Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa
File: q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa (raw, json)
Hash identifier: e3owPYjBi24F74VvYehxFdp8nbf9b8349pzS2VUb1Mo=
Subject key identifier: AB:80:21:D2:B5:96:29:35:2E:40:DD:24:C9:AB:8F:F5:76:F1:E0:F7
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0198294C57796C6F0862D0FEBECAB4C11C06
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa
Signing time: Sun 20 Jul 2025 19:25:25 +0000
ROA not before: Sun 20 Jul 2025 19:25:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206854
IP address blocks: 93.126.16.0/24 maxlen: 24
93.126.30.0/24 maxlen: 24
93.126.52.0/24 maxlen: 24
93.126.53.0/24 maxlen: 24
93.126.55.0/24 maxlen: 24
93.126.57.0/24 maxlen: 24
93.126.58.0/24 maxlen: 24
193.178.201.0/24 maxlen: 24
193.178.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:4c:57:79:6c:6f:08:62:d0:fe:be:ca:b4:c1:1c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jul 20 19:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab8021d2b59629352e40dd24c9ab8ff576f1e0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:63:49:1b:29:3f:0a:bf:06:b9:b5:62:97:
7c:83:9a:f4:c2:bf:3b:70:8c:98:39:87:78:dc:e1:
53:34:28:71:37:ce:17:65:ed:dc:15:c7:3f:c7:21:
79:a4:8f:96:ce:39:6e:5b:75:6f:ca:f3:d5:57:7c:
f3:ad:00:e7:a8:8c:b9:87:8a:df:bf:5a:f7:87:46:
12:24:97:0a:51:bf:ce:f6:20:47:1d:81:e6:a3:86:
c6:59:dc:22:e9:bf:fb:31:f9:f7:b4:0d:ab:4d:8b:
98:f2:4b:34:32:13:e5:d1:ad:4f:d8:2c:e2:7d:d6:
7c:c2:ae:d1:c8:7e:e1:cf:dc:bc:8d:f7:94:99:43:
37:6c:13:44:79:3b:26:76:9e:e1:69:76:0c:70:87:
89:0f:5b:2e:c4:f1:97:a3:05:fa:b3:0d:84:44:9b:
e9:8e:86:1b:40:df:b2:75:da:14:93:3d:86:67:10:
0a:0d:2c:f3:5f:89:46:a5:16:dd:ae:c3:2c:89:48:
ef:3a:9f:80:f2:ea:65:7f:60:1b:60:c8:be:df:ca:
20:92:d0:97:33:76:2e:ae:b7:5d:87:86:d9:0a:80:
a5:ce:a7:c0:ab:39:16:09:bf:02:d5:7a:f9:28:71:
a1:83:29:0c:cd:19:19:42:39:ae:0a:2c:f0:dd:df:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:80:21:D2:B5:96:29:35:2E:40:DD:24:C9:AB:8F:F5:76:F1:E0:F7
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.16.0/24
93.126.30.0/24
93.126.52.0/23
93.126.55.0/24
93.126.57.0-93.126.58.255
193.178.201.0-193.178.202.255
Signature Algorithm: sha256WithRSAEncryption
b1:fa:2f:67:e6:0f:39:4d:c2:2e:fa:85:7d:a0:89:73:1b:a5:
88:80:a7:08:0a:22:12:4c:e3:42:f8:96:b3:3a:0b:8f:16:5b:
18:86:6a:3c:8d:31:7c:1b:ab:4e:64:b2:4b:80:79:0e:ad:9d:
12:48:3c:80:aa:48:86:4a:46:eb:f8:24:f7:dc:83:fd:69:ef:
9e:da:a3:7a:ad:eb:7d:04:1b:04:19:f1:8f:2d:bb:db:15:67:
df:e1:c9:f0:e2:da:33:50:c7:3f:a2:30:c7:e7:47:4f:7e:4e:
8c:69:f4:49:ee:56:9e:cb:b9:95:11:a9:53:81:ad:63:f0:2f:
eb:61:ad:c9:93:fc:e4:d9:f9:57:38:a2:45:06:8a:a4:3c:5a:
be:3d:98:ba:44:4e:0f:0e:d6:46:df:0c:31:0a:27:a1:51:76:
6f:23:e7:20:6a:1d:42:4c:11:b4:b6:5a:9d:a7:42:31:7d:74:
bc:2f:33:e6:42:f2:87:98:1f:76:17:74:60:6e:ca:e4:14:f7:
30:f9:af:a2:7b:c7:fe:d9:fb:d6:98:b7:75:83:98:c7:2d:23:
85:89:30:71:d5:c6:49:2b:c5:11:1b:d2:ce:7b:4a:db:04:c4:
b8:65:12:b1:f7:62:cc:30:b7:ce:8d:79:cd:55:70:ec:30:15:
2a:b5:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:30 2025 by rpki-client