Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/p6M470wF9FDWTlxX3tN1EXevHEI.roa
File: p6M470wF9FDWTlxX3tN1EXevHEI.roa (raw, json)
Hash identifier: Udla2Kh8OcSm6wejVqnty7No79HRkZrRusn+wH/AMNk=
Subject key identifier: A7:A3:38:EF:4C:05:F4:50:D6:4E:5C:57:DE:D3:75:11:77:AF:1C:42
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 01984B1A81A5ADCB3E14397306E8DAFC9D2C
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/p6M470wF9FDWTlxX3tN1EXevHEI.roa
Signing time: Sun 27 Jul 2025 08:58:04 +0000
ROA not before: Sun 27 Jul 2025 08:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.22.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
159.117.224.0/24 maxlen: 24
159.117.225.0/24 maxlen: 24
159.117.226.0/24 maxlen: 24
159.117.227.0/24 maxlen: 24
159.117.229.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.181.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.184.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
216.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:1a:81:a5:ad:cb:3e:14:39:73:06:e8:da:fc:9d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Jul 27 08:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7a338ef4c05f450d64e5c57ded3751177af1c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:d7:36:71:69:7e:08:d3:63:9e:0f:a2:76:
bb:95:72:88:5d:80:ed:98:c6:0f:e7:46:6c:dc:00:
54:6d:62:65:d1:f5:58:70:fd:01:d7:d0:19:e6:85:
9f:88:1c:dc:1d:93:f6:e1:7a:18:c7:bd:43:80:6e:
76:92:2a:3d:5f:2e:70:d4:12:0a:cc:7f:53:f4:a0:
03:e2:39:1b:75:55:e3:dd:64:bd:97:6c:5e:98:09:
81:1c:14:a8:d4:8f:0a:63:af:63:98:a6:fa:ca:e9:
72:0d:64:6f:5d:2d:4b:d5:12:6d:f4:85:43:b9:32:
b6:b2:dc:a0:e0:72:64:a8:59:18:0e:7f:bc:9a:29:
87:fd:2d:c3:61:dc:6a:a7:06:7c:88:90:f2:71:c2:
17:65:e5:0c:64:04:04:4e:ae:b4:40:b9:80:a1:68:
cf:5a:f1:9f:6d:58:ec:a6:b7:38:53:8b:27:2f:51:
3e:88:af:7d:7d:61:db:d9:da:32:5c:a6:73:62:8d:
39:fd:b6:e5:fe:64:bd:f1:b7:08:c7:fe:4f:bb:1c:
0f:86:1f:6f:1e:05:cb:22:12:ea:c8:67:11:59:ea:
b7:b9:44:a0:97:98:61:21:1e:ee:01:a6:fb:66:7e:
9f:69:8b:c0:9d:45:b8:81:67:b9:63:ea:6a:e9:e7:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:38:EF:4C:05:F4:50:D6:4E:5C:57:DE:D3:75:11:77:AF:1C:42
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/p6M470wF9FDWTlxX3tN1EXevHEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.31.255
159.117.224.0/22
159.117.229.0/24
185.114.120.0/22
209.206.0.0/19
216.252.177.0-216.252.187.255
216.252.189.0-216.252.191.255
Signature Algorithm: sha256WithRSAEncryption
78:b4:1a:ff:97:8a:17:34:d8:b2:ab:1c:04:07:45:f7:76:ed:
a0:33:7b:3c:9e:0e:13:7a:b3:1d:78:63:0f:42:53:bf:5a:7a:
8a:91:1e:26:13:94:b8:37:9c:0f:db:88:84:17:89:4f:99:31:
bb:c3:f0:4d:da:e2:2d:4b:a1:13:99:2f:40:ba:bc:23:e4:7e:
f9:d5:88:4e:9a:f3:7e:73:61:53:66:68:9e:e3:95:ce:a1:ee:
73:dc:e0:17:f8:25:82:a0:e9:cc:fa:e7:a4:1f:40:48:ea:b6:
50:67:2c:3c:5e:0c:a9:2d:7b:8b:3f:be:67:26:59:28:f9:0e:
02:a0:d3:fd:fd:8b:bc:ea:cc:56:c5:0d:5d:ef:4c:52:ae:fa:
41:b9:7d:d9:aa:2b:6d:cb:5d:2a:75:4d:99:aa:fd:fa:12:ce:
ed:23:ac:49:6c:35:f4:e1:b4:12:d9:6b:23:21:77:ec:f0:0d:
04:31:5e:34:d9:1c:63:1e:1a:b3:69:02:24:91:a1:25:6b:6c:
13:ef:b4:e7:c6:04:8b:e8:a3:f9:54:f3:46:65:a4:a5:8a:36:
fa:ea:55:71:80:ba:e8:13:a4:3e:ce:8e:10:64:0a:94:0f:76:
4b:fc:4d:52:9e:b3:31:0a:89:a8:ed:8e:88:b3:d2:e0:6a:82:
ed:c6:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:51 2025 by rpki-client