Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r4poEQyEfXK9APeJwoEbuWVpjAc.roa
File: r4poEQyEfXK9APeJwoEbuWVpjAc.roa (raw, json)
Hash identifier: ixYcdNBYkyITyUB8VXlDdtw8ecxJZgETH3sng2FLk54=
Subject key identifier: AF:8A:68:11:0C:84:7D:72:BD:00:F7:89:C2:81:1B:B9:65:69:8C:07
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019808B3F81F26B531DF8E96B65752F9338E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r4poEQyEfXK9APeJwoEbuWVpjAc.roa
Signing time: Mon 14 Jul 2025 11:31:08 +0000
ROA not before: Mon 14 Jul 2025 11:31:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 93.190.244.0/24 maxlen: 24
2a09:4900::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0f:140::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a11:5200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:b3:f8:1f:26:b5:31:df:8e:96:b6:57:52:f9:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 14 11:31:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af8a68110c847d72bd00f789c2811bb965698c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:4b:82:56:95:02:1d:7f:83:a0:56:67:60:
04:47:be:89:ed:5b:76:55:61:87:5e:e9:89:68:de:
f8:29:a3:a2:10:b3:0f:5c:6a:6b:d1:57:40:8b:81:
f5:ae:dd:18:a7:7a:df:f6:64:c7:ee:ae:dd:e8:ba:
80:5e:18:84:90:81:46:95:d5:22:43:20:29:b1:b2:
ff:89:86:6c:8d:a9:0e:c3:79:88:f9:5b:dc:bc:ab:
75:d6:1d:e1:eb:50:81:de:8e:a6:bf:35:85:e2:b1:
9c:b0:03:b4:fc:da:61:ea:17:78:85:b0:ce:50:56:
2d:2c:3a:44:15:1c:6c:5f:45:bd:fb:28:87:f7:2f:
e9:75:36:30:2e:1e:5d:7a:3b:2e:4c:f3:d1:30:3c:
11:ac:ff:36:32:6a:b0:83:68:58:25:90:f3:42:ef:
ee:b3:6d:bb:0f:70:7e:f4:a0:8b:15:cb:d4:52:b4:
2d:c8:f8:63:88:4a:2c:89:e5:f2:68:5e:1c:b2:2e:
e6:c5:d7:22:3f:5b:0a:5e:1a:51:df:91:1b:b1:c1:
8a:45:6f:de:bb:af:f2:95:39:3b:9c:f4:09:5e:ef:
19:71:7e:2d:d9:c3:3e:ff:f1:6d:b8:85:09:c5:e6:
00:b7:74:8e:9d:e7:ce:8d:32:70:17:4d:3f:9f:83:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:68:11:0C:84:7D:72:BD:00:F7:89:C2:81:1B:B9:65:69:8C:07
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r4poEQyEfXK9APeJwoEbuWVpjAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.244.0/24
IPv6:
2a09:4900::/29
2a0e:2440::/29
2a0f:140::/29
2a0f:2100::/29
2a0f:2f80::/29
2a0f:3f80::/29
2a0f:8300::/29
2a0f:b400::/29
2a0f:c400::/29
2a0f:e4c0::/29
2a0f:e640::/29
2a0f:fc00::/29
2a11:5200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:44:9a:3f:04:d8:e1:fd:5a:7c:0d:cc:3e:65:4a:3c:aa:c1:
35:c4:98:c2:13:dc:c7:c5:2c:6a:29:e0:f1:9a:e9:17:91:10:
e4:f5:5b:7e:21:d7:1d:a6:36:7c:0e:d2:35:1a:fe:44:ed:cf:
4c:ad:10:d5:44:78:24:21:a7:de:fa:56:a5:c8:5d:63:ef:40:
2c:1d:51:95:06:d8:0f:f5:23:fb:0c:f9:76:1f:54:9a:a2:50:
bc:fc:66:57:10:8f:95:b8:f5:c3:5a:e7:f1:d3:52:f7:b5:e9:
c7:d9:15:bd:3a:7b:40:89:df:eb:62:ee:1f:c3:00:f9:08:34:
c9:c0:7f:53:1e:11:d7:fd:dc:79:7e:14:18:5e:8f:44:c9:8e:
c4:98:56:84:c0:e4:1e:9c:54:a0:11:87:bc:6e:1f:10:11:4f:
91:7f:e8:6c:42:6f:0f:c0:35:33:ce:7e:88:56:91:b1:24:cd:
47:3d:14:0b:75:63:a3:0b:39:3b:92:64:f3:11:a0:c1:ec:45:
83:f3:09:3d:bd:98:ef:c3:1a:f9:2d:51:f3:92:51:bd:f7:b3:
85:82:21:61:33:c2:d4:53:37:80:50:bd:69:cf:0c:56:f5:d6:
88:2a:d8:81:71:24:c1:06:56:f9:9d:1c:82:f3:42:d0:2d:57:
83:c1:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:26:17 2025 by rpki-client