Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ormFqBbSNZ9STHM9altDZ_d23vQ.roa
File: ormFqBbSNZ9STHM9altDZ_d23vQ.roa (raw, json)
Hash identifier: J6zKFE4hCTyzQ+z5ZObdUSvjFEcPbgT7zIhL9WAYj1Y=
Subject key identifier: A2:B9:85:A8:16:D2:35:9F:52:4C:73:3D:6A:5B:43:67:F7:76:DE:F4
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 0197EF41128CF000167DC6798260DD0B4B93
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ormFqBbSNZ9STHM9altDZ_d23vQ.roa
Signing time: Wed 09 Jul 2025 12:55:08 +0000
ROA not before: Wed 09 Jul 2025 12:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.7.219.0/24 maxlen: 24
185.243.212.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:41:12:8c:f0:00:16:7d:c6:79:82:60:dd:0b:4b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jul 9 12:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b985a816d2359f524c733d6a5b4367f776def4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:e7:e8:c4:9f:02:90:11:41:7b:a9:ed:b4:
a6:ac:eb:d0:c8:e1:16:80:f5:0d:5a:2b:a1:97:f4:
53:7a:84:93:e1:7c:db:f5:32:1f:d2:ed:b7:ff:89:
a9:18:d1:45:77:84:00:35:9e:4b:5a:f7:90:bf:85:
93:28:02:42:3a:33:95:29:61:27:17:3b:7a:f7:73:
b0:9c:c4:e2:6b:34:79:2a:c7:6c:ee:7f:c2:f5:2b:
3b:71:d0:0e:a5:dd:32:ca:4c:35:82:a7:90:0a:cf:
07:27:9c:08:e0:35:ad:be:c9:14:36:b5:35:90:eb:
21:ef:65:8a:9d:3c:fe:42:03:04:d7:d7:e5:dc:47:
4f:2a:a1:31:c7:3a:8f:05:a0:0a:b0:37:df:5a:41:
ab:24:dc:e7:2d:ab:c4:4b:2b:11:18:6f:97:df:82:
11:14:93:db:97:36:66:c7:5f:8c:22:7f:2e:84:be:
ab:aa:3b:32:10:3c:64:b7:b6:78:72:33:28:01:40:
91:aa:8c:17:8e:a0:d1:8a:a0:60:c1:76:aa:ce:8e:
0f:90:01:e2:c5:2a:68:1b:f8:55:69:4e:4e:79:c7:
a4:7e:43:19:8f:a6:4c:ec:56:a3:3f:d0:6e:88:3b:
b8:d8:d6:8f:07:f1:02:de:50:52:9a:2d:0d:00:ba:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:85:A8:16:D2:35:9F:52:4C:73:3D:6A:5B:43:67:F7:76:DE:F4
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ormFqBbSNZ9STHM9altDZ_d23vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.132.60.0/22
93.94.140.0/24
93.94.142.0/24
95.169.196.0/24
95.169.202.0/24
185.1.156.0/24
185.7.219.0/24
185.243.212.0/23
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
6e:a5:af:d1:55:1d:36:40:15:50:7b:d5:5e:b8:4a:4a:d1:c7:
61:0d:b5:57:1b:4f:3f:53:74:2f:04:0f:32:62:d3:a2:b8:27:
60:43:00:5b:74:0c:1a:a5:c6:57:da:a5:34:a6:4d:df:5c:87:
e8:34:0d:2d:fc:49:39:cf:d5:d3:1b:21:0b:91:9a:a6:77:13:
2a:60:33:5e:5d:a2:93:de:b6:e3:cb:fc:c6:45:4c:50:cf:3b:
05:59:7b:70:56:62:b7:99:8c:3a:a3:f1:39:8d:a1:7d:7f:88:
b1:c2:1b:27:af:71:6b:ce:67:e5:9f:0e:1a:ab:ae:e5:71:c5:
b8:7c:3b:7b:ce:56:7a:c6:c2:3d:1c:72:93:4d:21:37:31:cc:
02:43:4a:0b:f5:99:6a:b7:8d:44:6d:82:e8:89:3b:ed:2a:94:
88:ce:bf:9f:4e:d8:1a:1d:bd:71:40:8b:74:8f:7e:2f:94:c1:
ac:aa:53:4a:21:00:9e:6a:58:ab:c9:3c:ba:46:d5:74:dc:de:
38:27:82:be:a7:ad:76:7e:80:be:2c:80:f3:97:82:68:e0:7c:
4b:4f:11:be:73:83:6d:e8:bc:71:2d:0a:68:6e:22:94:59:b2:
dd:48:55:a7:42:6c:a1:b9:8e:42:d3:73:3b:50:12:25:ff:e7:
28:35:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:59 2025 by rpki-client