Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/fRQm9txJEG9J9ZmTTymAf6TeYIA.roa
File: fRQm9txJEG9J9ZmTTymAf6TeYIA.roa (raw, json)
Hash identifier: w+UnfOFY87SloUZFNx3EhChlSsZ+Do6/267GREfdW2g=
Subject key identifier: 7D:14:26:F6:DC:49:10:6F:49:F5:99:93:4F:29:80:7F:A4:DE:60:80
Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial: 0194228D855A28946C071E03B573864AF1F9
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/fRQm9txJEG9J9ZmTTymAf6TeYIA.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34876
IP address blocks: 95.86.128.0/24 maxlen: 24
95.86.129.0/24 maxlen: 24
95.86.130.0/24 maxlen: 24
95.86.131.0/24 maxlen: 24
95.86.132.0/24 maxlen: 24
95.86.133.0/24 maxlen: 24
95.86.134.0/24 maxlen: 24
95.86.135.0/24 maxlen: 24
95.86.137.0/24 maxlen: 24
95.86.138.0/24 maxlen: 24
95.86.139.0/24 maxlen: 24
95.86.140.0/24 maxlen: 24
95.86.141.0/24 maxlen: 24
95.86.142.0/24 maxlen: 24
95.86.143.0/24 maxlen: 24
95.86.144.0/21 maxlen: 21
95.86.152.0/24 maxlen: 24
95.86.153.0/24 maxlen: 24
95.86.154.0/24 maxlen: 24
95.86.155.0/24 maxlen: 24
95.86.156.0/24 maxlen: 24
95.86.157.0/24 maxlen: 24
95.86.158.0/24 maxlen: 24
95.86.159.0/24 maxlen: 24
95.86.160.0/24 maxlen: 24
95.86.161.0/24 maxlen: 24
95.86.162.0/24 maxlen: 24
95.86.163.0/24 maxlen: 24
95.86.164.0/24 maxlen: 24
95.86.165.0/24 maxlen: 24
95.86.166.0/24 maxlen: 24
95.86.167.0/24 maxlen: 24
95.86.168.0/22 maxlen: 22
95.86.172.0/24 maxlen: 24
95.86.173.0/24 maxlen: 24
95.86.174.0/24 maxlen: 24
95.86.175.0/24 maxlen: 24
95.86.176.0/24 maxlen: 24
95.86.177.0/24 maxlen: 24
95.86.178.0/24 maxlen: 24
95.86.179.0/24 maxlen: 24
95.86.180.0/24 maxlen: 24
95.86.181.0/24 maxlen: 24
95.86.182.0/24 maxlen: 24
95.86.183.0/24 maxlen: 24
95.86.184.0/22 maxlen: 22
95.86.188.0/24 maxlen: 24
95.86.189.0/24 maxlen: 24
95.86.190.0/24 maxlen: 24
95.86.191.0/24 maxlen: 24
193.8.62.0/23 maxlen: 23
193.8.62.0/24 maxlen: 24
193.8.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:85:5a:28:94:6c:07:1e:03:b5:73:86:4a:f1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d1426f6dc49106f49f599934f29807fa4de6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:48:89:a3:6d:ae:19:5e:37:84:55:96:21:
5b:17:f3:ae:6b:85:69:43:4a:d4:85:89:1f:40:29:
f6:c8:b3:06:ef:00:86:7a:7b:f0:a3:b0:8d:f8:78:
41:e1:bd:29:23:5c:c5:4a:1a:ce:b0:19:44:5d:37:
94:41:e5:72:99:75:1b:8e:71:88:01:55:bb:5b:75:
84:ce:c4:90:f2:d1:7d:2e:ee:bb:bd:7e:56:01:c9:
bb:bc:2e:14:6b:20:04:96:c3:6c:7c:e3:1a:15:f8:
c5:01:43:20:b3:dc:3b:76:1e:a4:61:79:a8:e5:54:
27:72:3a:39:77:74:bd:78:69:08:52:87:2b:62:67:
13:81:d8:0b:26:93:7e:22:6f:4c:9a:f1:42:f0:fc:
dc:d6:09:c5:f7:29:72:b6:61:29:f7:da:aa:e6:c5:
6a:40:8e:0f:a2:90:46:01:bd:69:70:3b:e5:70:55:
5b:12:b7:20:fe:b4:50:02:79:99:54:0e:01:51:e9:
f5:22:5c:73:21:3f:82:b6:9f:fc:48:6e:9d:9b:64:
4a:c4:f9:1a:7e:20:33:65:c3:61:35:34:17:e9:15:
e7:de:0f:56:ed:f5:b0:12:7f:b1:8c:2f:0d:f1:61:
cd:52:41:4a:c6:7b:c5:47:d8:d9:83:33:f2:c0:17:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:26:F6:DC:49:10:6F:49:F5:99:93:4F:29:80:7F:A4:DE:60:80
X509v3 Authority Key Identifier:
keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/fRQm9txJEG9J9ZmTTymAf6TeYIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.128.0/21
95.86.137.0-95.86.191.255
193.8.62.0/23
Signature Algorithm: sha256WithRSAEncryption
59:ff:7b:e3:c0:99:5c:80:1e:fa:72:cd:a7:05:88:eb:d9:cb:
ed:65:cf:b0:25:74:3d:9f:65:1e:da:0f:80:26:46:ac:dd:2c:
8a:48:94:b9:3d:e9:6f:31:46:a5:f4:18:17:04:dd:c3:b8:4d:
24:f7:c2:80:ea:5b:23:e4:cf:25:8d:fb:ed:29:22:79:09:e8:
03:b3:21:20:99:d2:aa:4f:f2:49:49:53:a3:4e:2e:fe:0f:d6:
d1:31:9b:66:2c:04:7e:5b:a9:c0:91:66:69:b9:7b:92:5d:48:
e7:cb:dc:d2:b2:a4:e5:57:68:58:96:09:7b:30:f9:55:9e:52:
6a:7b:f7:02:0f:84:0b:55:0c:64:e4:2f:9f:35:f3:3d:e4:a2:
99:c5:c5:6c:d9:af:55:c3:62:51:61:fd:ab:34:ed:35:bd:2d:
e1:90:da:4a:71:63:e8:14:6d:67:0d:50:d2:5c:68:30:40:56:
75:fb:b2:f0:28:31:6f:42:94:2a:71:2a:0d:21:6e:80:07:17:
d9:30:90:2c:5e:81:ff:5f:3b:b5:74:8c:f6:f7:5d:1d:df:b0:
ff:34:6d:31:4d:c8:76:84:ee:0e:54:2f:4e:13:b4:78:b4:f2:
c0:13:3f:dc:d5:1e:e0:4e:c7:30:db:d2:df:d3:be:0c:e1:40:
16:d6:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:14 2025 by rpki-client