Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/_I_bzFBtom7oEcOiwkR5XiNwRqU.roa
File: _I_bzFBtom7oEcOiwkR5XiNwRqU.roa (raw, json)
Hash identifier: amQyWNDHTJkNJ6KscXkirJi5wKu8j7itmXKbu1HYmZk=
Subject key identifier: FC:8F:DB:CC:50:6D:A2:6E:E8:11:C3:A2:C2:44:79:5E:23:70:46:A5
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01985083B314B59B8884D99E2D575DCC0D5C
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/_I_bzFBtom7oEcOiwkR5XiNwRqU.roa
Signing time: Mon 28 Jul 2025 10:11:04 +0000
ROA not before: Mon 28 Jul 2025 10:11:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 31.24.224.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
37.123.112.0/24 maxlen: 24
46.23.64.0/21 maxlen: 21
46.23.72.0/22 maxlen: 22
46.23.76.0/22 maxlen: 24
77.92.64.0/21 maxlen: 21
77.92.72.0/22 maxlen: 22
77.92.76.0/23 maxlen: 23
77.92.78.0/23 maxlen: 23
77.92.80.0/20 maxlen: 20
82.163.72.0/21 maxlen: 24
83.170.64.0/18 maxlen: 18
83.170.69.0/24 maxlen: 24
88.202.176.0/23 maxlen: 23
88.202.177.0/24 maxlen: 24
88.202.178.0/24 maxlen: 24
88.202.179.0/24 maxlen: 24
88.202.180.0/22 maxlen: 22
88.202.184.0/24 maxlen: 24
88.202.185.0/24 maxlen: 24
88.202.186.0/23 maxlen: 23
88.202.188.0/22 maxlen: 22
88.202.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 21
109.123.64.0/18 maxlen: 24
176.67.160.0/21 maxlen: 21
176.67.169.0/24 maxlen: 24
176.67.171.0/24 maxlen: 24
176.67.172.0/22 maxlen: 24
185.7.224.0/22 maxlen: 24
2a02:2498::/47 maxlen: 47
2a02:2498:4::/48 maxlen: 48
2a02:2498:5::/48 maxlen: 48
2a02:2498:16::/48 maxlen: 48
2a02:2498:1000::/36 maxlen: 36
2a02:2498:257b::/48 maxlen: 48
2a02:2498:53aa::/48 maxlen: 48
2a02:2498:6d7b::/48 maxlen: 48
2a02:2498:8000::/36 maxlen: 36
2a02:2498:9000::/36 maxlen: 36
2a02:2498:a000::/36 maxlen: 36
2a02:2498:b000::/36 maxlen: 36
2a02:2498:e000::/36 maxlen: 36
2a02:2498:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:83:b3:14:b5:9b:88:84:d9:9e:2d:57:5d:cc:0d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jul 28 10:11:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc8fdbcc506da26ee811c3a2c244795e237046a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:31:20:24:a5:e4:ac:78:33:f2:0b:4b:52:
99:72:a2:1d:73:bc:f8:df:10:81:70:c8:24:4c:b6:
94:08:a7:7e:51:16:91:cb:1e:71:d5:6d:fc:e3:6f:
57:c6:c2:8a:8f:0e:3c:1b:2c:e6:ad:b1:69:bf:d7:
9c:92:6a:c4:4f:bc:97:08:17:c4:ce:6a:ac:b2:d9:
e0:cb:a7:89:37:b1:d6:16:52:b3:7e:b1:cd:0c:eb:
e2:be:5f:07:70:90:09:7c:73:72:03:d7:88:af:7a:
26:66:43:6b:78:4d:78:77:ae:c6:20:fa:d4:f3:d3:
89:27:24:f9:92:a5:52:61:29:a6:be:52:db:55:6e:
ee:7e:f3:3a:3d:58:cb:da:84:e5:0e:94:99:0e:af:
ae:06:e7:1f:46:34:51:c8:d8:b0:7d:6e:96:f8:b6:
82:93:5b:72:b2:57:01:88:f4:26:91:8d:50:ce:d5:
5b:ea:bf:64:f4:57:6f:0b:a4:c4:b8:5f:5f:ad:59:
6c:94:97:de:2c:6d:f5:81:ed:cf:18:7f:8f:aa:6c:
f5:c6:91:29:7b:13:ff:da:b4:6f:4b:2e:f9:af:7f:
17:a1:91:53:9b:e1:93:6c:9f:33:44:82:a4:dd:4f:
86:ff:87:30:11:ba:68:db:7e:39:c1:27:93:c9:e9:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:DB:CC:50:6D:A2:6E:E8:11:C3:A2:C2:44:79:5E:23:70:46:A5
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/_I_bzFBtom7oEcOiwkR5XiNwRqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/21
176.67.169.0/24
176.67.171.0-176.67.175.255
185.7.224.0/22
IPv6:
2a02:2498::/47
2a02:2498:4::/47
2a02:2498:16::/48
2a02:2498:1000::/36
2a02:2498:257b::/48
2a02:2498:53aa::/48
2a02:2498:6d7b::/48
2a02:2498:8000::/34
2a02:2498:e000::/35
Signature Algorithm: sha256WithRSAEncryption
30:72:ac:ee:89:5c:3e:ec:00:50:ca:ae:51:ad:2c:42:f1:7e:
51:1d:50:a9:d4:2a:8a:60:ba:b6:aa:d1:35:14:d0:30:2b:34:
51:58:7d:4e:e4:08:cc:31:84:ef:2f:12:ec:75:8a:cb:68:45:
b5:1d:42:21:e0:f3:2a:b0:17:20:e4:71:c4:8e:0e:72:cb:44:
26:cc:74:4a:2e:6f:ae:8a:36:ef:7c:c2:51:de:d4:7f:8a:09:
26:f7:e2:c0:3e:6e:23:cf:eb:81:dc:08:97:d8:e8:32:3b:00:
79:73:0a:79:c1:8a:5c:66:7e:da:2d:4c:c2:8e:69:c9:4e:5a:
05:b7:05:6c:49:bf:7e:96:04:28:96:cf:85:47:19:eb:ce:6b:
6a:a9:b4:35:bf:63:25:16:1d:25:b6:7f:a3:99:05:64:9c:f0:
3d:72:3c:b7:6e:f0:e8:1a:31:2b:0c:2d:ef:7e:41:55:3a:0d:
ef:21:ee:fc:98:17:bd:22:49:9e:f4:17:7b:b6:4f:ab:d0:c8:
4f:36:30:dd:ab:ed:d8:ed:f4:f0:12:38:28:fe:d3:99:a8:63:
ca:91:0a:44:a2:69:07:98:11:b7:e5:0a:86:65:ca:f5:5b:3e:
ff:68:aa:00:52:02:b8:29:84:d9:bd:9d:82:b7:6a:d8:25:96:
fd:b0:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:33 2025 by rpki-client