Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/Fx5duu0Ld8OdzLL9KF_NytqnjQA.roa
File: Fx5duu0Ld8OdzLL9KF_NytqnjQA.roa (raw, json)
Hash identifier: 1whwQcv4ojRdYkBS0qo2bjfiBAmUfpQ+IDeYrF1v1/0=
Subject key identifier: 17:1E:5D:BA:ED:0B:77:C3:9D:CC:B2:FD:28:5F:CD:CA:DA:A7:8D:00
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01994E012AFB20519BCC2110F7D223B3119E
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/Fx5duu0Ld8OdzLL9KF_NytqnjQA.roa
Signing time: Mon 15 Sep 2025 15:32:03 +0000
ROA not before: Mon 15 Sep 2025 15:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 24
85.234.66.0/24 maxlen: 24
85.234.67.0/24 maxlen: 24
85.234.78.0/24 maxlen: 24
85.234.79.0/24 maxlen: 24
85.234.84.0/24 maxlen: 24
85.234.86.0/24 maxlen: 24
85.234.90.0/24 maxlen: 24
85.234.91.0/24 maxlen: 24
85.234.93.0/24 maxlen: 24
85.234.94.0/24 maxlen: 24
92.38.143.0/24 maxlen: 24
93.113.170.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:2b0::/44 maxlen: 44
2a03:90c0:650::/44 maxlen: 64
2a03:90c0:680::/44 maxlen: 44
2a03:90c0:7a0::/44 maxlen: 44
2a03:90c0:7b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:01:2a:fb:20:51:9b:cc:21:10:f7:d2:23:b3:11:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Sep 15 15:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=171e5dbaed0b77c39dccb2fd285fcdcadaa78d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:b1:2d:fd:fb:a7:c9:83:55:b9:fd:1f:65:
b3:cc:91:60:09:df:9a:4e:25:f5:bc:1a:45:ac:1b:
e6:f1:74:76:6a:7a:73:5c:e7:c9:00:98:e3:24:b6:
fb:a1:61:8b:8b:b9:02:bb:f1:6f:2a:6b:a3:92:b2:
71:3e:0d:18:69:d6:a4:6f:da:e1:2a:e2:75:5b:a7:
a2:a2:ff:40:50:df:2f:c2:4c:2d:42:90:02:2f:b6:
31:bc:66:1f:30:d3:5e:db:20:89:1d:99:ce:20:9d:
31:06:14:b2:d2:c1:b4:15:12:93:db:bc:c8:f5:d2:
12:6a:eb:78:ce:3f:da:1c:06:f5:d7:dc:bd:be:ed:
0d:a9:2d:2f:b9:c3:75:e4:61:bf:57:60:fa:0f:a6:
3a:7f:e8:f1:59:e7:5d:a2:21:a2:b9:71:52:d3:9a:
a8:5c:b8:1a:e5:51:31:d9:37:93:be:cd:b3:bc:46:
aa:39:9b:10:db:06:6e:d4:a5:e8:89:c1:8f:3d:51:
d4:fd:7c:26:2d:57:c6:85:af:c2:45:32:42:ff:4f:
e1:a3:f0:03:48:a4:65:41:ec:75:83:51:24:20:5a:
07:59:48:2b:a2:01:c1:de:2e:ab:be:7b:02:3b:e2:
c9:94:12:2c:67:bc:5d:a2:1d:40:a9:c1:f2:25:62:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1E:5D:BA:ED:0B:77:C3:9D:CC:B2:FD:28:5F:CD:CA:DA:A7:8D:00
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/Fx5duu0Ld8OdzLL9KF_NytqnjQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
85.234.66.0/23
85.234.78.0/23
85.234.84.0/24
85.234.86.0/24
85.234.90.0/23
85.234.93.0-85.234.94.255
92.38.143.0/24
93.113.170.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:2b0::/44
2a03:90c0:650::/44
2a03:90c0:680::/44
2a03:90c0:7a0::/43
Signature Algorithm: sha256WithRSAEncryption
c8:3c:c4:8a:b7:99:d4:4b:9e:0f:3b:94:b5:83:df:77:f1:5f:
9e:00:b1:3d:8d:ea:7c:2a:02:f8:c9:7b:41:c4:94:be:72:77:
c9:b5:c2:1f:cc:fe:ff:4a:7b:78:9b:54:ff:39:39:b1:69:d5:
0d:81:53:30:e3:0b:49:22:bb:bd:bb:ff:ad:bc:5d:50:9b:10:
d2:5f:2e:da:d2:6f:15:30:60:2c:fc:95:a4:78:25:a8:87:cf:
45:4c:66:c1:ba:b7:a2:7e:e7:3f:e5:47:b2:59:34:e6:24:cb:
a9:6e:14:d5:ab:91:50:e2:30:62:5c:1d:01:45:36:15:d2:73:
cc:39:b0:18:36:6e:3c:3a:c1:3f:5b:9a:65:75:39:73:5b:2b:
a9:21:5f:b0:c5:27:2e:f2:71:e3:a7:02:6d:03:d6:1a:a6:a0:
ad:7c:23:df:75:02:78:7b:3d:cd:67:a8:3f:1a:d7:b4:fd:d4:
36:84:8c:64:87:91:de:41:2f:a2:e5:3b:f3:b4:55:3d:ae:6d:
a5:73:04:61:f5:25:41:b8:dd:39:85:c4:91:07:fb:8a:3f:3a:
e9:94:d1:82:7e:41:e7:d4:06:79:a0:fb:cb:88:e4:df:b4:64:
81:97:43:72:7c:09:a4:ae:28:43:93:15:75:53:f5:25:fd:ab:
7b:c8:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:50:43 2025 by rpki-client