Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ARrtBnQbhOzLC6DRjRozYkUeRGk.roa
File: ARrtBnQbhOzLC6DRjRozYkUeRGk.roa (raw, json)
Hash identifier: L88Lue6iXdFx/WyZN+tPmqU1xMXr1NSmea5H+JrK0nc=
Subject key identifier: 01:1A:ED:06:74:1B:84:EC:CB:0B:A0:D1:8D:1A:33:62:45:1E:44:69
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197D488EEE7CFF7C8A6C25B7E875E17F445
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ARrtBnQbhOzLC6DRjRozYkUeRGk.roa
Signing time: Fri 04 Jul 2025 08:23:53 +0000
ROA not before: Fri 04 Jul 2025 08:23:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214143
IP address blocks: 82.152.49.0/24 maxlen: 24
89.213.2.0/24 maxlen: 24
89.213.3.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:88:ee:e7:cf:f7:c8:a6:c2:5b:7e:87:5e:17:f4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 4 08:23:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=011aed06741b84eccb0ba0d18d1a3362451e4469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:94:a7:ac:18:ff:79:45:5a:8f:9b:27:00:
87:e8:96:de:39:6b:71:c7:9c:d8:ca:9e:af:1f:9a:
36:c3:96:9a:64:91:80:c9:fa:ef:1b:94:78:2a:e8:
99:7c:46:3c:2c:5a:52:f5:78:62:b6:cc:95:ce:4f:
bd:9b:50:22:41:bf:46:3d:1c:12:c6:52:39:ea:0d:
33:c2:6c:63:28:76:93:6c:44:97:4b:31:05:98:93:
8d:c0:68:cb:e0:5c:a1:fa:17:72:bf:de:37:6c:9b:
d7:58:b4:3f:6a:0c:c2:09:dc:57:f6:10:0d:d4:5a:
70:fc:11:bb:a0:f5:1d:d2:40:01:b9:ef:07:91:39:
c5:55:f5:2e:1d:fd:d9:4c:de:72:ff:54:d8:85:92:
76:e3:83:87:aa:4f:74:9a:31:a7:5e:39:62:05:0c:
f3:5c:95:86:23:09:1c:1c:08:e4:42:e7:f2:0f:1d:
36:26:0e:a4:f9:aa:1d:49:90:0a:1f:ac:ac:c6:46:
19:53:0b:96:11:f7:77:dd:6e:ec:47:a1:95:db:6d:
82:08:f9:9e:a8:3a:69:34:5d:4b:3c:0a:1c:78:7a:
4e:32:bf:c8:48:5c:96:3e:07:12:bc:3d:d7:29:80:
38:14:ca:bc:9a:65:f3:c7:97:21:c7:c7:e6:23:6c:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:ED:06:74:1B:84:EC:CB:0B:A0:D1:8D:1A:33:62:45:1E:44:69
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ARrtBnQbhOzLC6DRjRozYkUeRGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
89.213.2.0/23
213.218.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:18:09:f9:6b:ac:0e:17:ef:92:cc:f4:d3:b0:05:fb:8b:5e:
fa:ef:69:df:1b:38:74:5e:62:3c:1f:44:30:ac:22:e4:25:99:
7c:37:e4:be:fa:f7:ed:8a:a7:82:50:ac:e1:b8:7b:e9:d9:9d:
b7:d2:48:c3:7f:54:d5:83:38:8e:fc:f3:8e:97:c1:62:90:6f:
e5:14:a3:af:56:d4:27:53:bf:4b:6f:c5:d5:5e:40:64:29:02:
26:c0:26:e0:e2:13:c1:35:8f:ec:fe:10:98:54:ee:b7:2a:39:
6a:1d:7f:b5:1c:a4:9a:05:fa:d0:20:2e:ab:62:c3:d4:51:19:
07:69:8b:b3:3e:a8:b7:fb:8f:6e:f5:7a:cd:68:1c:ac:0b:bd:
93:43:a7:48:5a:99:c5:41:09:ea:d3:96:00:cb:e5:e9:5f:ec:
10:80:64:42:9b:bb:76:fe:06:bb:1e:ca:1e:f0:87:1e:b7:85:
e7:f5:b8:ad:4c:7c:55:25:18:78:b9:1a:64:09:70:5b:e2:7a:
4c:23:b7:b6:9f:e5:ec:c2:39:26:45:53:c0:df:d9:51:3a:6a:
70:05:10:bb:9d:51:34:b4:73:bc:ba:cf:05:5d:47:ca:e1:7c:
da:90:61:6f:54:20:c3:fd:09:f3:6f:ba:4e:a2:b3:4f:d1:fe:
18:60:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:53:19 2025 by rpki-client