Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1xqweFZ_QWczhc7b_BrdNle8oG4.roa
File: 1xqweFZ_QWczhc7b_BrdNle8oG4.roa (raw, json)
Hash identifier: XEAwcK/OrzhM5yCQRB7MZjAAt4z2W4juPx+amgk1yRE=
Subject key identifier: D7:1A:B0:78:56:7F:41:67:33:85:CE:DB:FC:1A:DD:36:57:BC:A0:6E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0198E290E95441C894D116835A95941CF82F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1xqweFZ_QWczhc7b_BrdNle8oG4.roa
Signing time: Mon 25 Aug 2025 18:50:04 +0000
ROA not before: Mon 25 Aug 2025 18:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 31.40.194.0/24 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
185.155.100.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.124.41.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:90:e9:54:41:c8:94:d1:16:83:5a:95:94:1c:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 25 18:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d71ab078567f41673385cedbfc1add3657bca06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:fd:72:bb:84:44:22:6c:0e:e9:8a:6d:12:
a9:d6:1e:ac:eb:3d:bc:f6:dc:f4:2d:21:47:4c:1d:
8d:66:a3:b9:9b:53:54:51:b4:50:9b:06:af:74:7d:
bb:8b:82:a7:bf:6e:d8:4a:61:0d:17:4a:d4:72:cd:
03:57:c3:6b:ac:13:61:d4:0c:c9:00:be:15:5d:91:
eb:ff:b8:90:a8:52:03:b4:d0:ab:ce:9a:03:e5:c7:
0c:fd:3c:2f:43:c6:95:ce:88:a2:ee:89:72:2e:9a:
8d:c8:cc:fc:a1:d6:4f:3f:d7:88:4e:5d:93:21:c5:
0f:a7:e0:1f:11:a8:d5:04:cf:66:c2:93:21:4d:40:
ab:0e:a2:42:d7:f7:10:80:09:38:0e:98:25:25:77:
fb:91:5b:a1:ed:12:69:7b:3e:a4:29:4b:49:8e:e1:
c5:16:68:8d:15:22:a6:af:41:5a:ba:6d:e9:8d:88:
ff:2c:a3:86:60:4f:b5:17:52:16:3d:dd:b8:cc:de:
3e:4f:0c:7d:50:fe:47:98:8e:14:df:10:0f:aa:1e:
8f:99:88:0e:83:0b:42:4a:b1:4e:27:89:e2:b2:6f:
dd:d3:67:f2:0f:50:96:cc:db:af:a3:f9:c4:06:8e:
19:58:2d:d3:53:9f:d8:ee:70:f3:46:6d:97:22:4d:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:B0:78:56:7F:41:67:33:85:CE:DB:FC:1A:DD:36:57:BC:A0:6E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1xqweFZ_QWczhc7b_BrdNle8oG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.194.0/24
77.83.48.0/23
86.62.53.0-86.62.54.255
91.132.126.0/23
93.177.92.0/23
95.214.244.0/22
185.155.100.0/24
193.160.74.0/23
194.53.188.0/22
194.124.41.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:7e:e7:fc:d6:60:37:9b:d9:e9:43:f6:ff:a7:61:e7:f0:63:
07:b6:da:15:bb:12:22:35:7d:83:d4:1e:cf:94:7b:d7:34:8e:
95:6f:70:d1:f0:a8:d8:de:b7:76:68:4e:09:f8:43:4b:8a:15:
a6:24:23:03:4a:bd:4f:e3:b9:aa:b3:3c:a1:c5:93:ec:bd:ac:
2b:99:0a:b0:1a:64:68:5e:72:a5:1f:9a:04:20:63:12:de:82:
df:d1:cc:1e:b4:cc:e2:94:89:ff:58:4c:48:29:a2:c1:6c:b8:
27:28:b7:5f:59:5f:cf:e3:40:5f:76:03:f6:73:55:53:14:bb:
c4:ce:f5:07:3a:34:b1:7f:da:05:77:65:e5:e7:a5:33:02:f6:
08:1b:f8:25:d1:e5:f5:88:7c:a4:aa:4f:88:e8:e9:22:66:41:
7e:fc:61:f6:36:39:50:6d:68:31:ab:ce:fe:13:9d:d0:64:10:
52:8b:6e:15:76:34:59:35:35:06:f2:d2:85:e5:d8:0a:ef:7e:
42:65:ac:13:73:f3:1b:55:0b:f8:ef:31:f5:4e:6b:fa:a4:ac:
81:54:c0:74:0a:dc:03:9c:bc:2e:1c:17:3e:71:ad:b1:c7:0b:
74:85:40:11:05:a4:77:06:4f:cd:f3:1d:43:d7:20:5b:35:1e:
d4:b7:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:21 2025 by rpki-client