Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8_m6Z3eBS59FkQ4kWfLXRqSFh6M.roa
File: 8_m6Z3eBS59FkQ4kWfLXRqSFh6M.roa (raw, json)
Hash identifier: OiK6voVJwVXjKz7roH1cUUeh9s4IhtyskSOTzTdVii4=
Subject key identifier: F3:F9:BA:67:77:81:4B:9F:45:91:0E:24:59:F2:D7:46:A4:85:87:A3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01970AFEABA5FB8EBF3D6CEABB1D08E819A1
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8_m6Z3eBS59FkQ4kWfLXRqSFh6M.roa
Signing time: Mon 26 May 2025 05:09:11 +0000
ROA not before: Mon 26 May 2025 05:09:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43444
IP address blocks: 37.9.40.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
37.9.42.0/24 maxlen: 24
37.9.43.0/24 maxlen: 24
37.9.44.0/24 maxlen: 24
37.9.45.0/24 maxlen: 24
37.9.46.0/24 maxlen: 24
37.9.47.0/24 maxlen: 24
146.185.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0a:fe:ab:a5:fb:8e:bf:3d:6c:ea:bb:1d:08:e8:19:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 26 05:09:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f9ba6777814b9f45910e2459f2d746a48587a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:25:89:a4:d3:9b:19:98:6a:2a:c8:22:e2:
a4:eb:9b:e0:12:0a:63:03:ad:4b:bc:51:1a:75:25:
b9:3f:11:89:fa:d1:a3:1c:ca:a2:ad:58:b4:ed:36:
6c:00:87:30:38:f4:6d:4b:16:ab:4e:b6:c1:93:d2:
fa:89:ba:38:d2:b1:ea:82:46:03:07:29:96:93:b0:
fe:64:7b:02:2d:73:da:c0:00:eb:70:92:c6:11:1a:
fc:20:5e:f0:14:13:db:32:ec:ee:84:cf:a7:df:c9:
34:f9:5c:a6:2f:b3:66:cf:1d:1b:98:32:4f:8e:35:
c7:4b:a7:3e:8f:9c:f2:7f:f3:7a:ac:66:98:60:26:
90:65:6a:51:aa:eb:41:7d:4a:5d:62:bc:e7:58:cb:
53:71:44:27:af:22:12:28:95:fa:b8:d3:97:2f:71:
55:97:f4:01:4e:36:89:e0:a8:4c:24:d3:46:1e:c2:
09:32:89:38:77:88:df:18:18:3d:16:07:b1:c2:f8:
ba:bf:47:35:bf:79:3c:d4:10:9e:45:de:60:52:66:
44:03:35:c5:45:ae:69:ab:f0:9c:f1:bf:b6:d9:2b:
77:b6:ad:a1:d5:bd:01:62:89:35:5b:cc:bc:ba:bf:
2c:97:c5:86:38:95:90:e9:e6:1f:cd:a1:f4:c9:a2:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F9:BA:67:77:81:4B:9F:45:91:0E:24:59:F2:D7:46:A4:85:87:A3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8_m6Z3eBS59FkQ4kWfLXRqSFh6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.40.0/21
146.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
58:16:3d:5e:15:db:d1:d6:6b:77:58:39:4c:3e:fd:e2:a9:28:
aa:4a:46:82:d1:cf:22:e7:20:d2:93:86:22:d3:12:11:64:0f:
fc:55:6f:af:73:cd:aa:74:4b:30:f7:76:04:f7:15:6d:59:97:
17:68:bf:05:6f:d3:f9:be:b7:fc:ca:a7:a0:70:53:4a:fc:d2:
81:e1:4f:6f:a6:a1:cd:d1:fd:02:f4:f2:49:27:8a:cc:77:18:
32:f4:4a:f6:2d:4a:70:fd:2a:f2:0c:02:08:5f:93:f5:87:c0:
94:b5:1a:e7:9d:bc:17:e3:be:98:ea:f6:5d:8d:4f:c3:54:f1:
46:89:60:72:1e:53:21:17:9b:d3:34:79:6f:f3:d7:d1:f4:8b:
1f:85:60:fc:1e:2a:83:0f:cc:b2:2d:88:fa:25:92:2d:9d:8d:
c3:7e:49:78:8a:7f:49:6f:f8:a1:6d:5a:32:ad:98:2e:ef:7c:
33:cf:35:81:77:71:63:a7:ad:63:d7:48:5e:18:b9:7c:8f:09:
ef:ed:0b:16:63:7f:fa:42:07:c3:80:45:4e:7b:e2:70:1b:7f:
22:49:ab:3b:49:04:c5:98:30:dd:27:53:21:27:f3:da:06:b0:
8b:cc:33:90:d8:91:b6:6e:38:38:02:09:10:5c:fb:13:a0:31:
8a:6e:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:35 2025 by rpki-client