Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8Xela-Mee_pqE6lNQZEN8AVVhbk.roa
File: 8Xela-Mee_pqE6lNQZEN8AVVhbk.roa (raw, json)
Hash identifier: flOn1eLeJfWoU1RqKxgqMYYYNSbe2kWfLTasPQluV+s=
Subject key identifier: F1:77:A5:6B:E3:1E:7B:FA:6A:13:A9:4D:41:91:0D:F0:05:55:85:B9
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01973005C95E67EEFD3A8618EDB297B7CB9F
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8Xela-Mee_pqE6lNQZEN8AVVhbk.roa
Signing time: Mon 02 Jun 2025 09:42:54 +0000
ROA not before: Mon 02 Jun 2025 09:42:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:05:c9:5e:67:ee:fd:3a:86:18:ed:b2:97:b7:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jun 2 09:42:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f177a56be31e7bfa6a13a94d41910df0055585b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:4b:27:87:9f:9e:f2:06:e4:4f:3d:59:c5:
4a:c1:67:b1:1d:8c:41:b9:8e:b5:46:94:ad:4b:25:
29:16:47:aa:2b:33:38:0b:12:a4:e6:af:49:07:26:
62:c5:59:19:d6:c2:48:98:a5:53:57:84:35:65:c5:
1e:19:cf:b2:b8:58:20:39:d6:6d:b5:03:64:99:ff:
fa:11:c4:01:9e:8a:89:8d:17:10:15:13:88:be:5f:
e7:b2:4e:dc:00:ab:56:c8:b2:3e:df:22:fb:a4:24:
cb:d5:62:8e:59:4d:e5:05:d2:19:00:a9:3a:55:88:
aa:0f:a4:f7:2f:8b:b1:20:05:b2:45:a1:c5:a9:82:
70:44:3c:26:50:18:86:53:8e:64:d4:75:1f:3e:eb:
ca:89:05:f6:7b:cc:0a:d6:14:13:2c:b5:05:bd:3a:
ea:16:69:91:2f:08:f5:94:bf:5e:b4:2a:15:1d:55:
d0:14:53:a6:30:f4:6b:2b:1e:3c:db:a4:5d:d3:0f:
19:c2:f1:3a:da:e8:fb:5d:cb:57:7b:6d:b0:58:63:
45:22:da:64:5a:66:4d:64:a6:59:b0:c7:1c:a0:0f:
bd:02:42:11:6b:77:92:fd:09:0a:8b:4b:e2:32:67:
b1:00:de:d5:d6:91:51:be:0c:2c:a2:b4:be:0d:9e:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:A5:6B:E3:1E:7B:FA:6A:13:A9:4D:41:91:0D:F0:05:55:85:B9
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8Xela-Mee_pqE6lNQZEN8AVVhbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.132.60.0/22
93.94.140.0/24
93.94.142.0/24
95.169.196.0/24
95.169.202.0/24
185.1.156.0/24
185.243.213.0/24
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
76:a7:4e:37:8b:49:d0:fc:31:e8:41:c6:cf:4c:9d:66:72:c5:
97:90:7e:f5:33:8d:1b:ed:e6:24:b6:38:ec:4c:f3:80:6d:ac:
b0:ce:6d:70:7a:17:d5:74:bf:94:0b:b8:af:04:4d:95:1a:6d:
e1:9e:07:5c:73:0a:1b:54:ee:a8:0c:57:5d:82:c2:e5:d3:72:
a2:a4:35:eb:47:4a:f8:30:07:8a:8c:ad:8b:53:90:e1:e3:51:
d0:41:19:6c:5b:0c:98:04:c1:80:c4:4c:08:b0:86:33:07:c8:
52:4f:70:24:5a:0e:12:14:58:a7:ff:98:4c:ad:fd:79:f7:a0:
55:46:d2:da:96:f2:d9:25:9c:e3:9d:5e:21:cc:1f:88:42:27:
21:77:df:56:1b:72:17:13:12:13:b9:6a:ab:86:22:79:1b:a6:
ec:10:89:d4:96:c7:4d:f4:e4:de:18:aa:da:9c:8a:fc:9f:80:
c4:01:b3:c9:da:a9:c4:6b:65:7a:5d:b2:99:bc:32:4a:1c:22:
b2:c1:1e:87:c9:3f:99:77:12:ef:13:ca:86:f7:25:46:e1:47:
27:83:d7:06:64:80:00:ea:42:d9:1d:58:63:b8:b8:5b:7d:6e:
9f:2a:f5:8c:15:d3:f7:d5:96:f9:6a:65:06:12:c9:e7:c9:57:
d3:69:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:39:27 2025 by rpki-client