Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/t7YVwLEhnezzl9-Xl7NYFgwUm_w.roa
File: t7YVwLEhnezzl9-Xl7NYFgwUm_w.roa (raw, json)
Hash identifier: sARgA4qf/PKKALi5pk5CnSjB8yw2FghdN9RiSdP29Kk=
Subject key identifier: B7:B6:15:C0:B1:21:9D:EC:F3:97:DF:97:97:B3:58:16:0C:14:9B:FC
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0198523ED0FB84E394AC1A867BA86B7D99AC
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/t7YVwLEhnezzl9-Xl7NYFgwUm_w.roa
Signing time: Mon 28 Jul 2025 18:15:05 +0000
ROA not before: Mon 28 Jul 2025 18:15:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.68.245.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.184.0/23 maxlen: 23
185.81.186.0/23 maxlen: 23
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 22
185.96.38.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.101.203.0/24 maxlen: 24
185.175.224.0/23 maxlen: 23
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:3e:d0:fb:84:e3:94:ac:1a:86:7b:a8:6b:7d:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jul 28 18:15:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b615c0b1219decf397df9797b358160c149bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:1d:68:43:ab:3d:ec:5d:50:67:19:2a:2c:
ca:e6:ca:8e:84:c9:d4:7e:ba:bd:d9:52:9a:8a:ca:
2a:d1:fb:c1:52:04:41:31:ca:ea:83:03:4f:c2:bb:
3c:76:fc:11:40:fa:5a:7b:e8:62:e9:d0:d1:98:4d:
0c:d4:09:62:73:eb:df:fb:a9:de:f0:47:4a:55:ae:
43:b7:4d:f1:ed:97:69:d9:ef:b9:3b:08:38:90:8e:
e3:7b:4a:1e:4a:09:13:eb:4b:63:e8:66:bd:21:eb:
f8:66:89:47:78:9f:df:6c:af:54:13:62:79:83:ef:
3a:46:34:73:44:32:96:7a:52:2c:f8:f0:45:c6:12:
44:d5:5c:79:14:e5:2c:c0:d0:49:1c:e3:ea:29:2e:
f7:79:a0:22:eb:29:01:c7:82:30:95:7a:e0:75:ad:
c7:14:46:ec:7d:42:55:54:f2:6e:1e:ec:28:08:90:
ba:26:19:f2:91:cd:f7:c7:fe:23:81:ce:c7:7f:d0:
49:d8:d6:44:f3:f1:7a:c5:2d:33:45:79:d4:c4:e5:
d0:c6:a0:97:4e:dd:53:ee:a4:f6:8b:f6:67:94:34:
60:c6:02:13:be:1a:14:54:a3:8c:71:93:fd:42:66:
3e:eb:99:b5:3e:c4:a7:f5:5e:74:bd:e2:5d:79:a6:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:15:C0:B1:21:9D:EC:F3:97:DF:97:97:B3:58:16:0C:14:9B:FC
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/t7YVwLEhnezzl9-Xl7NYFgwUm_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.68.245.0/24
185.81.174.0/23
185.81.184.0/22
185.89.104.0/21
185.96.38.0/24
185.97.0.0/22
185.101.203.0/24
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0e:bb:74:ad:e8:94:e9:0c:de:53:05:34:89:db:a9:df:3a:
b7:2d:41:b7:b6:8d:09:93:48:3e:b9:e2:9c:4e:62:3e:e4:74:
12:3f:cc:73:e5:ba:5c:63:56:fc:36:e1:ed:5c:0e:17:2c:8e:
83:a1:59:11:26:f7:77:b8:36:b5:6e:31:b7:ac:47:c7:97:a8:
ca:05:f3:20:a4:75:80:b1:f2:ad:f0:8e:45:51:de:d3:a9:ab:
9d:2f:21:1a:76:9b:f1:52:93:ce:99:67:3e:33:e4:1b:a9:6a:
8c:9d:9a:79:ba:a5:a3:12:54:15:10:9a:fd:a6:a2:a2:82:74:
18:62:4f:89:10:ca:e4:fb:21:7d:0a:a6:19:d6:d6:43:40:b3:
10:37:b8:bb:c2:4a:15:b9:f0:b3:e1:30:a1:cb:b1:eb:3f:3e:
dd:38:e0:20:a1:c5:42:ae:bc:28:69:f6:3b:fa:64:ca:bc:4a:
d5:22:2f:42:ea:46:bb:f0:e6:54:be:17:1b:62:fd:a1:e3:c5:
e3:66:29:30:8c:a7:72:2c:1d:5f:e6:10:f4:5e:d8:63:ac:f8:
d6:1b:5d:19:0a:ba:f1:7f:22:11:83:4a:e7:03:c2:41:02:99:
64:9a:03:3d:45:38:79:b4:b9:4c:a7:8a:6a:93:18:2c:f4:0e:
ef:7b:21:ce
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZhSPtD7hOOUrBqGe6hrfZmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjUwNzI4MTgxNTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2I2MTVjMGIxMjE5ZGVjZjM5N2RmOTc5N2IzNTgxNjBjMTQ5YmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYodaEOrPexdUGcZKizK5sqOhMnU
frq92VKaisoq0fvBUgRBMcrqgwNPwrs8dvwRQPpae+hi6dDRmE0M1Alic+vf+6ne
8EdKVa5Dt03x7Zdp2e+5Owg4kI7je0oeSgkT60tj6Ga9Iev4ZolHeJ/fbK9UE2J5
g+86RjRzRDKWelIs+PBFxhJE1Vx5FOUswNBJHOPqKS73eaAi6ykBx4IwlXrgda3H
FEbsfUJVVPJuHuwoCJC6Jhnykc33x/4jgc7Hf9BJ2NZE8/F6xS0zRXnUxOXQxqCX
Tt1T7qT2i/ZnlDRgxgITvhoUVKOMcZP9QmY+65m1PsSn9V50veJdeaYo8QIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFLe2FcCxIZ3s85ffl5ezWBYMFJv8MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvdDdZVndMRWhuZXp6bDktWGw3TllGZ3dVbV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCWRM4AwQA
uUT1AwQBuVGuAwQCuVG4AwQDuVloAwQAuWAmAwQCuWEAAwQAuWXLAwQBua/gAwQA
1arfMA0GCSqGSIb3DQEBCwUAA4IBAQA9Drt0reiU6QzeUwU0idup3zq3LUG3to0J
k0g+ueKcTmI+5HQSP8xz5bpcY1b8NuHtXA4XLI6DoVkRJvd3uDa1bjG3rEfHl6jK
BfMgpHWAsfKt8I5FUd7TqaudLyEadpvxUpPOmWc+M+QbqWqMnZp5uqWjElQVEJr9
pqKignQYYk+JEMrk+yF9CqYZ1tZDQLMQN7i7wkoVufCz4TChy7HrPz7dOOAgocVC
rrwoafY7+mTKvErVIi9C6ka78OZUvhcbYv2h48XjZikwjKdyLB1f5hD0XthjrPjW
G10ZCrrxfyIRg0rnA8JBAplkmgM9RTh5tLlMp4pqkxgs9A7veyHO
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:24 2025 by rpki-client