Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mIlfd2Y7sLPKpHtrrMK_-InI48g.roa
File: mIlfd2Y7sLPKpHtrrMK_-InI48g.roa (raw, json)
Hash identifier: QVRLDaOir+bWKqrIbf3Zg68E+xxOZ6wlJD5b1bWHT/A=
Subject key identifier: 98:89:5F:77:66:3B:B0:B3:CA:A4:7B:6B:AC:C2:BF:F8:89:C8:E3:C8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01984D740351ED4F704C72325A2820D23C4B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mIlfd2Y7sLPKpHtrrMK_-InI48g.roa
Signing time: Sun 27 Jul 2025 19:55:05 +0000
ROA not before: Sun 27 Jul 2025 19:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.96.0/24 maxlen: 24
109.121.0.0/19 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:74:03:51:ed:4f:70:4c:72:32:5a:28:20:d2:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 27 19:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98895f77663bb0b3caa47b6bacc2bff889c8e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:40:12:52:ef:15:1c:ab:46:fc:a1:58:65:
8e:cb:a6:19:3f:e0:13:93:fb:fd:86:c5:10:83:23:
2b:43:52:2a:aa:ff:2a:91:55:b3:ca:7c:5c:4c:cc:
fc:fb:51:4e:7a:69:e5:ae:f0:0e:8a:32:46:d2:d8:
fd:bf:9a:21:19:c6:b2:b3:a3:12:fb:b7:38:19:bc:
db:f5:e3:d3:ba:c4:f9:21:1b:da:52:10:42:54:7c:
c4:8b:c4:46:a3:6f:59:5d:14:1d:d3:4b:0e:e8:63:
f4:73:f4:e4:77:91:e6:b5:ac:bf:f0:fe:39:68:e9:
f8:eb:64:2c:81:6e:31:08:67:2e:0e:f2:a5:bb:89:
b6:8f:d5:44:b3:af:b4:7a:bc:b4:27:80:c1:c9:3d:
10:b4:2f:71:98:9e:97:3d:b5:d9:43:c7:03:5f:c9:
39:1b:10:a5:97:b3:7c:6c:87:b0:49:a8:0d:b6:2f:
69:f9:d2:e0:13:9c:6f:56:84:88:e6:d8:2d:1c:f5:
fd:0b:54:49:0d:a7:ec:58:81:d8:fb:26:4f:57:12:
d9:8d:dd:c5:d9:29:25:0a:d9:90:c2:9b:7b:55:df:
46:01:9e:6e:1a:cd:82:fd:52:29:b6:ff:f2:81:43:
b8:d4:22:3d:f7:51:d0:c9:35:33:81:9f:6c:ed:19:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:5F:77:66:3B:B0:B3:CA:A4:7B:6B:AC:C2:BF:F8:89:C8:E3:C8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mIlfd2Y7sLPKpHtrrMK_-InI48g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.96.0/24
109.121.0.0/19
109.121.33.0/24
109.121.36.0/24
109.121.38.0/24
109.121.40.0/24
109.121.43.0/24
109.233.184.0/23
178.253.237.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
36:90:60:2c:77:ba:7a:fc:75:14:eb:fa:b3:32:4d:aa:d3:fa:
92:61:4b:61:f9:d9:56:c2:3e:2c:58:ec:5f:48:7a:c1:dd:0c:
06:c8:4d:f5:1e:16:0f:6a:0b:40:0e:63:50:ba:a5:04:f6:8e:
0e:5b:c5:a7:bc:49:72:62:fd:6e:28:5c:7c:6a:ca:b9:2b:2a:
98:b6:3d:1b:d8:e3:15:d5:51:87:92:c7:2e:5b:c9:66:f9:07:
c2:be:26:b6:43:c0:ed:b0:d1:b0:e2:15:ef:44:90:f2:d5:bb:
63:26:25:54:26:28:15:e3:01:f2:ec:da:0c:3b:cb:38:b0:a0:
0c:e0:46:1e:07:11:0a:d4:5c:3a:37:fd:18:c7:c2:f3:f7:1c:
ff:30:c2:fd:fc:e0:2c:72:4e:61:c4:2c:63:e2:3a:00:cc:ee:
fc:c7:e8:6a:32:31:2e:ec:77:66:cf:9d:52:62:01:88:dd:d0:
10:2a:48:87:24:bb:84:51:aa:b2:d1:cf:06:44:6d:9e:b7:bd:
78:6b:da:11:30:81:2e:fb:bf:c2:d8:de:17:19:97:b7:30:db:
7f:de:51:ea:d0:57:90:2d:4a:73:e6:6b:ee:a0:30:c9:16:81:
49:53:cc:f4:f9:00:15:df:0a:0e:a2:05:70:13:f9:3e:d9:2c:
f9:62:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:32 2025 by rpki-client