
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa
File: vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa (raw, json)
Hash identifier: xhwOdLfAiXhH5IfFXepqmzE3AX5XcEJOZ9p2seaEDJE=
Subject key identifier: BD:B4:A4:C3:80:2B:CE:AF:23:FC:0F:FB:FD:E4:DB:F5:48:6B:F7:29
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 01985FDD8242A91CCC36374B0A065F1FD8A9
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa
Signing time: Thu 31 Jul 2025 09:43:28 +0000
ROA not before: Thu 31 Jul 2025 09:43:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 89.184.0.0/21 maxlen: 24
89.184.30.0/24 maxlen: 24
89.184.31.0/24 maxlen: 24
193.222.251.0/24 maxlen: 24
193.223.69.0/24 maxlen: 24
193.223.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:dd:82:42:a9:1c:cc:36:37:4b:0a:06:5f:1f:d8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Jul 31 09:43:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdb4a4c3802bceaf23fc0ffbfde4dbf5486bf729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:75:10:87:18:a6:87:66:3d:34:27:c9:2e:
f4:72:92:dd:c2:2e:ff:bd:16:7a:18:aa:84:1e:08:
99:b8:64:ed:fa:41:eb:c0:b4:d0:d8:82:e7:ec:38:
f8:17:c3:9a:1f:2d:bb:bb:e7:2f:61:f0:5d:57:60:
51:a1:d4:bf:de:97:7c:3f:41:65:9a:ed:a3:aa:84:
90:1a:35:55:02:ae:9c:2c:2b:d4:fa:0e:8d:20:0d:
1d:b0:1b:d1:85:0a:2e:c3:27:28:2d:3c:70:18:e9:
3f:7f:84:c9:e4:97:11:63:e6:90:c8:7f:0b:eb:cb:
2a:e2:d5:8b:a1:52:10:8f:6a:e4:d8:e9:04:52:cc:
d9:0f:22:39:b0:58:ed:43:ec:bb:b0:39:aa:3d:64:
f4:6c:ed:ba:ca:55:51:74:c1:6f:1c:d6:39:9a:f1:
69:4c:97:8b:03:b1:db:97:6a:cb:cf:4c:72:64:22:
5e:d8:d1:08:96:71:63:f9:64:00:b7:ef:b9:fe:95:
cf:1c:cd:22:8a:89:a5:25:a5:39:91:a2:75:53:14:
c5:cb:70:a1:50:2c:53:22:ab:5d:d8:c4:c5:2a:c4:
75:2b:2b:9c:a6:a3:d1:d2:73:6f:8b:09:26:3c:f6:
a1:51:00:6f:29:5d:c4:f9:b1:87:f6:32:b1:de:f4:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:A4:C3:80:2B:CE:AF:23:FC:0F:FB:FD:E4:DB:F5:48:6B:F7:29
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/vbSkw4Arzq8j_A_7_eTb9Uhr9yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.0.0/21
89.184.30.0/23
193.222.251.0/24
193.223.69.0/24
193.223.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:96:1d:c7:c4:1b:a2:86:74:80:15:14:7d:b6:4e:a1:a3:0c:
fc:11:e9:4f:00:10:36:55:a9:e2:ce:46:74:d7:57:61:4a:62:
79:9f:46:57:ff:a2:7e:9d:c6:cb:8f:80:de:45:db:c6:2d:65:
d1:04:43:51:27:57:75:ed:dd:db:ab:f6:d2:10:8b:c7:07:f7:
4b:8c:f7:da:fd:a9:0b:6d:94:87:eb:27:da:c4:24:4a:1e:9d:
fd:91:6a:b4:d0:c2:61:29:34:9a:e6:88:25:af:3c:5c:94:ea:
1a:d7:c6:f6:cd:db:ac:71:6d:db:a2:d6:fd:11:e3:09:33:f6:
23:fc:75:bb:0e:15:08:81:e7:cf:6c:0e:55:c0:09:ab:2f:3e:
3c:8e:78:48:af:5c:bc:2d:32:9b:88:99:a6:8f:d6:e7:d0:fe:
42:84:57:ff:8a:1c:69:a0:2c:17:33:08:18:d9:d7:e0:69:5e:
e6:d6:17:11:3e:4c:52:75:62:c7:9a:ca:62:ce:3a:fd:11:05:
55:e2:e2:cc:c7:a8:fa:e1:c5:a1:a7:8a:d7:cf:ef:4b:c9:0e:
63:33:50:47:72:18:9d:7b:a2:4b:4c:44:24:77:46:1a:51:a1:
de:f1:29:30:57:41:71:e6:92:1e:c7:1a:6c:b5:df:b8:90:08:
c4:8f:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:00 2025 by rpki-client