Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/m86TvGV3s5jv6RuiWkhMiRErSz8.roa
File: m86TvGV3s5jv6RuiWkhMiRErSz8.roa (raw, json)
Hash identifier: 45Z1oKADg5ynpqA0HYXQNh2OmRQdNPe4S/mSijPEKNI=
Subject key identifier: 9B:CE:93:BC:65:77:B3:98:EF:E9:1B:A2:5A:48:4C:89:11:2B:4B:3F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0197EA18A5198F872846F6CE6655B9CE253A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/m86TvGV3s5jv6RuiWkhMiRErSz8.roa
Signing time: Tue 08 Jul 2025 12:52:52 +0000
ROA not before: Tue 08 Jul 2025 12:52:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 46.102.191.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
94.177.58.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:18:a5:19:8f:87:28:46:f6:ce:66:55:b9:ce:25:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 8 12:52:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bce93bc6577b398efe91ba25a484c89112b4b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:6d:52:42:4c:ca:90:93:7f:59:6f:6d:7f:
80:67:0a:fc:34:3a:27:ae:d8:e6:b0:71:db:e2:ad:
dc:1e:65:6b:b1:14:26:ac:17:11:4e:ed:7f:13:ed:
08:4d:d7:a9:d4:68:29:aa:3f:61:03:10:9b:4b:7b:
68:8b:2e:61:1a:fb:ec:72:f9:c7:cd:4c:27:a3:21:
bd:e1:ef:60:cc:4c:73:e5:60:35:8b:e1:61:dc:47:
f5:75:1d:f6:f9:6e:8f:d8:8f:3a:64:9e:26:7f:90:
ed:8d:11:37:78:35:76:d6:b1:45:be:ad:6f:b8:ff:
0f:ca:15:4e:f1:3d:bd:a3:5d:33:c2:63:a5:be:05:
1d:d3:07:91:9f:f7:77:f8:a1:44:82:6b:6d:e2:ab:
ed:15:5f:26:48:16:93:9f:35:14:a6:0b:1c:f4:9e:
1a:a6:92:4b:fc:d5:ea:78:02:f7:17:4c:87:e4:0d:
42:cf:af:df:d7:e9:f3:2b:73:20:cc:5c:e9:b2:ab:
66:57:16:fd:48:f4:dc:ca:de:33:be:d8:ba:5e:0e:
b6:31:fa:cd:fe:d7:35:01:b0:10:1a:b7:ad:22:42:
61:a5:21:2b:ca:c7:38:aa:7f:ca:16:f0:17:a8:62:
06:52:1d:cb:de:8d:11:e7:36:be:6c:5f:6a:a8:24:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:93:BC:65:77:B3:98:EF:E9:1B:A2:5A:48:4C:89:11:2B:4B:3F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/m86TvGV3s5jv6RuiWkhMiRErSz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
86.105.151.0/24
86.107.47.0/24
86.107.184.0/24
89.33.87.0/24
89.35.172.0/24
89.40.65.0/24
89.40.204.0/24
89.40.233.0/24
94.176.3.0/24
94.177.58.0/24
188.240.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:50:77:96:ba:cb:a2:1c:b0:b8:4c:bf:d0:13:01:7b:93:28:
3a:90:e4:db:f9:73:d8:45:38:24:9b:87:ce:b5:d8:97:3d:2f:
f5:50:c2:28:ba:80:21:9d:6c:02:50:3e:c0:b5:7e:d6:23:e1:
16:d1:42:0b:43:51:91:49:28:ff:19:48:8e:4b:4b:4d:d5:f3:
de:f3:f7:2a:19:00:f0:f9:e0:b3:e8:f6:46:9e:02:6b:a1:22:
ca:ec:32:92:dd:fa:94:65:14:41:98:32:96:0e:c3:27:34:17:
a7:4a:69:16:6f:23:69:7a:38:95:80:36:6e:04:d1:df:3f:37:
75:c9:26:2b:0e:01:13:4c:66:5b:81:d8:dd:1f:d4:07:44:e3:
1c:84:18:4b:d5:02:40:41:74:ce:7d:cf:7f:8b:17:69:23:1d:
21:08:4d:e1:d6:ba:55:23:05:1d:bf:bc:c0:4b:3e:33:2c:a8:
6a:1f:b8:d1:d5:08:91:50:f6:c2:87:a1:3c:b9:c4:33:bf:0e:
ae:34:bd:e1:4d:ef:c1:e6:83:61:5c:e1:f6:13:e7:63:9b:09:
cb:3d:83:d9:df:cc:0b:60:c3:84:77:ab:95:83:0c:09:e6:a9:
bd:80:0a:e5:67:cf:19:d0:22:01:25:76:f8:ec:a1:d8:fd:5e:
69:ef:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:39:05 2025 by rpki-client