Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa
File: S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa (raw, json)
Hash identifier: kXDSSLoM6qJEx5/HbAZQ1hKhZOVmnkuIzLWPNIFvHc8=
Subject key identifier: 4B:FD:C0:73:C7:E9:24:D9:AB:E3:F2:6A:83:7E:DF:9D:26:6B:41:30
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01982DFD6A3079F052CB2FE5C8CBCBA709C2
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa
Signing time: Mon 21 Jul 2025 17:17:19 +0000
ROA not before: Mon 21 Jul 2025 17:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 92.118.88.0/24 maxlen: 24
92.118.89.0/24 maxlen: 24
92.118.90.0/24 maxlen: 24
92.118.91.0/24 maxlen: 24
92.119.200.0/24 maxlen: 24
92.119.201.0/24 maxlen: 24
92.119.202.0/24 maxlen: 24
92.119.203.0/24 maxlen: 24
171.22.180.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
176.125.240.0/24 maxlen: 24
176.125.241.0/24 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:fd:6a:30:79:f0:52:cb:2f:e5:c8:cb:cb:a7:09:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 21 17:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bfdc073c7e924d9abe3f26a837edf9d266b4130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:3a:f4:8d:86:41:dc:41:3f:35:33:8f:ac:
cf:96:ff:87:ac:ae:2d:e8:98:5d:02:ca:78:15:4a:
a0:b1:05:04:40:e4:59:4f:87:86:f4:27:36:90:ad:
d6:06:ee:37:0e:53:79:11:a1:c3:1f:65:a9:7f:69:
e7:50:67:e2:5a:62:d7:01:6b:ee:8d:be:07:3d:66:
74:45:13:6c:e2:9d:32:8a:6f:94:5e:8a:08:a9:11:
32:65:41:f9:1b:02:72:05:a3:f3:bf:a5:93:e0:a6:
9a:50:af:b0:61:68:cc:46:9d:b7:db:6b:87:e3:cc:
88:51:0b:84:32:88:2f:05:61:3a:34:3e:9f:71:b7:
72:72:04:60:2b:36:60:ff:75:ee:db:d7:aa:87:dd:
31:61:90:7c:ae:06:a8:b4:73:f9:6c:82:25:44:3f:
3c:67:52:37:d3:1c:a8:07:aa:a6:64:f5:ce:9a:51:
e8:da:9c:8c:6b:11:bf:61:e8:03:7a:50:22:24:34:
d0:97:95:a8:c6:66:9d:f4:57:37:d8:c0:90:fd:a0:
ed:6c:b8:b1:71:4e:37:e1:4e:be:2c:c9:a9:ee:35:
95:61:a3:45:82:37:12:8e:26:97:e7:60:c9:c1:08:
40:fa:17:2a:89:84:5b:44:9c:8c:fd:77:6f:da:e6:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:C0:73:C7:E9:24:D9:AB:E3:F2:6A:83:7E:DF:9D:26:6B:41:30
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.88.0/22
92.119.200.0/22
171.22.180.0/23
176.125.240.0/22
Signature Algorithm: sha256WithRSAEncryption
48:58:7c:11:0e:e0:3c:a1:83:39:fe:e7:26:78:ac:d6:12:51:
6a:59:e4:89:2d:72:05:e1:b6:c1:3d:20:ec:72:c5:51:a1:49:
c3:86:27:d9:3a:30:c8:56:5c:72:83:18:97:ab:82:3d:2c:a6:
8c:a4:8c:50:12:50:8f:69:93:42:2c:43:6e:69:5b:cc:78:cf:
7d:48:e5:33:bf:f0:d1:fe:37:dd:cd:bb:b6:76:6e:9c:2f:a2:
fc:23:be:32:90:6d:61:fa:52:04:ae:0e:89:95:b2:ae:21:dc:
d5:b7:64:72:e0:19:2e:cd:d1:4f:da:04:39:1c:1c:4b:d2:68:
fd:05:84:d3:97:74:e4:68:ae:d2:8c:46:e0:79:35:7d:8d:56:
f0:20:8c:a5:b8:ed:ba:2e:f4:fe:cf:c3:ae:17:a5:c0:7f:0f:
a1:d6:4f:c7:da:13:b6:e6:53:ea:40:0f:4d:bd:ef:13:2c:e8:
6f:55:37:84:a0:b6:bc:88:5b:65:70:13:7e:ea:ce:f7:8f:a6:
08:b9:d7:50:b0:b0:48:a0:ad:48:c1:07:96:bf:42:32:b1:22:
8a:31:58:11:4d:87:b7:2b:f5:fb:12:cb:ff:ec:47:f3:cf:f8:
f9:91:91:94:f3:0a:dd:bc:da:b1:27:c6:f8:94:a1:ca:ab:c8:
91:24:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:25:03 2025 by rpki-client