Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/RjuRaZuZ0xmwZH7qDjx0yyzfK8I.roa
File: RjuRaZuZ0xmwZH7qDjx0yyzfK8I.roa (raw, json)
Hash identifier: vDCSE2Q3+xwHwJ7yz5XXtXzSlCcuWpfsJowTd0aQz6o=
Subject key identifier: 46:3B:91:69:9B:99:D3:19:B0:64:7E:EA:0E:3C:74:CB:2C:DF:2B:C2
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 01992D603620E0C9A70A945BA92915442C62
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/RjuRaZuZ0xmwZH7qDjx0yyzfK8I.roa
Signing time: Tue 09 Sep 2025 07:28:24 +0000
ROA not before: Tue 09 Sep 2025 07:28:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35579
IP address blocks: 37.122.220.0/22 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.80.0/22 maxlen: 24
78.142.85.0/24 maxlen: 24
78.142.86.0/23 maxlen: 23
78.142.88.0/23 maxlen: 23
78.142.90.0/24 maxlen: 24
78.142.91.0/24 maxlen: 24
78.142.118.0/24 maxlen: 24
78.142.119.0/24 maxlen: 24
78.142.120.0/24 maxlen: 24
78.142.121.0/24 maxlen: 24
91.226.156.0/22 maxlen: 24
92.63.213.0/24 maxlen: 24
195.16.239.0/24 maxlen: 24
195.16.240.0/24 maxlen: 24
195.16.244.0/24 maxlen: 24
195.16.248.0/23 maxlen: 24
195.16.250.0/24 maxlen: 24
195.16.252.0/24 maxlen: 24
195.69.104.0/22 maxlen: 24
195.69.104.0/23 maxlen: 24
195.69.106.0/24 maxlen: 24
2a04:5080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:60:36:20:e0:c9:a7:0a:94:5b:a9:29:15:44:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Sep 9 07:28:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=463b91699b99d319b0647eea0e3c74cb2cdf2bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:f1:5e:88:94:e8:1f:64:41:5f:ea:8a:cf:
64:ba:91:58:99:54:e0:35:bf:c1:1f:0c:02:07:26:
d5:37:e2:cd:7d:7d:df:54:1b:9e:17:9a:9d:52:9c:
41:f3:03:df:d6:93:4b:0c:cb:1f:41:a7:a7:ae:7e:
32:8b:e8:c3:c1:32:dc:54:a7:69:f8:a8:22:c7:cb:
83:f5:10:d9:82:fe:eb:93:f6:8b:09:52:4f:ee:a9:
0c:32:66:f2:d5:e8:26:37:4a:6d:e2:22:1b:17:e0:
25:cd:55:71:f7:9e:61:31:86:fc:98:8d:98:31:3c:
88:89:b7:af:90:74:9b:65:d9:00:52:bc:29:4f:f3:
1d:79:0f:91:6d:02:d8:cd:ed:ff:1b:bb:01:55:e5:
f5:65:c4:84:3f:b1:6f:7b:fb:00:5e:8b:eb:e3:8a:
a9:88:84:a8:c9:0d:a5:ec:cc:f5:4a:24:2d:95:79:
5c:76:0d:bf:06:f1:84:16:32:70:2d:ea:fc:9b:0d:
7f:92:5b:ee:73:b1:6f:74:09:39:e2:68:3a:5f:17:
aa:b9:91:2b:8d:55:8d:73:90:88:91:31:6c:5b:c7:
19:aa:79:02:5f:a7:7a:45:eb:cb:84:33:6e:9f:3b:
44:8e:31:1c:6b:85:ac:b9:51:40:29:d6:05:6f:f7:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:91:69:9B:99:D3:19:B0:64:7E:EA:0E:3C:74:CB:2C:DF:2B:C2
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/RjuRaZuZ0xmwZH7qDjx0yyzfK8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.220.0/22
78.142.66.0/23
78.142.80.0/22
78.142.85.0-78.142.91.255
78.142.118.0-78.142.121.255
91.226.156.0/22
92.63.213.0/24
195.16.239.0-195.16.240.255
195.16.244.0/24
195.16.248.0-195.16.250.255
195.16.252.0/24
195.69.104.0/22
IPv6:
2a04:5080::/29
Signature Algorithm: sha256WithRSAEncryption
3f:fa:b4:f9:0d:f1:6f:8c:ae:17:36:a0:e4:4f:69:68:03:81:
1a:9a:06:21:25:71:58:70:96:ca:16:db:e1:57:77:88:c4:d6:
e4:73:9a:9a:51:d8:06:ba:bf:17:8e:1a:b2:92:50:dd:e5:d1:
d1:f3:db:38:56:df:8c:de:ee:7b:1d:92:31:f2:ff:63:67:28:
0f:88:31:54:28:66:a3:87:6e:f8:b0:6f:fc:96:a9:0b:2b:ba:
09:36:28:d2:22:5c:e4:9f:e4:21:eb:00:f5:66:36:a6:ea:59:
86:b9:cd:e1:73:97:62:5c:82:2f:6a:72:29:c0:06:24:6d:b3:
67:0e:b0:6c:4f:c9:e2:36:0d:e4:16:44:7e:9f:fd:73:fb:45:
83:7f:fb:81:cf:c4:b7:4e:01:ba:1c:5b:28:33:9b:5d:42:6d:
cf:56:a2:35:3c:0a:40:1e:63:c8:d2:9e:af:a1:35:2d:9e:01:
9d:8b:93:41:1d:7f:ef:3b:9a:44:e1:64:34:eb:80:cf:da:83:
0a:dc:9b:45:b1:d1:45:c1:6a:b7:fe:16:82:ec:b2:4e:87:66:
9d:90:cf:be:bc:0d:69:53:34:06:ba:fc:6d:34:9a:37:a3:ae:
b9:fd:e1:91:54:d0:db:e4:fa:e7:c0:77:0c:e6:cd:ef:c7:cb:
29:c4:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:53:55 2025 by rpki-client