Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ex9C5z6uA5zA8S2hqTtDuAiYJso.roa
File: ex9C5z6uA5zA8S2hqTtDuAiYJso.roa (raw, json)
Hash identifier: Ya+WKl/Tb6XekHAnMga0cVZx1aw07XaD7ue33i5ENiI=
Subject key identifier: 7B:1F:42:E7:3E:AE:03:9C:C0:F1:2D:A1:A9:3B:43:B8:08:98:26:CA
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019879BB84D4CE218D4BF413F193AF6E7521
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ex9C5z6uA5zA8S2hqTtDuAiYJso.roa
Signing time: Tue 05 Aug 2025 10:16:29 +0000
ROA not before: Tue 05 Aug 2025 10:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 89.23.105.0/24 maxlen: 24
89.23.106.0/24 maxlen: 24
89.23.110.0/24 maxlen: 24
185.159.128.0/24 maxlen: 24
185.159.129.0/24 maxlen: 24
185.159.130.0/24 maxlen: 24
185.159.131.0/24 maxlen: 24
185.228.232.0/24 maxlen: 24
185.228.233.0/24 maxlen: 24
185.228.234.0/24 maxlen: 24
185.228.235.0/24 maxlen: 24
185.230.190.0/24 maxlen: 24
185.230.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:bb:84:d4:ce:21:8d:4b:f4:13:f1:93:af:6e:75:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 5 10:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b1f42e73eae039cc0f12da1a93b43b8089826ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:40:ae:ad:ae:f7:f6:96:2b:ee:28:50:02:
ec:64:55:d1:02:3e:8d:a7:24:1c:5b:41:d6:d4:37:
6d:95:fa:07:0f:92:2a:c0:a9:b4:c0:ee:50:ff:6b:
36:3a:a6:cf:ea:06:bf:de:bb:18:6d:f0:5b:1d:2b:
a6:bf:0a:a6:dd:2d:b5:6a:e9:ec:84:d7:f1:7d:7a:
8c:73:0d:05:8a:55:7d:b5:57:a5:d6:da:05:4d:13:
93:06:87:ed:b0:63:a9:0c:03:67:f0:ce:69:14:3d:
51:71:19:9f:a5:49:bc:f2:b5:52:4c:f3:70:fd:b9:
e4:90:63:7e:c1:3c:78:34:bc:c0:11:8f:09:17:ff:
e4:38:36:77:e1:51:d6:16:ce:6e:95:aa:5c:58:92:
7e:62:8a:56:2d:ab:80:b6:16:d7:4b:b8:3d:3c:c6:
22:a9:7f:16:fe:7c:5f:f7:12:c6:0a:79:13:05:4f:
ec:88:9b:30:f4:28:b5:81:63:64:cd:7d:c2:8a:e5:
a5:2a:d2:e5:96:64:b7:20:ab:45:64:ac:df:d5:a2:
20:42:1c:b2:92:e4:26:92:c7:6a:fd:a5:27:56:f3:
b1:01:71:c6:7e:9b:25:5f:4f:9e:0f:0c:31:da:34:
95:70:03:18:7c:7a:c6:33:bd:ee:ce:90:0a:6d:aa:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1F:42:E7:3E:AE:03:9C:C0:F1:2D:A1:A9:3B:43:B8:08:98:26:CA
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ex9C5z6uA5zA8S2hqTtDuAiYJso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.105.0-89.23.106.255
89.23.110.0/24
185.159.128.0/22
185.228.232.0/22
185.230.190.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:52:f0:ed:e3:56:18:a5:1a:9a:e9:c7:69:98:55:07:ab:ee:
25:fa:9f:ee:59:4a:f7:88:8f:7e:ea:9d:99:05:ea:29:17:02:
e0:d3:1c:6f:8e:4c:66:7b:d2:8a:ca:7b:90:9c:f8:4b:c6:44:
a7:33:d5:91:ce:44:ae:25:fb:c0:03:3a:dd:a1:68:ca:da:5e:
f0:76:27:a4:a5:fd:70:38:27:b1:42:30:68:12:33:eb:cb:85:
fb:11:af:68:4b:b1:7a:51:32:c1:c1:92:9d:bf:26:2c:7f:b8:
37:5f:fc:73:60:bf:44:a3:4c:73:bc:49:a9:9d:d0:7e:1f:03:
02:f1:13:38:08:8a:d4:f5:7d:83:fb:56:4d:32:bf:c9:83:80:
a8:cd:b3:58:f9:f7:50:90:ee:f8:e8:89:ca:db:81:a2:3e:53:
ce:59:24:e7:92:de:48:0a:da:b8:e9:fc:bd:71:4b:d0:2c:84:
6d:68:32:c7:88:6c:1a:aa:f9:37:9d:90:72:8f:d0:31:db:27:
1a:73:f5:ad:9b:31:c3:34:f3:09:71:af:2d:1d:1b:c8:3c:b9:
fa:f3:85:3a:f0:63:0b:6c:cc:0c:02:60:54:49:cd:f5:49:ea:
e6:48:f5:56:6b:b4:79:1f:1c:46:3a:59:c3:72:62:4b:45:02:
23:ed:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:40:15 2025 by rpki-client