Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bEM9M-chJrODtoSymf8OUqyya5U.roa
File: bEM9M-chJrODtoSymf8OUqyya5U.roa (raw, json)
Hash identifier: P2vSRU3f/CHsSUSjn45TLv2GdARQakxfW7Tcy3tLxBQ=
Subject key identifier: 6C:43:3D:33:E7:21:26:B3:83:B6:84:B2:99:FF:0E:52:AC:B2:6B:95
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198132FBEC18D454FE2BCC85CC38993F776
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bEM9M-chJrODtoSymf8OUqyya5U.roa
Signing time: Wed 16 Jul 2025 12:22:32 +0000
ROA not before: Wed 16 Jul 2025 12:22:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 89.35.119.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:2f:be:c1:8d:45:4f:e2:bc:c8:5c:c3:89:93:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 16 12:22:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c433d33e72126b383b684b299ff0e52acb26b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:c6:0a:f8:e1:b0:9f:f4:6a:c8:e7:c5:c0:
91:15:95:97:98:90:ee:99:71:21:4a:87:7c:96:ef:
a3:ea:12:45:58:e4:d5:9b:da:88:29:83:09:4d:90:
7b:87:c7:c7:38:74:16:c7:27:18:90:20:eb:e7:89:
02:e1:8a:5c:04:45:5a:b5:52:89:54:f3:04:5b:6e:
c7:1e:65:27:f2:ee:57:e7:43:fa:6a:33:14:9e:fb:
20:da:15:bb:72:e7:85:0b:97:5d:03:9c:1f:a9:39:
a3:a0:da:63:9b:23:07:2d:a4:8f:e1:99:14:b4:e0:
47:99:15:89:ed:c5:8e:77:54:54:48:2e:cd:8b:b0:
fb:dd:67:93:52:c4:fc:73:06:d9:53:60:f9:b7:8d:
b4:5a:c9:f1:21:0a:7c:0e:85:ae:b5:1c:fc:09:ad:
b2:9f:5d:cc:3a:a7:4d:ef:fe:2c:d7:27:3b:84:31:
c4:a3:18:ed:d1:00:9b:5c:26:92:0d:d6:c3:79:7f:
a9:48:89:d0:83:90:aa:7c:2c:3b:83:a1:d2:0e:d0:
8c:24:2c:44:83:4c:85:62:18:6f:cb:3e:35:35:f6:
e0:ea:49:f8:4f:a8:61:dc:53:12:62:cb:73:17:4c:
94:32:97:ea:34:27:75:81:d6:54:1b:bf:33:70:5b:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:3D:33:E7:21:26:B3:83:B6:84:B2:99:FF:0E:52:AC:B2:6B:95
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bEM9M-chJrODtoSymf8OUqyya5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.119.0/24
94.177.145.0/24
167.17.176.0/23
167.17.191.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.225.0/24
194.85.249.0/24
202.71.13.0/24
204.77.1.0/24
208.123.190.0/24
Signature Algorithm: sha256WithRSAEncryption
59:17:5a:cb:d0:48:72:53:77:ce:a4:45:ce:ff:0d:cc:ed:11:
df:f6:c0:93:f0:46:11:08:fb:d5:7e:c3:0a:8d:1c:05:54:81:
b7:ab:6d:5b:e8:e6:5b:4f:70:82:ff:21:42:bc:c3:c8:66:4c:
ad:05:71:15:75:03:17:30:58:2a:b4:a5:6f:7a:7f:50:22:b8:
ab:15:5a:3b:ae:0d:4c:ca:61:c8:6a:2a:7e:b6:8b:f3:2e:36:
b7:6d:e6:ea:ad:60:af:85:30:c9:e1:c5:04:0c:d8:98:90:d0:
a2:82:9e:49:1f:a4:3c:11:9d:4d:4e:c0:b7:a5:8d:fb:4d:71:
9e:a5:8c:cf:bb:13:4f:68:04:8f:64:c6:30:4b:87:af:23:a5:
36:c3:34:39:18:ec:ac:d4:00:c9:23:ce:6e:3e:a2:7a:d7:84:
ac:17:32:be:5a:bc:cc:10:f2:a7:52:02:d2:fa:b3:6d:3d:a6:
3a:38:84:59:c6:02:27:6a:cf:0b:01:d3:f9:a9:4a:d3:b5:11:
d8:8a:64:3b:01:29:29:64:e5:b5:4b:99:42:cb:96:35:72:a6:
2d:1d:3e:af:ed:60:83:f2:a1:ec:16:41:d0:6f:8c:36:35:0f:
9c:66:e3:e0:4d:d5:23:5f:60:e4:c8:4d:03:d3:7b:a3:ed:b4:
1e:03:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:18:32 2025 by rpki-client