Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bOODJR47PS7L01ZFeZkYEEJI19E.roa
File: bOODJR47PS7L01ZFeZkYEEJI19E.roa (raw, json)
Hash identifier: xTwct60Y+naK/RTM03byku8KexAxWn7LHaH44RMqdM0=
Subject key identifier: 6C:E3:83:25:1E:3B:3D:2E:CB:D3:56:45:79:99:18:10:42:48:D7:D1
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0198523ED14D52555B42380C2C827E4BC80A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bOODJR47PS7L01ZFeZkYEEJI19E.roa
Signing time: Mon 28 Jul 2025 18:15:05 +0000
ROA not before: Mon 28 Jul 2025 18:15:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.59.232.0/22 maxlen: 24
185.68.245.0/24 maxlen: 24
185.79.51.0/24 maxlen: 24
185.79.79.0/24 maxlen: 24
185.81.172.0/24 maxlen: 24
185.81.173.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 24
185.81.186.0/23 maxlen: 24
185.89.40.0/24 maxlen: 24
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 24
185.95.100.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.80.0/24 maxlen: 24
185.96.83.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.97.1.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.112.56.0/23 maxlen: 24
185.175.224.0/23 maxlen: 23
185.175.224.0/24 maxlen: 24
185.175.225.0/24 maxlen: 24
185.185.147.0/24 maxlen: 24
193.221.215.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:3e:d1:4d:52:55:5b:42:38:0c:2c:82:7e:4b:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jul 28 18:15:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce383251e3b3d2ecbd35645799918104248d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:ae:fa:ee:bc:d6:86:0f:b0:9b:d8:f8:7a:
94:e9:85:c6:b2:fa:40:39:d1:b8:5b:b9:cc:83:21:
61:f7:8e:1e:ea:32:4d:b6:88:0e:a1:34:89:91:71:
40:8b:23:c7:fb:6e:4d:eb:aa:13:f1:33:63:67:16:
8e:c3:b7:da:b5:f4:99:cf:62:77:cc:29:67:6a:5e:
42:ad:61:07:18:1f:c4:ea:14:a5:e2:4c:ce:2f:28:
3c:0c:6f:2d:e3:de:64:02:2e:61:b3:ef:24:99:9f:
32:a3:5f:a7:b1:a6:7f:d3:91:19:81:d3:4f:74:94:
f6:f5:60:38:77:74:76:d0:2d:d8:49:f1:e8:58:cd:
01:1a:18:60:e3:11:d5:6a:f9:58:9c:42:ee:c9:7b:
ff:72:06:42:98:d6:d9:06:1c:34:76:d2:2d:cd:94:
04:60:5f:f3:ff:cd:6c:46:81:e1:f6:58:ca:bf:8b:
82:4e:51:75:51:f7:8a:a3:31:73:cb:cb:01:d5:37:
32:f8:6e:87:09:87:14:81:16:3c:c8:a5:79:b2:b8:
a4:fc:0c:5c:eb:33:97:96:95:6f:58:05:da:43:dc:
13:36:ca:d6:5e:80:24:82:98:46:52:ae:04:9d:75:
d9:e0:3e:f8:9b:4d:b2:b0:d4:94:16:99:65:b1:24:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:83:25:1E:3B:3D:2E:CB:D3:56:45:79:99:18:10:42:48:D7:D1
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bOODJR47PS7L01ZFeZkYEEJI19E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.59.232.0/22
185.68.245.0/24
185.79.51.0/24
185.79.79.0/24
185.81.172.0/22
185.81.184.0/22
185.89.40.0/24
185.89.104.0/21
185.95.100.0/22
185.96.80.0/24
185.96.83.0/24
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.112.56.0/23
185.175.224.0/23
185.185.147.0/24
193.221.215.0/24
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ae:3b:ae:a3:4a:57:7f:90:6d:8b:17:08:59:3f:1e:7f:93:
b2:76:67:58:c7:83:02:b2:5b:9e:f7:d0:e6:84:34:96:cf:96:
ee:e8:41:74:f8:c0:e2:c9:e5:29:60:35:87:27:63:2d:3d:09:
cc:c3:db:e8:f2:a8:4d:d6:61:f9:5a:15:c7:1e:3b:75:6e:c5:
e2:27:38:13:9b:01:64:45:04:0b:37:44:09:97:c2:43:8a:6d:
10:7a:10:b4:54:7b:29:1d:16:d1:13:e0:91:76:51:77:cd:e7:
b4:1b:44:6d:be:11:8f:f8:72:de:54:bc:e7:29:05:1a:1d:99:
91:b4:a4:6b:dc:05:32:d1:c7:8c:73:19:d7:d5:ea:9d:c2:37:
c7:05:80:18:76:d9:dd:39:90:bd:6b:28:dd:70:71:e5:4d:0f:
ae:e3:b0:16:0c:eb:f8:28:ce:d8:03:4a:50:ab:76:44:8f:eb:
eb:30:52:fa:40:f1:d7:df:5b:5e:52:c1:bc:88:bc:d7:58:b8:
e5:77:8b:9a:fc:66:16:2c:1c:25:e6:de:41:8c:00:bf:ae:1d:
7c:44:18:b7:db:9d:cd:65:91:2d:5e:bf:e1:fc:77:5f:9b:e7:
d0:59:53:0f:fa:6a:ff:49:4b:ac:a2:38:50:66:1b:45:ef:f2:
80:9b:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:53 2025 by rpki-client