Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TVg5Jq4DNfr68Im8n8Q8n3u044c.roa
File: TVg5Jq4DNfr68Im8n8Q8n3u044c.roa (raw, json)
Hash identifier: Cm8QPhyPTWsiiho20vUMeRkvKIdkDLrtp0LFxyHTphE=
Subject key identifier: 4D:58:39:26:AE:03:35:FA:FA:F0:89:BC:9F:C4:3C:9F:7B:B4:E3:87
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0197691D9DEFBBA25E124E0E5D20C20428D1
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TVg5Jq4DNfr68Im8n8Q8n3u044c.roa
Signing time: Fri 13 Jun 2025 11:47:18 +0000
ROA not before: Fri 13 Jun 2025 11:47:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.55.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:1d:9d:ef:bb:a2:5e:12:4e:0e:5d:20:c2:04:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 13 11:47:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d583926ae0335fafaf089bc9fc43c9f7bb4e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:8e:f4:89:06:aa:d3:0e:b2:ac:fa:73:58:
b3:5b:43:66:4e:91:81:d4:d8:f0:a9:3b:67:10:12:
5b:13:6d:70:cb:b3:e9:9a:3c:82:94:98:32:c0:96:
42:e2:2b:e4:0b:51:8f:4b:62:90:2b:77:aa:96:7b:
11:2a:00:e7:58:25:40:80:94:00:27:29:13:85:03:
93:4d:a9:c8:72:2b:99:6a:85:0e:13:2c:54:e4:10:
14:3f:3f:94:0b:f6:3e:cc:e2:7b:55:f6:83:7d:5e:
5e:27:10:7e:1a:ab:48:8c:e9:17:8d:49:e9:89:61:
5c:e1:73:48:3e:67:93:3c:f9:e3:23:82:bd:4c:fa:
ea:cb:08:3e:db:0b:f5:0b:e5:9d:79:76:30:89:49:
fc:b6:8f:18:0b:3a:54:c0:da:43:1f:a3:c7:c9:4d:
ce:bd:01:ad:3f:b2:09:e0:1d:98:a9:a1:95:91:e4:
bd:5a:70:81:ad:28:41:81:83:17:97:6b:0b:21:65:
c9:40:ed:76:c6:6c:b3:8b:7e:eb:54:64:36:aa:ff:
d8:83:21:dc:ea:34:a6:9e:ad:f9:88:00:38:ad:2b:
92:99:49:02:af:b0:bc:49:7e:92:6c:22:0b:6f:da:
f8:fc:38:0b:8e:fc:32:ee:54:17:f8:63:32:fc:3f:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:39:26:AE:03:35:FA:FA:F0:89:BC:9F:C4:3C:9F:7B:B4:E3:87
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TVg5Jq4DNfr68Im8n8Q8n3u044c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
185.85.188.0/23
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.249.200.0/22
185.250.210.0/24
185.254.236.0/22
193.160.140.0/22
193.223.104.0/22
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
b3:ff:57:f5:f3:ec:fc:9c:34:3c:a9:c6:71:4e:29:44:85:61:
f1:97:d6:f1:7b:8b:cd:fb:f9:37:4c:1d:97:7e:74:93:0e:44:
84:df:b3:09:f7:75:c8:6f:58:b0:1f:70:64:d9:e4:2c:d5:c2:
38:40:22:60:a9:4a:52:e2:81:8b:f0:e5:99:02:04:5d:cf:55:
96:e9:96:04:f0:0a:5e:f4:f3:e3:17:26:76:d5:46:9a:c9:e0:
c3:f2:a4:58:b9:f2:51:b5:96:80:dd:0d:58:62:3b:fe:cc:f5:
16:a8:ef:51:15:8b:3b:fb:6e:8a:af:82:17:f9:7d:ae:5a:5c:
4e:72:7a:a1:bd:ea:5e:9a:79:f6:75:90:f9:0c:c1:db:35:aa:
cf:fa:b7:65:3e:69:4e:a7:c5:c9:05:ad:11:a6:35:55:89:21:
f5:d8:89:61:f2:dc:63:e9:57:9b:38:57:e0:e1:de:4c:16:be:
e0:fa:20:57:a9:79:5c:89:ac:7a:55:5b:7b:5a:1d:ab:aa:1f:
f6:f6:fc:4b:b4:91:2c:76:2a:3d:0b:39:4d:e5:df:30:34:00:
a0:c8:fc:bb:7d:86:fd:1c:7e:db:11:49:83:36:ae:b7:7e:5e:
de:37:ed:9c:7f:98:2d:2f:6f:cf:3e:95:20:7c:07:81:f5:ca:
27:c2:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:55:34 2025 by rpki-client