Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/_rcbdTd7xszqNhgAb_FkQpQyFAU.roa
File: _rcbdTd7xszqNhgAb_FkQpQyFAU.roa (raw, json)
Hash identifier: tlTacIT/p2BLnUW4V7ZFwYt3E+NE62BrqrDQeWEcWEY=
Subject key identifier: FE:B7:1B:75:37:7B:C6:CC:EA:36:18:00:6F:F1:64:42:94:32:14:05
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01985B66EF18AF6552B9AE0F264D8A310C77
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/_rcbdTd7xszqNhgAb_FkQpQyFAU.roa
Signing time: Wed 30 Jul 2025 12:55:29 +0000
ROA not before: Wed 30 Jul 2025 12:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12670
IP address blocks: 46.218.0.0/18 maxlen: 18
46.218.64.0/18 maxlen: 18
77.104.0.0/18 maxlen: 18
82.101.0.0/18 maxlen: 18
83.145.64.0/18 maxlen: 18
92.102.0.0/15 maxlen: 15
92.102.0.0/16 maxlen: 16
92.103.0.0/16 maxlen: 16
92.103.0.0/18 maxlen: 18
92.103.64.0/18 maxlen: 18
185.204.172.0/22 maxlen: 22
212.99.0.0/17 maxlen: 17
212.103.0.0/19 maxlen: 19
213.30.128.0/18 maxlen: 18
213.244.0.0/19 maxlen: 19
217.66.112.0/20 maxlen: 20
2a02:e000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:66:ef:18:af:65:52:b9:ae:0f:26:4d:8a:31:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jul 30 12:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feb71b75377bc6ccea3618006ff1644294321405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:68:02:a1:bb:87:7b:77:58:f0:21:db:b1:
99:a4:f2:41:9f:c3:19:84:ab:a6:df:bb:49:61:4e:
96:54:c8:2b:d7:83:14:26:84:bb:79:fe:32:2f:d9:
7b:a5:13:ea:8d:46:af:a0:f0:9e:02:48:8d:bb:33:
b1:fd:d6:1b:a6:03:2b:14:f7:67:4a:78:02:45:cd:
26:d6:35:7a:86:2d:d1:e3:c6:70:4a:48:5b:82:df:
42:2e:6d:29:1c:01:af:f7:e4:78:9b:c4:dd:4f:13:
e8:20:d9:6a:5d:40:ec:e1:64:bf:31:91:68:2c:26:
cc:05:5f:18:4c:90:15:6f:47:87:80:67:3e:fb:23:
48:ba:84:ff:1d:ac:00:a5:e5:a5:a4:1f:4a:80:ef:
b5:1b:37:69:1e:78:12:dc:35:e0:d8:a0:58:c9:15:
8c:fa:d9:14:12:e1:cb:d1:24:f7:59:d7:e7:22:35:
0a:1b:ad:eb:d5:06:cb:02:98:49:b7:06:c6:c0:5a:
1c:7b:d3:0b:b2:0f:52:48:85:0e:db:0a:3c:82:4f:
31:90:95:1b:5d:68:38:c5:95:b8:b3:dd:9b:46:2a:
59:11:89:59:f4:3a:9f:38:84:a5:ac:9c:21:cf:b7:
be:56:5e:b6:a8:cb:b4:95:c8:5e:43:56:47:26:6e:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B7:1B:75:37:7B:C6:CC:EA:36:18:00:6F:F1:64:42:94:32:14:05
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/_rcbdTd7xszqNhgAb_FkQpQyFAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/17
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
92.102.0.0/15
185.204.172.0/22
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
71:6d:84:16:68:31:4b:e5:cc:55:2e:48:cd:bc:5c:0a:39:30:
ad:c8:e8:a1:53:19:4b:3d:c2:c4:ff:14:04:08:b3:1a:f3:39:
11:68:94:40:3c:77:c3:90:d6:68:4d:03:2d:8f:c3:25:15:07:
82:c1:ff:b3:c5:92:9f:97:87:0c:3f:94:91:29:ea:2a:8a:79:
4c:11:ef:c2:6b:90:5f:96:6b:43:d6:95:bb:a9:d9:a8:3a:cf:
e0:8c:e8:54:ee:7f:cc:5f:f6:20:97:22:c1:50:bc:ee:e7:37:
9b:39:8c:bd:7b:93:74:6e:32:87:a7:3c:8c:a9:ae:3c:5d:dc:
07:fc:11:7e:d7:d8:fe:ac:00:33:10:ff:45:01:cc:e2:af:12:
a1:ac:26:2b:85:fb:5e:87:d3:74:0c:e9:fa:c4:52:e0:0e:9f:
ce:8e:f5:4c:46:3a:a7:7e:c7:f2:e2:4d:2a:b5:19:41:ca:68:
ca:4a:78:fb:13:45:76:16:4a:45:a1:eb:1b:08:85:e8:18:47:
22:fb:2b:0c:90:a4:39:8b:9b:60:f9:06:c0:30:9d:ef:5b:c2:
71:17:04:df:13:1f:36:4d:20:1a:b1:1e:39:eb:f0:43:71:99:
6e:19:0a:85:7f:1b:49:74:ca:27:d0:57:af:4b:54:9f:be:dd:
05:ba:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:42:11 2025 by rpki-client