Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/XI3HQw49BMQYZ9gTM1XpPBAqpnk.roa
File: XI3HQw49BMQYZ9gTM1XpPBAqpnk.roa (raw, json)
Hash identifier: GT0BO5jPtDXyaBbm7jDO2M0rKouFe2Yzs6uTpn17StI=
Subject key identifier: 5C:8D:C7:43:0E:3D:04:C4:18:67:D8:13:33:55:E9:3C:10:2A:A6:79
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0197FF2119CE5A4F73440E02091AAB143DE4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/XI3HQw49BMQYZ9gTM1XpPBAqpnk.roa
Signing time: Sat 12 Jul 2025 14:54:08 +0000
ROA not before: Sat 12 Jul 2025 14:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ff:21:19:ce:5a:4f:73:44:0e:02:09:1a:ab:14:3d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 12 14:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c8dc7430e3d04c41867d8133355e93c102aa679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:ac:76:85:8c:a1:9c:8e:31:52:a2:26:c2:
47:33:94:d5:7b:6e:7e:19:ea:66:a2:23:7d:59:81:
a9:4d:20:40:86:4e:b2:e7:00:ca:69:ed:1e:a4:70:
44:5f:99:f3:a8:13:45:27:ac:ab:43:d3:60:df:d0:
b6:6c:21:11:76:b5:ec:4c:ce:91:45:43:99:f1:ca:
f5:75:d6:bf:8f:9a:3a:f4:e5:a1:c1:6a:32:b3:a5:
5b:52:f7:c2:3e:0e:24:c7:49:86:c6:d2:89:8f:3c:
0e:33:d0:d2:f4:e8:51:b6:f2:bc:bc:e3:da:e9:fb:
62:f3:e4:71:3a:7a:4a:1f:91:4d:57:24:19:dc:10:
7e:74:6f:e5:5d:af:0d:cc:fb:7a:d2:4b:56:b0:4c:
09:04:58:b8:49:23:9b:a7:e9:05:7c:bd:2c:91:11:
0f:12:23:4a:4c:e7:66:d8:43:a5:05:ea:7c:ed:eb:
0c:6a:d0:5b:98:95:f8:33:82:a2:a0:2f:06:57:1c:
bd:b8:ba:18:19:90:10:3e:fd:1b:7f:ea:e0:c5:99:
55:ae:d4:77:1e:45:d6:c4:f0:27:45:50:26:c5:89:
0d:b4:bf:07:3f:c3:6c:a3:5d:dc:35:d0:30:6f:17:
d4:9d:6b:ab:3b:87:cd:af:21:54:de:ac:a6:25:f7:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:C7:43:0E:3D:04:C4:18:67:D8:13:33:55:E9:3C:10:2A:A6:79
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/XI3HQw49BMQYZ9gTM1XpPBAqpnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a0:92:b3:3b:4d:03:42:94:5e:0b:07:9b:1f:ef:46:6a:23:
3b:78:6b:5d:51:27:ec:27:86:45:21:f9:92:ed:ef:bc:b1:d0:
2f:12:f2:b7:a6:6e:fa:f6:cc:d0:8c:a8:07:0d:14:3b:87:38:
8a:dc:83:23:d4:4f:73:b5:8a:85:eb:9a:ba:64:46:e3:39:0d:
f0:36:05:40:77:e2:41:a6:4b:c7:18:39:cc:14:a4:f7:aa:44:
1f:5e:18:44:aa:16:55:e3:55:33:f7:7e:0d:5c:9b:62:ee:9a:
19:6a:85:9f:c8:49:b8:fa:6c:0c:d0:14:a4:06:98:22:7f:e0:
32:94:91:55:d3:8d:30:6f:11:be:13:c8:d4:6c:4a:1e:dd:c0:
8d:62:79:06:54:dd:a6:e3:f4:49:6e:75:9d:07:fe:e7:15:b8:
f5:22:57:68:49:41:49:ba:a5:76:93:cd:1e:bb:17:e5:42:b8:
78:30:e7:3c:0d:4e:78:72:b8:94:19:7d:d7:99:d0:c1:3d:75:
10:bb:e4:70:3d:d3:b3:ea:10:97:aa:c3:c3:4f:21:7e:19:6d:
36:d6:c8:66:c5:8a:b3:66:3b:71:65:50:ac:1f:4f:41:10:0c:
33:e6:d8:fa:5b:af:8e:91:eb:4a:f7:4f:99:ba:90:91:ff:8f:
0b:17:21:1b
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZf/IRnOWk9zRA4CCRqrFD3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwNzEyMTQ1NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzhkYzc0MzBlM2QwNGM0MTg2N2Q4MTMzMzU1ZTkzYzEwMmFhNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbasdoWMoZyOMVKiJsJHM5TVe25+
GepmoiN9WYGpTSBAhk6y5wDKae0epHBEX5nzqBNFJ6yrQ9Ng39C2bCERdrXsTM6R
RUOZ8cr1dda/j5o69OWhwWoys6VbUvfCPg4kx0mGxtKJjzwOM9DS9OhRtvK8vOPa
6fti8+RxOnpKH5FNVyQZ3BB+dG/lXa8NzPt60ktWsEwJBFi4SSObp+kFfL0skREP
EiNKTOdm2EOlBep87esMatBbmJX4M4KioC8GVxy9uLoYGZAQPv0bf+rgxZlVrtR3
HkXWxPAnRVAmxYkNtL8HP8Nso13cNdAwbxfUnWurO4fNryFU3qymJffBjwIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFFyNx0MOPQTEGGfYEzNV6TwQKqZ5MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvWEkzSFF3NDlCTVFZWjlnVE0xWHBQQkFxcG5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBUBAIAATBOAwQAVcx9AwQA
VmpoAwQDWSIIAwQAWSWIAwQAWSsuAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQA
XXKrAwQAvNUSAwQBvNdIAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJKoZIhvcN
AQELBQADggEBAH6gkrM7TQNClF4LB5sf70ZqIzt4a11RJ+wnhkUh+ZLt77yx0C8S
8rembvr2zNCMqAcNFDuHOIrcgyPUT3O1ioXrmrpkRuM5DfA2BUB34kGmS8cYOcwU
pPeqRB9eGESqFlXjVTP3fg1cm2LumhlqhZ/ISbj6bAzQFKQGmCJ/4DKUkVXTjTBv
Eb4TyNRsSh7dwI1ieQZU3abj9EludZ0H/ucVuPUiV2hJQUm6pXaTzR67F+VCuHgw
5zwNTnhyuJQZfdeZ0ME9dRC75HA907PqEJeqw8NPIX4ZbTbWyGbFirNmO3FlUKwf
T0EQDDPm2Ppbr46R60r3T5m6kJH/jwsXIRs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:30:42 2025 by rpki-client