d:7a:a6:54:f8:b3:fa:52:b9:89:fe:f9:
9f:40:39:77:72:60:28:51:bb:fa:53:8b:5b:24:71:
da:e5:19:a3:1d:22:8e:06:8a:ed:27:fe:bc:07:da:
86:8a:89:7f:15:d7:ec:cc:12:3d:32:85:87:30:6a:
b0:c0:b7:3e:44:4c:a2:28:37:b7:d5:ce:77:7e:62:
03:88:6d:55:5d:50:57:0d:49:a8:6a:3d:f4:b2:ef:
41:c7:8a:79:6a:70:2e:65:a7:4d:f3:ec:0c:9f:ed:
ca:be:2a:b9:a7:ef:85:a6:5f:8c:c4:7e:c2:03:aa:
a1:ab:7b:6c:e9:6b:8d:d7:f2:02:a5:8a:e1:60:2c:
ad:69:53:43:31:da:40:b2:1b:8f:0e:2d:27:6e:f8:
38:6f:b5:1d:63:da:a2:43:17:f3:a2:66:01:c5:f5:
81:ce:12:87:0d:b7:a4:7a:77:ec:c8:1a:c5:76:87:
e2:d9:82:d5:a4:f4:ce:ae:1c:fb:21:ea:12:26:81:
0b:64:07:19:8d:09:ec:d5:ce:f6:e4:bb:ff:81:29:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:81:1D:0E:A3:88:97:CB:1B:62:FF:4C:A0:3F:2C:09:33:5E:A7
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/k4qBHQ6jiJfLG2L_TKA_LAkzXqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:19:23:2c:97:4f:9d:91:ff:9e:33:41:e5:8b:29:f0:67:26:
6c:82:41:f1:c5:4f:91:71:0e:1a:34:bf:59:ce:93:c6:2c:3b:
30:47:a3:e7:b0:cd:b1:f9:d5:4e:45:b5:95:7c:8f:91:16:32:
46:18:7d:f0:46:3f:51:83:ee:c6:69:82:64:1a:ed:94:8c:0c:
91:e2:98:64:23:21:d7:9c:a8:b6:3d:91:f9:ff:fb:e8:26:68:
c5:7b:3e:ba:cd:80:98:79:05:83:c8:d6:ab:ba:2e:2c:a4:06:
d9:c6:b8:4e:69:5b:5b:5d:74:68:53:a4:d3:f4:55:1f:3f:6f:
8a:97:09:8b:25:1e:e5:66:e6:30:64:0b:04:39:eb:ea:c0:81:
71:7e:ba:71:41:83:1c:e4:72:df:a5:8d:53:18:67:89:58:c9:
4b:0b:7f:f8:82:d2:c6:d2:6c:96:69:4d:c1:32:62:d2:bf:3d:
50:c1:53:82:c7:74:4b:ed:c7:bb:a7:1c:3a:81:15:25:c3:a1:
5b:a3:56:88:d5:7d:cf:4c:d9:42:63:fe:69:3f:5c:38:96:d5:
0e:a0:80:41:1c:2b:c1:b2:2e:e6:3d:5b:28:54:d8:58:c7:ac:
c7:f0:2e:2f:7f:4a:60:29:bf:db:b0:99:52:e7:60:1f:9a:a1:
c9:14:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:30:18 2025 by rpki-client