Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/jT6NkmL7YzecSayVxKLBX2lYFl0.roa
File: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (raw, json)
Hash identifier: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=
Subject key identifier: 8D:3E:8D:92:62:FB:63:37:9C:49:AC:95:C4:A2:C1:5F:69:58:16:5D
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01981CC53FF56E88129FF31FAF89707BD525
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/jT6NkmL7YzecSayVxKLBX2lYFl0.roa
Signing time: Fri 18 Jul 2025 09:02:25 +0000
ROA not before: Fri 18 Jul 2025 09:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.64.0/24 maxlen: 24
84.22.65.0/24 maxlen: 24
84.22.66.0/24 maxlen: 24
84.22.67.0/24 maxlen: 24
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.70.0/24 maxlen: 24
84.22.71.0/24 maxlen: 24
84.22.72.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.74.0/24 maxlen: 24
84.22.75.0/24 maxlen: 24
84.22.76.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.79.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.81.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
84.22.86.0/24 maxlen: 24
128.140.128.0/20 maxlen: 20
185.23.96.0/23 maxlen: 23
185.23.99.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.240.0/21 maxlen: 21
213.180.247.0/24 maxlen: 24
213.180.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:c5:3f:f5:6e:88:12:9f:f3:1f:af:89:70:7b:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jul 18 09:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d3e8d9262fb63379c49ac95c4a2c15f6958165d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:21:90:27:b3:b2:a8:e4:44:fe:13:a6:ab:
a9:92:5f:9a:19:2a:38:a2:ef:fa:5c:36:07:8a:2a:
bf:88:7c:b9:4a:07:84:73:dc:7f:82:6a:4c:fc:a1:
8f:dc:8b:83:7a:43:ce:a4:bc:82:86:8c:43:6d:7a:
20:02:df:03:d9:fb:32:73:e1:61:53:a2:16:d6:b9:
97:1d:59:bd:26:d9:de:12:71:53:ea:c4:2e:28:8f:
1f:6c:f6:93:9a:ca:f4:f3:7d:06:49:dc:da:29:bd:
0c:d8:10:14:79:8d:78:85:94:74:f2:ed:e3:99:d5:
a0:b7:1a:ba:a7:22:66:22:1a:71:79:bd:09:f1:bb:
72:14:e2:0d:2a:a1:cb:08:e7:e3:3d:fb:dd:da:8f:
71:43:4f:30:6a:71:72:a0:32:7c:55:f7:32:a3:b0:
66:10:d7:b4:fa:1d:3c:68:da:60:7e:67:c6:52:b4:
9f:82:61:b7:d6:08:d6:32:3b:70:8c:ac:17:d8:30:
2b:8a:b1:33:d2:c0:59:21:b9:9c:15:52:b0:63:f8:
ce:0c:7a:ba:b2:a2:51:b3:7e:95:53:e8:1b:ab:1f:
67:cc:ed:91:29:29:06:42:75:9e:c5:3b:91:28:68:
53:be:6d:a7:76:fb:5b:99:f0:1b:6c:58:18:c7:17:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3E:8D:92:62:FB:63:37:9C:49:AC:95:C4:A2:C1:5F:69:58:16:5D
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/jT6NkmL7YzecSayVxKLBX2lYFl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
128.140.128.0/20
185.23.96.0/23
185.23.99.0/24
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.240.0/21
213.180.252.0/22
Signature Algorithm: sha256WithRSAEncryption
04:02:fb:33:6e:82:a4:a0:ae:18:a4:7a:9e:e6:bc:3a:fc:7e:
62:11:25:e6:e2:26:e3:27:33:85:d6:2e:75:fe:90:36:b8:f6:
bd:26:3d:03:bb:3a:a5:e3:cf:65:8f:c7:8e:61:43:90:b4:d2:
fa:7a:a7:67:7f:0a:4b:8a:a0:a3:8d:d1:ee:0b:f1:8f:b5:15:
3c:3a:60:0f:4c:78:1c:e1:86:e3:00:89:36:42:04:28:d9:c6:
b0:dc:68:61:7f:36:b9:f8:27:84:9e:cb:1b:60:10:85:34:36:
9f:9d:37:24:0e:ee:3b:0f:d1:a5:ae:2f:c7:88:74:63:d7:96:
e2:e5:98:20:fb:f6:75:9c:c5:d4:6a:00:e5:96:7a:fc:ba:3b:
e1:f9:78:a8:b4:4a:2f:e7:b1:8d:80:74:2d:16:ee:2a:a5:8b:
68:f6:69:77:b9:7a:30:76:1e:c6:34:4b:b2:b4:0e:fe:cd:71:
89:c6:0d:1d:99:ca:12:2c:fd:d4:b7:82:7e:c5:ba:72:0f:41:
49:50:26:85:b5:ea:03:d4:92:0e:c4:c0:46:bf:e4:b8:41:cd:
39:8c:39:c8:08:cd:9b:9e:c1:da:36:af:3d:35:c4:1c:32:10:
40:cd:42:4a:6f:2d:c3:db:df:20:6d:26:09:77:fe:ae:ff:9f:
8a:96:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:00:59 2025 by rpki-client