Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa
File: fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa (raw, json)
Hash identifier: a8q8mr9r17Mfl2XO4auErGCWFnO43pDXqgxu5lyQm8k=
Subject key identifier: 7D:DD:B1:1C:09:85:A9:08:5E:13:B1:4D:7B:DB:50:88:20:F3:D4:98
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0198385313721E14F38CAC315E845E9BD5D1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa
Signing time: Wed 23 Jul 2025 17:27:05 +0000
ROA not before: Wed 23 Jul 2025 17:27:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:53:13:72:1e:14:f3:8c:ac:31:5e:84:5e:9b:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jul 23 17:27:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dddb11c0985a9085e13b14d7bdb508820f3d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:13:af:64:aa:2a:09:df:9e:f7:ae:20:9c:
f6:06:b0:1c:98:95:88:b5:0b:b5:c7:36:8a:90:dc:
4c:97:bc:3d:91:05:97:e8:cb:97:8e:fd:86:79:44:
64:2a:b3:80:1a:ae:50:60:8c:ee:7d:ce:94:83:78:
67:87:72:89:3e:5e:51:2d:3b:b7:a4:2a:3b:ec:b6:
79:74:8b:d9:51:6a:68:ba:02:46:7d:c6:32:5e:aa:
c3:d3:a5:4f:69:fe:d8:c2:36:5b:c6:3b:e2:4d:87:
7f:4e:35:e4:cf:a0:a5:6c:af:5a:89:c6:8f:ff:b7:
11:e5:21:b2:3f:83:8f:3e:48:f0:9e:3a:47:4e:9d:
40:7f:61:c4:d0:75:04:25:44:9c:45:24:e5:fa:7c:
e7:c5:e6:42:21:6e:fd:e3:d5:ef:62:4a:13:b1:93:
a5:3e:4d:7d:38:eb:00:7d:2b:a5:33:d7:1d:02:e8:
48:0a:21:b8:a4:ce:ab:73:d9:68:27:f6:cc:bb:c7:
cb:97:21:04:25:10:c9:6b:f0:97:d8:1a:94:b4:e0:
4e:30:0b:9d:c7:72:3e:15:ff:ad:74:de:57:10:6a:
e2:ea:32:69:f5:5e:ab:c7:1b:cd:13:b3:b5:c5:d5:
42:d8:68:9a:4a:87:17:71:fe:cb:c4:a2:d2:9d:85:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:B1:1C:09:85:A9:08:5E:13:B1:4D:7B:DB:50:88:20:F3:D4:98
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:d4:13:68:07:87:10:7a:67:45:45:38:2a:8f:25:61:74:9d:
dc:5e:bc:01:fe:d0:f2:82:c7:65:0a:89:17:89:52:27:27:1f:
de:81:a4:02:30:a9:88:c6:f4:b0:14:79:5c:f5:16:2e:49:08:
9c:74:bd:1f:e5:b1:74:8a:f5:08:f7:77:28:1e:46:64:9d:82:
3e:ad:69:ab:79:85:dc:00:b8:04:c2:4b:e6:a4:3e:b3:ef:a3:
79:fb:e6:8d:b0:2b:50:f1:0c:41:bf:81:bc:ca:1f:d0:8b:b0:
71:a3:42:40:a5:de:7d:44:de:ff:68:0a:0e:37:c6:72:72:60:
29:78:00:08:db:f5:02:aa:b2:8b:9f:55:a9:dc:24:ab:d4:0c:
bd:85:ec:f4:34:57:46:49:fb:ce:ca:4f:7d:55:35:a0:cf:ba:
58:b7:fa:53:88:74:91:95:69:20:7c:61:0c:91:6c:c4:a7:02:
9b:ec:59:1d:e9:e5:65:35:0a:cf:7f:11:a5:53:cd:6f:7d:43:
c4:ff:13:a1:51:ce:8d:4f:46:e5:d7:37:c9:d7:07:13:98:c4:
35:fc:9e:93:70:bf:54:be:0a:2c:bb:be:52:0a:af:89:7b:02:
84:a9:0d:14:d1:af:08:d9:7b:9c:60:7a:cc:eb:16:6d:a1:ed:
90:ae:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:52:20 2025 by rpki-client