Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Q341m_O_Fvk-c-cSLTgSjBR-6PQ.roa
File: Q341m_O_Fvk-c-cSLTgSjBR-6PQ.roa (raw, json)
Hash identifier: TYpc2N2InZtCXRqs05InmFBPQ4/4e2/n22E3EazYkM4=
Subject key identifier: 43:7E:35:9B:F3:BF:16:F9:3E:73:E7:12:2D:38:12:8C:14:7E:E8:F4
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 01986099F890DE57E290D18AE51AC0573232
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Q341m_O_Fvk-c-cSLTgSjBR-6PQ.roa
Signing time: Thu 31 Jul 2025 13:09:19 +0000
ROA not before: Thu 31 Jul 2025 13:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 83.217.220.0/24 maxlen: 24
83.217.221.0/24 maxlen: 24
83.217.223.0/24 maxlen: 24
85.198.80.0/24 maxlen: 24
85.198.81.0/24 maxlen: 24
85.198.82.0/24 maxlen: 24
85.198.83.0/24 maxlen: 24
89.169.0.0/24 maxlen: 24
89.169.1.0/24 maxlen: 24
89.169.2.0/24 maxlen: 24
89.169.3.0/24 maxlen: 24
89.169.44.0/24 maxlen: 24
89.169.45.0/24 maxlen: 24
89.169.46.0/24 maxlen: 24
89.169.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:99:f8:90:de:57:e2:90:d1:8a:e5:1a:c0:57:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jul 31 13:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=437e359bf3bf16f93e73e7122d38128c147ee8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:b7:53:37:03:7a:6f:66:40:52:5d:35:cd:
92:89:74:30:42:ec:2b:c7:6a:32:68:bf:ec:c4:19:
de:ed:b5:4e:e1:9f:aa:b6:4e:81:08:dd:2c:35:70:
3f:92:a0:bc:34:c9:8b:fe:6d:fe:34:52:aa:07:15:
13:50:1b:d7:34:64:33:c1:2d:d5:82:f8:27:52:c8:
d9:36:8a:0c:c8:bd:e7:49:65:5d:14:e0:0b:36:ff:
c7:18:16:67:bf:02:dd:c0:03:1b:de:40:46:95:1e:
44:7e:e2:13:e8:b1:c5:17:a3:e9:7e:ef:5a:5e:14:
04:75:91:4c:a7:53:fc:0b:1a:da:6d:a4:98:7f:f2:
f2:07:04:4a:49:15:69:ec:88:24:5d:19:d1:72:93:
ac:29:8f:dc:ea:6d:70:fc:54:f2:41:b5:9c:b5:4b:
a3:e3:ae:dd:84:00:b4:53:97:77:b2:85:a4:85:94:
a3:28:b1:ab:49:6f:61:cc:9e:e8:f8:f6:c5:c2:c2:
62:db:39:d1:63:75:88:36:6a:75:8f:7f:02:cf:67:
58:72:16:91:c3:6d:75:3c:1b:20:be:1f:dc:2d:7b:
9f:dc:e8:a9:80:e2:a4:cc:56:8b:aa:b1:21:dc:39:
5f:9c:26:53:81:e3:d5:fe:87:84:78:90:ac:18:ed:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:35:9B:F3:BF:16:F9:3E:73:E7:12:2D:38:12:8C:14:7E:E8:F4
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Q341m_O_Fvk-c-cSLTgSjBR-6PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.220.0/23
83.217.223.0/24
85.198.80.0/22
89.169.0.0/22
89.169.44.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:5b:18:d2:76:d3:8a:57:b6:bc:55:bb:97:1e:09:79:ea:d8:
d8:9c:ff:f4:ad:1a:20:0b:41:a3:97:de:54:6b:73:92:8e:ff:
e3:ec:eb:0e:59:3e:0e:25:cf:fb:2f:01:5a:93:06:90:1a:65:
f3:6e:43:97:47:97:8c:be:3f:82:04:ae:2a:e7:da:ed:40:c7:
1c:8b:b0:5e:fd:b2:16:4b:6e:dc:c3:48:d5:57:59:57:a8:d0:
47:79:f7:63:77:6e:a9:25:46:59:77:ac:5c:82:33:cd:f1:cb:
97:5a:46:70:5a:a0:3e:b0:cf:2d:c6:6e:8e:cd:c9:45:ab:d8:
88:ce:d5:79:ed:fe:2c:2e:1a:e7:1d:60:f7:6e:cf:37:8e:c3:
bb:f6:27:08:a6:f5:bf:a3:78:7b:bf:e5:f0:5b:be:dd:9b:07:
5d:06:de:94:7d:27:ce:81:4c:53:66:2f:73:a9:29:2e:3c:52:
e6:80:79:7b:ac:f7:14:29:99:d8:25:6d:9e:e7:bf:7f:1a:8d:
f7:e2:0a:cd:8c:e6:4c:6d:24:1a:e5:39:d5:b6:e3:25:3c:13:
c7:48:38:84:8c:29:6c:a8:e5:6c:4a:3e:1d:22:5b:40:a3:75:
06:4f:f8:2a:13:3f:e9:eb:5d:32:fb:29:5e:68:ba:e8:11:9c:
40:ba:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:34 2025 by rpki-client