Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fFr9iLTpeFwvEgZdbYg57JE6jV0.roa
File: fFr9iLTpeFwvEgZdbYg57JE6jV0.roa (raw, json)
Hash identifier: fAs5Pw18Rp99A7SiwVTO8Wfp2uJC+wo1K+h1inNGD4U=
Subject key identifier: 7C:5A:FD:88:B4:E9:78:5C:2F:12:06:5D:6D:88:39:EC:91:3A:8D:5D
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0197EBAF60377133633E9E73A1F8ADC1F355
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fFr9iLTpeFwvEgZdbYg57JE6jV0.roa
Signing time: Tue 08 Jul 2025 20:17:08 +0000
ROA not before: Tue 08 Jul 2025 20:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:421::/48 maxlen: 48
2a03:5000:431::/48 maxlen: 48
2a03:5000:441::/48 maxlen: 48
2a03:5000:442::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:eb:af:60:37:71:33:63:3e:9e:73:a1:f8:ad:c1:f3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jul 8 20:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5afd88b4e9785c2f12065d6d8839ec913a8d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:3b:33:59:5d:79:d4:24:15:97:4b:7f:95:
51:04:ad:71:b9:0e:86:ec:90:61:cd:1e:ad:3f:37:
20:f4:15:16:0a:4f:cd:53:8d:ae:19:b3:a6:86:35:
2a:c2:e5:81:43:47:d4:2f:0c:e9:91:c0:80:ec:ec:
8c:8c:b9:4c:8e:84:5c:ca:ca:2b:c9:03:75:cb:63:
e3:75:1b:3e:d6:91:6a:43:08:3e:39:8d:83:1b:fa:
09:bb:07:ec:41:c7:a7:1b:00:5e:b3:d1:c6:8d:2d:
78:17:7b:24:a3:e4:90:35:d8:f4:71:c6:cc:d0:45:
a9:35:e8:66:b0:6f:97:72:94:b1:56:cd:16:29:d1:
17:3b:90:a6:88:9c:c2:12:3d:28:2f:44:8a:d0:d8:
9d:35:4e:a2:cc:00:53:77:87:d4:b1:1a:5e:9a:3d:
1e:b0:33:62:8c:8a:88:b6:95:7e:f2:9f:f7:2c:bc:
01:44:89:dd:25:2a:0c:94:f6:80:f4:eb:ff:52:85:
c8:dc:a1:42:56:48:ee:22:b9:0d:c5:5b:78:81:5e:
39:85:73:de:0a:e4:c5:ca:01:c5:30:c2:a7:95:c4:
9d:5b:c0:ef:45:27:29:c0:9b:52:57:17:c2:ad:65:
3c:a1:81:bc:a5:9b:8c:1e:24:82:88:9c:ac:4c:df:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:FD:88:B4:E9:78:5C:2F:12:06:5D:6D:88:39:EC:91:3A:8D:5D
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fFr9iLTpeFwvEgZdbYg57JE6jV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:421::/48
2a03:5000:431::/48
2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:1d:76:a1:94:0f:01:bd:0d:fe:47:cb:58:72:20:5c:f3:8b:
80:7f:96:88:a2:89:c5:20:59:b6:c7:76:18:cf:b5:45:cb:df:
84:d1:86:ad:a4:d5:c6:7a:ff:47:6a:1b:5b:c6:5d:b7:54:14:
45:a6:ea:a8:39:2d:3c:f8:1b:48:68:cc:eb:c5:6a:f7:ef:01:
f1:b0:11:48:c8:95:d3:9f:54:0c:77:6d:c8:0f:97:ad:ce:8c:
68:a8:45:a1:b7:1a:2a:f0:5b:4c:cf:c4:97:8a:e5:4f:83:19:
b3:aa:d1:75:ce:aa:e3:b1:62:c0:36:00:7d:fd:a6:4f:7e:49:
c8:e5:fe:3e:8e:37:6a:f5:c5:c2:25:b7:8e:7b:dc:9d:f6:59:
1d:fb:20:26:a9:dc:5d:ea:18:aa:8c:c6:65:b6:ab:81:ee:f9:
86:4a:b8:66:30:75:ff:4d:1a:93:f4:8f:ca:1c:10:89:7a:94:
c0:4d:68:1e:b4:b6:aa:78:60:b4:76:06:1f:a4:8d:9c:50:e3:
56:47:0e:2b:a4:cc:a0:37:86:0c:c3:0e:f9:cd:e4:a7:1b:fc:
8b:a2:46:4d:eb:70:ce:b6:93:85:ec:00:c8:b6:77:70:2c:b3:
75:9c:b4:df:1a:db:45:c3:dc:f3:10:d1:b7:a4:09:46:61:2c:
e6:03:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:43:48 2025 by rpki-client