Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ICGjSHr-vE5wO5DNOAG3MRhDQnk.roa
File: ICGjSHr-vE5wO5DNOAG3MRhDQnk.roa (raw, json)
Hash identifier: D64IJFsjciOEV+Fd1AXsNYttLQJ4oU/6B8vF6H/4Sno=
Subject key identifier: 20:21:A3:48:7A:FE:BC:4E:70:3B:90:CD:38:01:B7:31:18:43:42:79
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197C777716D9C5F0A04B8725AC54959AC6B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ICGjSHr-vE5wO5DNOAG3MRhDQnk.roa
Signing time: Tue 01 Jul 2025 19:29:43 +0000
ROA not before: Tue 01 Jul 2025 19:29:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
80.240.88.0/21 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.228.0/24 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.249.0/24 maxlen: 24
89.213.250.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:77:71:6d:9c:5f:0a:04:b8:72:5a:c5:49:59:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 19:29:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2021a3487afebc4e703b90cd3801b73118434279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:35:fe:63:74:5e:2b:8f:fc:50:30:06:4c:
fe:fe:dd:7a:f0:1b:27:a4:4c:e9:0e:fb:b9:7f:26:
f3:4b:b2:0a:c9:7d:cf:79:ec:56:45:c3:54:b5:49:
6a:a5:4e:e0:75:50:47:aa:36:26:67:bc:c5:09:c3:
11:ac:02:4f:d7:78:16:60:ad:4a:34:e3:c7:02:e6:
35:48:ce:86:0e:57:dd:35:08:b8:96:f5:e3:bd:1b:
46:3a:05:43:96:2d:1b:4d:0a:17:b3:77:0c:27:2f:
ff:d4:4a:4b:07:a6:3f:6b:8f:7c:bb:c9:ed:bd:4e:
da:06:ff:69:3e:8d:51:e8:ac:f8:5e:75:f6:f7:d5:
b9:bf:5a:e0:e9:5e:65:3f:c7:9a:02:c5:23:6b:b2:
8d:8c:52:cd:98:d3:91:26:3c:2c:f7:96:cf:d4:bd:
1c:a7:6d:c5:d9:fe:c8:ad:31:cc:8b:33:aa:a5:9a:
3b:49:18:a5:06:86:8f:0a:5e:74:20:79:71:13:94:
58:82:5f:9b:17:b2:72:f0:42:b8:a1:8c:de:78:19:
e8:8e:02:8e:45:d8:e6:0d:12:72:af:f5:11:52:98:
8d:e1:d4:b6:76:5c:1a:3d:79:1a:33:11:9b:a6:4e:
03:45:73:1e:23:d2:03:c4:f3:d9:0a:99:d7:28:1a:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:A3:48:7A:FE:BC:4E:70:3B:90:CD:38:01:B7:31:18:43:42:79
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ICGjSHr-vE5wO5DNOAG3MRhDQnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
80.240.88.0/21
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.228.0/24
89.213.240.0/23
89.213.249.0-89.213.250.255
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
46:38:cc:0b:a0:5c:4f:dc:38:3d:79:19:f9:dd:7e:ed:ad:6e:
18:19:02:9c:24:9c:56:e8:53:c8:50:4b:93:6f:0e:b6:48:36:
5e:2b:69:aa:25:ca:47:15:c1:46:64:01:ff:22:93:f7:30:be:
fb:70:36:38:b7:f3:76:97:fb:42:5c:d2:e7:e0:af:03:4e:e7:
91:a5:33:9d:45:a7:9e:e6:23:a7:ce:a3:36:73:c1:fb:97:23:
a7:30:83:08:90:d5:50:98:18:4c:e0:4c:1f:08:fe:0e:02:9a:
dc:5b:34:ed:7b:96:03:15:ca:ad:8f:7e:de:58:00:a8:96:9a:
6d:87:a3:36:d6:8f:26:b2:24:d4:c4:2b:6b:2b:39:2d:bd:ef:
4d:33:89:14:af:b9:86:6f:24:4a:78:7c:95:f7:92:7b:e6:00:
97:ad:3d:19:bc:c3:f6:05:a5:03:2d:7c:cb:2d:c4:af:8f:dc:
b5:cd:e8:25:3d:63:dc:af:d2:e7:e4:69:b7:fb:c3:12:11:a6:
50:b9:79:05:a3:64:16:9d:b8:10:6a:f8:4d:55:02:1e:ea:3d:
d4:f7:93:7b:3f:02:3a:c9:eb:38:8b:ef:0b:69:73:38:31:de:
60:4b:7a:c6:46:10:40:75:4c:8a:0c:e2:a4:85:a9:87:3e:38:
f5:4c:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:03 2025 by rpki-client