Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bLrjaWwS2p6_EPJ-ceU3YUeuMh0.roa
File: bLrjaWwS2p6_EPJ-ceU3YUeuMh0.roa (raw, json)
Hash identifier: wUCr5SVxtijlBqQ6/DHn9qElBWNYQMT3sOzhcWqgXSY=
Subject key identifier: 6C:BA:E3:69:6C:12:DA:9E:BF:10:F2:7E:71:E5:37:61:47:AE:32:1D
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01983E1D50AB650066DFE807AB862CA4BBCF
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bLrjaWwS2p6_EPJ-ceU3YUeuMh0.roa
Signing time: Thu 24 Jul 2025 20:26:05 +0000
ROA not before: Thu 24 Jul 2025 20:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:1d:50:ab:65:00:66:df:e8:07:ab:86:2c:a4:bb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 24 20:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cbae3696c12da9ebf10f27e71e5376147ae321d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:6b:10:b3:a6:f4:ac:b0:b2:c4:59:17:d3:
45:12:8a:55:80:3b:69:d3:ae:d7:ac:d2:6d:88:6b:
cf:3e:2c:38:e0:66:a2:36:84:54:32:e9:b0:ca:47:
44:6c:62:87:69:27:4b:5b:91:d1:13:4d:c0:eb:ba:
b1:8d:8d:96:80:d7:af:67:b9:e7:0e:77:9c:5d:3b:
d1:dd:26:f6:bf:9c:36:ed:e9:f9:65:4c:e5:2b:8c:
dd:42:14:b9:bb:56:a0:0e:08:cc:74:c2:d1:f3:c2:
83:4a:ef:7b:42:d8:ee:95:24:21:40:eb:20:2a:fa:
1f:d7:9b:7f:47:2a:dc:1c:e6:0f:a3:7e:8b:57:c8:
50:05:c7:72:cb:b8:c9:b7:f5:7e:0f:4b:fb:90:7d:
24:1c:a6:00:5d:64:34:5a:23:8d:6e:dd:19:ff:39:
bc:ad:19:68:41:10:25:00:68:0a:64:49:3c:56:d1:
f8:6d:0a:3e:ad:2a:08:44:7d:2e:eb:2b:50:3d:59:
49:03:1b:a6:29:68:eb:68:01:9a:a7:27:ba:27:36:
82:ca:37:95:f0:98:8a:fd:f8:2c:cc:87:43:d1:e5:
3c:8f:24:c2:e3:9c:40:c9:1c:c8:c7:3a:02:c7:ab:
a0:bc:eb:17:c6:3e:12:26:44:09:be:2a:26:d9:9a:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BA:E3:69:6C:12:DA:9E:BF:10:F2:7E:71:E5:37:61:47:AE:32:1D
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bLrjaWwS2p6_EPJ-ceU3YUeuMh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ac:d4:d8:f2:92:da:30:3d:30:59:e5:41:66:eb:8b:15:a9:
b7:5b:bd:9f:7e:0f:9e:48:a5:47:e2:08:52:dc:42:89:f4:9f:
ee:5f:d3:99:6f:29:aa:28:4d:09:fd:2e:00:57:b4:52:fa:d0:
90:f1:99:63:7c:e1:4b:4b:ff:96:29:17:51:b6:27:1a:27:17:
fe:8c:21:59:e3:22:10:f6:63:bb:9b:06:11:d7:5e:29:6b:a2:
be:8b:bb:ba:48:56:c3:31:59:4f:ce:b9:7b:d6:5c:91:14:da:
93:31:53:38:90:a6:da:77:53:fc:5c:5b:a2:6a:23:81:61:23:
84:71:0c:72:fb:65:3e:92:9a:fa:e6:5c:c4:7b:43:b2:89:bc:
1e:80:e3:4d:07:3e:1e:02:9a:b4:5c:ff:71:3b:a8:a1:23:62:
34:e3:eb:b2:4a:9a:44:27:b4:1d:0f:c9:14:86:58:3a:68:79:
23:7a:0e:f3:db:2a:bc:cf:df:fa:24:fb:ca:ce:64:10:4c:44:
09:a4:b8:1a:e1:8c:dd:f2:50:48:5f:bf:9f:d1:f7:fa:6e:66:
9f:cd:05:a8:93:25:65:d6:82:32:a5:6a:52:55:9f:9a:46:1d:
e8:6c:f8:45:3a:93:fa:95:54:69:76:f7:15:45:20:88:7b:b1:
6d:21:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:35:14 2025 by rpki-client