Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa
File: ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa (raw, json)
Hash identifier: ybXh4v0CDSKBBEJI/ZcZGuGpcfyqFJev7VApGdh0SHo=
Subject key identifier: 22:69:DB:62:7E:13:D5:96:AD:C1:CD:0C:72:0A:DA:DD:97:70:B5:61
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0197F3703D70EC6FF78D0811BDE6AE5FC478
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa
Signing time: Thu 10 Jul 2025 08:25:08 +0000
ROA not before: Thu 10 Jul 2025 08:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56882
IP address blocks: 37.209.160.0/21 maxlen: 21
45.252.236.0/22 maxlen: 22
46.251.252.0/23 maxlen: 23
46.251.254.0/23 maxlen: 23
84.236.154.0/24 maxlen: 24
84.236.156.0/24 maxlen: 24
84.236.157.0/24 maxlen: 24
84.236.158.0/24 maxlen: 24
91.228.91.0/24 maxlen: 24
103.82.48.0/22 maxlen: 22
115.42.52.0/22 maxlen: 22
168.245.196.0/23 maxlen: 23
176.227.144.0/24 maxlen: 24
185.59.64.0/24 maxlen: 24
185.59.65.0/24 maxlen: 24
185.59.66.0/24 maxlen: 24
185.59.67.0/24 maxlen: 24
185.130.152.0/22 maxlen: 22
185.193.8.0/22 maxlen: 22
188.64.100.0/22 maxlen: 22
188.227.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:70:3d:70:ec:6f:f7:8d:08:11:bd:e6:ae:5f:c4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jul 10 08:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2269db627e13d596adc1cd0c720adadd9770b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:97:e1:bc:67:6a:4e:a6:8f:cd:03:6b:0c:
8f:81:a3:a3:50:0b:0f:a6:73:2b:5f:17:d3:c2:75:
ec:56:a0:2c:73:57:d0:4f:50:da:66:ae:f5:14:40:
fe:e7:b8:88:3a:a3:3f:44:d3:b6:c4:05:e7:1f:bd:
f0:84:00:f5:24:f5:81:b9:5a:de:9b:a8:29:76:29:
d4:a8:24:6a:d1:b7:63:4f:64:d3:40:6a:5a:1d:9f:
02:a1:cf:70:89:d6:c5:fc:74:a7:13:9b:4c:d8:54:
bb:0f:39:4a:4e:1a:51:3b:d4:e9:fe:40:5f:51:02:
3c:5f:91:6e:fd:b4:41:ed:58:55:dd:df:fc:ae:98:
ee:59:5c:db:38:87:3c:b7:c2:fd:6c:04:45:3c:99:
a9:7f:31:d0:9a:95:1c:12:6f:11:e7:da:f7:ef:0c:
d9:43:a8:a2:a3:1f:32:d6:c4:c8:a0:32:e1:b0:73:
12:23:20:fa:a9:e4:24:c3:2b:f0:42:d5:c0:5f:6e:
ba:85:6c:db:3e:20:ad:46:58:5d:d7:cf:f8:df:c0:
7d:bb:15:b1:1f:36:e5:9b:cb:bc:3f:5e:a7:c5:7e:
4d:61:d5:6d:61:9a:ce:28:33:ac:2f:1b:0f:97:4f:
f9:35:3a:ba:0c:77:b0:e0:11:e5:3f:56:50:ed:ea:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:DB:62:7E:13:D5:96:AD:C1:CD:0C:72:0A:DA:DD:97:70:B5:61
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
84.236.154.0/24
84.236.156.0-84.236.158.255
91.228.91.0/24
103.82.48.0/22
115.42.52.0/22
168.245.196.0/23
176.227.144.0/24
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.64.100.0/22
188.227.128.0/19
Signature Algorithm: sha256WithRSAEncryption
49:89:74:1b:0b:06:55:bf:e7:e8:77:02:ec:c5:2b:18:d7:d6:
4e:ff:84:a1:6d:b3:f3:f1:86:59:11:34:ac:51:53:10:13:83:
fd:05:36:70:db:0f:2c:3a:57:c6:6b:e4:96:5b:79:db:44:e3:
d5:fd:95:44:26:44:fb:5f:44:a1:8e:6d:8b:7d:16:56:03:89:
52:d4:5a:a1:07:84:65:6a:f1:53:72:0a:6b:33:46:ab:32:3d:
bf:d4:8a:5f:6c:2d:72:6e:6e:5b:b1:6d:cb:73:c5:33:a4:87:
a7:28:b8:87:fc:54:8f:aa:dc:ef:3a:98:7e:ed:6a:6d:b5:ef:
64:cb:3d:70:39:cb:33:3c:ca:c9:eb:6a:a1:f0:6f:19:9c:4e:
6b:4d:fe:fa:08:5b:95:27:bf:e8:dd:ad:20:2b:e4:a7:1f:9e:
b0:df:a2:84:fe:6d:cd:5c:f5:cf:c3:16:10:32:18:c2:15:d3:
14:44:09:c1:94:00:cf:d0:7c:68:10:c7:08:e5:f5:32:a9:28:
50:79:c2:4a:3e:6e:1c:1d:35:c4:8c:cc:be:a4:28:c1:bd:f0:
6a:b2:d3:b4:48:1d:3a:84:33:2a:b6:0c:6a:b3:f2:ef:ba:ad:
c8:9e:06:25:9e:ec:c0:f7:73:06:c8:94:82:67:2e:76:83:ad:
db:92:ec:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:31:34 2025 by rpki-client