Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/s-x7d6jJvL70qmh-6OnRq31TKUk.roa
File: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (raw, json)
Hash identifier: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=
Subject key identifier: B3:EC:7B:77:A8:C9:BC:BE:F4:AA:68:7E:E8:E9:D1:AB:7D:53:29:49
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 01976044995FF3CFC14577C2440B0B5A8C37
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/s-x7d6jJvL70qmh-6OnRq31TKUk.roa
Signing time: Wed 11 Jun 2025 18:33:17 +0000
ROA not before: Wed 11 Jun 2025 18:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208537
IP address blocks: 91.230.237.0/24 maxlen: 24
94.101.104.0/24 maxlen: 24
192.83.120.0/24 maxlen: 24
194.102.239.0/24 maxlen: 24
195.138.39.0/24 maxlen: 24
213.159.24.0/23 maxlen: 23
2a11:800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:44:99:5f:f3:cf:c1:45:77:c2:44:0b:0b:5a:8c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jun 11 18:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ec7b77a8c9bcbef4aa687ee8e9d1ab7d532949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:a7:11:40:41:d8:d9:85:f5:1f:d7:fe:58:
6c:0b:63:a6:37:fa:84:cd:3e:b1:bc:93:b8:b9:24:
4d:aa:91:ea:5c:80:ff:a6:44:7e:e5:7b:9a:1b:b0:
10:de:80:69:09:88:22:e8:34:1f:37:7a:e9:2d:e7:
ab:d4:05:9a:58:e4:97:79:08:1b:42:1a:48:b7:c0:
b6:92:9f:3b:61:e7:24:30:0e:1c:17:0c:b1:8b:8c:
c7:f2:42:8e:0f:9e:ed:8e:78:48:60:a6:d3:0e:44:
6f:63:23:fd:a2:c2:58:7c:8d:33:51:6b:7a:8c:bf:
21:bb:19:37:7e:d4:76:f6:5f:4e:ee:62:66:71:3c:
15:c2:d8:10:c3:36:56:e2:d9:ab:4c:74:61:d2:71:
cc:ae:90:ae:33:6f:8e:99:3c:6a:2b:3b:17:ad:6d:
23:38:d6:7e:d1:fe:26:1b:3e:84:92:1a:f9:09:ea:
c1:7d:dd:ce:0b:87:a3:2c:5a:f3:28:a9:9d:43:06:
5e:04:82:3e:3f:d3:34:ad:51:46:af:19:55:80:03:
1e:2e:7c:29:37:c9:1e:c1:e4:96:63:2e:10:e4:eb:
18:2f:fd:47:4a:fc:a9:41:8e:46:25:38:0a:c1:11:
15:eb:db:74:92:24:3f:cb:6a:7c:f9:9d:32:59:17:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:7B:77:A8:C9:BC:BE:F4:AA:68:7E:E8:E9:D1:AB:7D:53:29:49
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/s-x7d6jJvL70qmh-6OnRq31TKUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.237.0/24
94.101.104.0/24
192.83.120.0/24
194.102.239.0/24
195.138.39.0/24
213.159.24.0/23
IPv6:
2a11:800::/29
Signature Algorithm: sha256WithRSAEncryption
b0:5a:f7:d7:8a:73:ab:69:04:40:26:7e:2d:ec:2b:84:b1:ed:
dc:4f:21:2a:cc:c1:bf:7f:71:a3:ee:83:7c:69:00:4d:12:2f:
88:0c:8f:67:c4:85:4b:a1:60:15:3f:a4:39:4f:a7:55:f1:c9:
a4:6f:82:95:bc:ac:c8:a5:98:91:ec:4d:83:93:14:ff:d3:18:
c3:e2:b6:f1:eb:8f:17:57:99:fd:19:25:29:0b:52:74:d1:40:
79:d5:05:2b:70:cf:04:50:5d:23:54:26:a5:bf:e6:8d:b1:ff:
f7:82:a4:1d:d6:61:e3:6d:2a:43:5b:89:de:0c:2e:77:23:d9:
d9:53:c1:df:f7:e1:dc:15:5e:06:bc:b0:67:45:56:55:5a:9b:
b4:97:09:92:7b:ae:b1:eb:73:19:c2:d4:25:00:40:a0:df:bb:
e1:73:e7:4c:29:d7:97:dc:7e:4f:c9:5e:ec:a0:da:37:83:6e:
43:23:23:ab:e0:c1:34:f5:d4:96:67:64:6c:91:8a:02:30:4a:
92:96:45:ae:0b:5c:f5:62:64:d4:b0:1c:d4:37:16:ca:f7:ae:
9b:68:e0:39:13:54:cb:1b:46:5a:58:10:60:b8:f6:dd:e7:07:
23:88:dd:8d:ab:71:64:83:fa:94:ac:88:93:43:73:95:40:f6:
9e:ea:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:24:05 2025 by rpki-client