Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/Src3e8VuS0hETCVSGIFEjeLOMa8.roa
File: Src3e8VuS0hETCVSGIFEjeLOMa8.roa (raw, json)
Hash identifier: njCoKOW4dwM2EVWN+8GygMrZoisLQ05lRLtnj2idXYo=
Subject key identifier: 4A:B7:37:7B:C5:6E:4B:48:44:4C:25:52:18:81:44:8D:E2:CE:31:AF
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197CB141D1ECACF4F2CCC78257D9AD6F936
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/Src3e8VuS0hETCVSGIFEjeLOMa8.roa
Signing time: Wed 02 Jul 2025 12:19:42 +0000
ROA not before: Wed 02 Jul 2025 12:19:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29386
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.183.0/24 maxlen: 24
185.136.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:14:1d:1e:ca:cf:4f:2c:cc:78:25:7d:9a:d6:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 2 12:19:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab7377bc56e4b48444c25521881448de2ce31af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:18:66:3f:93:73:fa:ef:65:33:66:84:6e:
96:af:26:d1:35:70:7f:a5:31:a1:33:4a:5d:2b:f8:
3c:03:cf:ae:d4:6b:c4:c0:74:96:34:ff:30:03:56:
ef:60:98:80:6d:18:77:dd:3f:60:19:37:a7:74:05:
f2:22:0b:86:16:78:d8:7d:9d:cc:03:e9:95:4a:20:
32:40:e4:5d:d8:6a:88:bd:c5:ca:08:7c:be:8a:98:
e1:1b:07:a9:30:f7:22:7a:7a:8b:b4:55:96:cc:f7:
f4:65:44:71:03:54:b1:95:32:07:ac:96:e0:74:b8:
29:bc:56:cc:44:bf:ac:59:89:eb:f6:67:38:19:d9:
d1:0e:30:58:7e:31:ed:b6:32:88:b8:8d:7c:5f:4a:
5f:6a:53:2d:2c:71:4e:fe:f6:5e:b1:3e:3c:40:73:
73:b1:97:d6:d5:86:60:4f:f0:0e:d2:b3:f0:fb:da:
2a:20:26:ac:c2:4c:af:f9:bf:64:b6:5b:f6:d3:ab:
de:46:a1:10:d1:f8:35:6a:b8:f5:22:61:2e:d1:4f:
03:28:a6:92:af:60:aa:d1:bb:a2:49:46:48:d1:98:
cb:97:26:cc:d8:e4:64:25:a8:a2:c5:f3:c1:e2:66:
80:c6:73:a7:d4:43:27:f6:ca:40:99:c4:c7:5b:10:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:37:7B:C5:6E:4B:48:44:4C:25:52:18:81:44:8D:E2:CE:31:AF
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/Src3e8VuS0hETCVSGIFEjeLOMa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0/16
94.252.183.0/24
185.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:03:8a:b2:6d:07:5f:06:36:ec:64:ba:3d:65:3a:b9:94:ed:
fe:8b:9f:fb:36:7d:af:0e:7d:b0:2a:6e:46:ea:80:10:12:bf:
1c:0e:70:30:cd:47:43:e8:65:02:71:3a:8e:d4:a0:2f:8a:eb:
2a:3f:63:1e:f5:8e:24:c3:24:55:e4:e7:62:09:5e:d1:99:ee:
40:9d:02:b1:e0:f9:80:94:39:dc:fa:ee:06:1e:5e:44:e8:3f:
ac:7b:e0:86:ce:31:3b:82:06:51:03:f4:f0:c8:64:a2:62:c6:
23:3a:34:39:93:13:04:01:82:da:bc:7e:ba:d0:71:ff:48:f3:
45:fb:92:88:af:14:50:fa:b4:e0:16:5e:38:64:20:cd:23:c6:
0b:ca:7e:38:ed:c8:ab:a0:a4:60:db:91:31:06:e0:2e:e0:42:
24:4a:63:b5:0f:c9:db:38:da:97:05:d8:d9:b8:68:41:c7:2a:
7c:57:53:26:4b:25:e3:61:85:c6:15:fa:e5:27:b7:8e:8a:96:
4e:7c:5c:98:ab:52:c9:c7:9f:7e:32:b5:7a:7e:dd:0f:45:69:
58:1c:3f:fe:62:de:20:64:9e:93:30:3c:cf:8e:6b:ea:86:dd:
9b:60:bd:31:dc:2b:97:ae:e3:21:1c:93:7b:0d:c4:84:96:44:
d7:95:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:36 2025 by rpki-client