Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q4YRB2U4ShPFV44W-lSaZEGcHlQ.roa
File: q4YRB2U4ShPFV44W-lSaZEGcHlQ.roa (raw, json)
Hash identifier: 6RKaoO2VKPbC14+eFBDofWlunxpZUFYCNUvJMwTaRn4=
Subject key identifier: AB:86:11:07:65:38:4A:13:C5:57:8E:16:FA:54:9A:64:41:9C:1E:54
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01984FCAC3DECDAC08F69895A5B8B16A34B2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q4YRB2U4ShPFV44W-lSaZEGcHlQ.roa
Signing time: Mon 28 Jul 2025 06:49:05 +0000
ROA not before: Mon 28 Jul 2025 06:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62390
IP address blocks: 89.33.13.0/24 maxlen: 24
89.37.116.0/24 maxlen: 24
89.37.117.0/24 maxlen: 24
89.37.118.0/24 maxlen: 24
89.45.12.0/23 maxlen: 23
89.45.12.0/24 maxlen: 24
89.45.13.0/24 maxlen: 24
89.47.232.0/24 maxlen: 24
93.119.105.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
188.240.221.0/24 maxlen: 24
2001:4d18:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:ca:c3:de:cd:ac:08:f6:98:95:a5:b8:b1:6a:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 28 06:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab86110765384a13c5578e16fa549a64419c1e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:23:de:7a:5c:2a:f7:c3:8c:e1:0f:c3:c4:
f0:cb:26:17:87:b3:50:a1:f1:60:a8:52:61:54:fb:
b6:70:42:15:a7:c7:3a:d8:aa:de:ab:a9:0b:04:db:
70:96:fa:ca:3a:c5:98:15:f6:3c:c8:5e:07:06:1b:
d7:49:97:9c:cd:f1:78:a5:5c:0a:05:f4:02:90:1c:
a0:b0:2a:cb:22:fd:70:ba:a3:8d:5c:a0:51:44:38:
24:9e:59:ee:1f:96:32:14:56:d8:f6:51:42:3e:b2:
ec:53:51:34:75:ec:76:30:0a:d7:54:29:07:5f:4f:
6b:a9:f9:93:40:c0:92:61:3b:9b:9d:93:c2:a6:4c:
6c:d6:52:22:fd:4a:09:97:37:af:aa:34:a6:db:f6:
44:fd:1d:bf:ea:bd:09:9c:0b:ba:7f:87:47:59:6a:
52:47:ba:54:be:e9:95:bf:2b:59:7d:11:c3:85:6c:
38:42:f0:60:63:3a:07:22:10:7e:cb:1f:bf:d3:98:
fd:ab:68:e3:f7:a5:53:8e:76:d0:ac:ee:f5:e1:7f:
ca:02:03:0b:1c:ac:a3:7b:3b:f5:d6:e4:98:87:cc:
b0:33:35:cc:97:28:d3:1e:27:cf:31:92:44:9b:b1:
89:f1:3e:41:d6:c0:ef:eb:6b:58:a7:2f:63:dd:97:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:11:07:65:38:4A:13:C5:57:8E:16:FA:54:9A:64:41:9C:1E:54
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q4YRB2U4ShPFV44W-lSaZEGcHlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.13.0/24
89.37.116.0-89.37.118.255
89.45.12.0/23
89.47.232.0/24
93.119.105.0/24
188.240.210.0/24
188.240.221.0/24
IPv6:
2001:4d18:2::/48
Signature Algorithm: sha256WithRSAEncryption
31:a1:a1:57:ff:60:6d:3f:2a:6e:b9:ee:38:69:fd:13:4f:05:
54:c3:f7:7d:07:2b:7e:42:80:52:a7:a7:67:57:d5:86:be:a1:
fa:18:76:b7:bf:6b:96:54:3a:89:05:43:a2:d3:79:f7:78:c1:
87:29:87:b2:7c:e1:ac:cc:ee:36:ed:a2:ea:b4:9f:11:c3:61:
25:62:7a:eb:40:64:3f:53:2f:a5:b0:96:4e:58:2f:f2:63:81:
b8:01:19:e0:b3:1a:dc:07:5a:a8:a4:b0:50:c6:c0:b4:ba:3c:
f0:2c:bd:a6:de:33:11:6b:3b:78:d2:26:6f:b9:b3:5d:9d:7c:
3b:de:06:da:e5:67:9d:be:8a:51:31:88:87:f7:fd:31:66:6c:
d2:12:f2:6b:9c:e9:09:b4:36:31:3f:2a:56:98:b1:4d:31:cc:
fe:29:22:11:5d:6c:26:e5:98:27:70:00:86:3e:5e:dc:36:07:
a8:76:e4:40:0b:eb:e7:01:21:14:35:bb:a0:61:da:ef:de:0c:
af:68:71:23:05:af:dd:3a:1c:21:f9:ea:4c:39:8b:49:97:e4:
ca:59:0c:c1:c8:41:8c:5b:16:f0:3b:2b:3a:4e:d9:46:c8:8e:
de:1f:63:06:fa:95:00:c0:95:63:c3:bc:72:7d:fe:4a:ae:e9:
95:d8:3d:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:40 2025 by rpki-client