Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F4B2wPO2gtmQHMN1kpgq1S6NL98.roa
File: F4B2wPO2gtmQHMN1kpgq1S6NL98.roa (raw, json)
Hash identifier: Fx1U2gVOxz2EPgZ+VJKqVrrd5U9pJvOY1otIYG7cl4I=
Subject key identifier: 17:80:76:C0:F3:B6:82:D9:90:1C:C3:75:92:98:2A:D5:2E:8D:2F:DF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019861C9273ABF288EFF73BDD1CEE201C86E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F4B2wPO2gtmQHMN1kpgq1S6NL98.roa
Signing time: Thu 31 Jul 2025 18:40:29 +0000
ROA not before: Thu 31 Jul 2025 18:40:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 2.56.138.0/24 maxlen: 24
45.10.108.0/24 maxlen: 24
45.133.32.0/22 maxlen: 22
77.83.80.0/24 maxlen: 24
185.235.247.0/24 maxlen: 24
193.9.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:c9:27:3a:bf:28:8e:ff:73:bd:d1:ce:e2:01:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 31 18:40:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=178076c0f3b682d9901cc37592982ad52e8d2fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:f1:35:e6:ad:2e:d0:7b:9b:29:c8:51:b2:
58:7b:19:73:58:f6:e1:3f:f6:7c:37:ad:81:1b:6f:
91:3c:39:6d:1a:da:f9:72:81:79:b5:b0:e4:fd:58:
27:5e:c9:ea:77:cb:e5:fe:48:42:61:6e:bc:6f:e9:
5b:68:32:4d:4e:3e:53:ec:27:84:f3:88:0b:e5:ed:
42:b8:d6:c6:f1:ad:28:cd:d1:f1:d3:fd:0c:13:20:
6c:32:78:ca:4c:82:45:da:7b:af:70:57:41:4b:a1:
d3:82:7b:3b:55:8f:40:88:2a:5a:81:3b:3c:ff:e8:
34:20:84:39:f4:02:13:8b:29:77:6d:ad:de:f7:d1:
b0:c9:20:74:fb:c4:3f:6b:e6:a8:e7:a7:ff:2f:88:
9e:6f:fe:5e:94:85:cb:7d:56:3c:12:e4:81:29:37:
e1:12:b5:16:fc:99:4d:aa:a5:29:2f:1a:ef:ae:b1:
d5:20:d4:1c:9a:e2:b5:23:97:28:e5:75:b0:1a:0a:
0f:d4:0a:e7:cc:eb:b8:c7:79:e6:02:29:45:6c:7b:
44:65:09:9d:33:99:09:b9:15:2a:de:bf:2c:2c:7c:
14:ba:70:1b:2b:2e:0f:2c:62:27:99:b8:9f:24:b2:
20:59:35:80:fb:58:0d:a3:9a:0d:2d:1c:cd:6e:3e:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:76:C0:F3:B6:82:D9:90:1C:C3:75:92:98:2A:D5:2E:8D:2F:DF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/F4B2wPO2gtmQHMN1kpgq1S6NL98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.138.0/24
45.10.108.0/24
45.133.32.0/22
77.83.80.0/24
185.235.247.0/24
193.9.126.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d8:d7:c9:55:c4:3f:a5:8f:a3:42:d9:0b:8d:c6:6b:f9:d9:
cf:86:3a:a4:b7:00:c0:cd:b9:c0:50:30:97:34:cc:f7:04:ab:
94:02:ca:39:fa:7e:c4:e0:ac:e5:63:3c:a2:11:87:11:31:86:
69:98:6b:89:80:f2:57:8c:63:9e:6f:70:68:80:05:ba:6b:8d:
55:8a:b8:6e:1c:f6:20:82:41:2e:c5:3c:6d:35:7f:ab:74:97:
44:3c:f9:06:63:9a:4a:c9:d8:ab:fc:f1:1f:01:33:05:52:fb:
03:c6:46:8c:61:89:bb:09:c7:a4:4b:2b:d6:ad:0a:af:74:ac:
f4:bf:bb:f3:41:b5:aa:d9:6b:f1:6a:f6:8a:29:48:0d:ff:ed:
9c:4d:2a:7e:f4:94:82:46:75:7f:59:bb:74:e1:81:69:6c:df:
ce:12:62:0b:e3:cc:c9:bd:68:f5:1f:3b:67:5d:48:19:b9:da:
1a:24:37:6e:5f:fd:32:90:c5:58:e5:20:c5:d1:6f:3f:a8:31:
be:42:96:df:14:e6:f5:4e:55:95:85:8e:f6:12:9c:4f:ae:db:
78:13:db:8a:1f:5c:98:7f:fa:08:bf:66:94:2b:7b:bb:12:be:
92:15:fb:51:f6:a1:44:7d:61:3a:c6:42:b2:0f:10:8f:d4:9f:
77:05:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:41:45 2025 by rpki-client