Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ynCIk3NS82bAxC4bxdT4FRMhKFc.roa
File: ynCIk3NS82bAxC4bxdT4FRMhKFc.roa (raw, json)
Hash identifier: Sd7zmWJjLWtCz2MkyGV7bmkj/LTSXIAyQ+i+3oBaXTo=
Subject key identifier: CA:70:88:93:73:52:F3:66:C0:C4:2E:1B:C5:D4:F8:15:13:21:28:57
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019870E86E1B8AB70B9FB41E20F2CC857948
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ynCIk3NS82bAxC4bxdT4FRMhKFc.roa
Signing time: Sun 03 Aug 2025 17:08:57 +0000
ROA not before: Sun 03 Aug 2025 17:08:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.152.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.27.0/24 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.235.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:70:e8:6e:1b:8a:b7:0b:9f:b4:1e:20:f2:cc:85:79:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 3 17:08:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7088937352f366c0c42e1bc5d4f81513212857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:59:04:69:fd:6b:e0:5b:09:9c:56:a3:91:
91:08:14:1e:91:5f:ac:32:31:86:75:70:b1:91:f6:
3c:5a:8a:44:36:a0:4b:24:57:d4:7d:ff:f6:10:ef:
44:5a:11:7a:17:8e:af:f4:ab:85:4c:27:5d:da:ae:
b7:ef:d3:aa:18:64:67:d2:dd:aa:af:65:81:77:df:
00:72:e5:53:f5:5f:38:f9:b6:c1:2a:17:7c:74:53:
55:3f:06:c8:69:c0:f4:54:e4:2c:b3:d5:60:52:8c:
b5:7a:4b:21:14:7d:7e:bc:17:a1:90:16:5f:ae:a5:
33:5a:06:92:9e:d7:79:ab:2c:cc:96:0f:25:52:c9:
9e:29:79:c2:9e:b6:78:d7:24:36:23:53:dc:91:08:
cd:3e:bf:e2:24:7e:be:3f:9f:27:2a:0e:7b:b3:72:
b0:7f:80:d9:59:ad:42:6b:ee:1b:2e:0c:d6:ad:86:
7d:22:68:eb:70:4f:e6:7d:f6:0a:7e:49:5d:c8:dc:
5f:a8:40:77:12:d5:cb:f3:6f:29:b5:ee:93:c7:44:
6f:e2:94:e4:aa:7e:e9:f0:3e:c3:97:41:c6:7e:ce:
91:c5:b7:ff:54:a9:41:b2:ec:bb:23:d2:7e:3d:01:
45:18:9b:c8:b5:5f:76:75:47:6b:b8:74:aa:ad:da:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:88:93:73:52:F3:66:C0:C4:2E:1B:C5:D4:F8:15:13:21:28:57
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ynCIk3NS82bAxC4bxdT4FRMhKFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.83.0-82.153.84.255
82.153.152.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.43.0/24
89.213.54.0/24
89.213.98.0/24
89.213.159.0/24
89.213.161.0/24
89.213.232.0-89.213.237.255
109.176.27.0/24
109.176.32.0/19
109.176.201.0/24
109.176.235.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b2:1c:dd:6b:cd:4a:6d:72:bf:fc:92:7e:cc:8e:31:35:eb:
91:38:4c:c5:6b:5f:93:10:24:f2:1e:0a:bb:a7:42:33:6c:af:
cd:07:3a:df:3d:6e:64:6a:7e:06:b2:20:2f:6e:f7:53:07:88:
6a:66:3b:91:b1:14:e2:77:51:c3:33:aa:cd:bb:ca:ac:f3:98:
0b:71:b0:42:ec:c9:3c:9f:55:e3:84:63:b9:f1:b7:46:1d:d9:
f5:02:4d:69:fd:d4:23:7c:e3:0b:8e:f4:e2:b1:b8:39:bb:e6:
b5:f9:56:8f:28:98:38:7b:24:ca:d1:93:27:ac:6b:36:df:00:
e5:78:95:d8:d9:da:94:04:62:4d:80:d4:77:21:62:79:d6:62:
04:d9:3c:20:be:89:ff:8d:b3:3e:ee:02:3a:1c:66:f6:f7:4f:
bc:56:01:08:f0:6a:6e:99:9e:23:62:4a:9f:ab:7c:1e:1f:56:
7f:f7:35:3f:46:75:6f:00:61:e5:f5:18:6e:2a:ea:cf:c5:17:
20:21:2b:98:57:2f:bc:54:fe:e9:48:e8:8a:3f:c2:ff:ac:c3:
09:af:85:64:8c:cc:4a:27:ce:2b:44:8a:7f:e8:dc:3c:a1:f8:
3e:ca:66:51:19:88:d4:57:2b:b8:bf:1e:cb:2e:16:88:12:2a:
4d:50:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:33 2025 by rpki-client