Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/FL9fu1OvmoFGfhkDWCYg6qk3FZw.roa
File: FL9fu1OvmoFGfhkDWCYg6qk3FZw.roa (raw, json)
Hash identifier: 4qo1m7CfLoe2e1/s3slGLhDBLmvad/IFz+DUbL4c5ro=
Subject key identifier: 14:BF:5F:BB:53:AF:9A:81:46:7E:19:03:58:26:20:EA:A9:37:15:9C
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 0196DD90B50AE6AF82A1C42716FC9CC00C3A
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/FL9fu1OvmoFGfhkDWCYg6qk3FZw.roa
Signing time: Sat 17 May 2025 09:26:10 +0000
ROA not before: Sat 17 May 2025 09:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 45.142.180.0/24 maxlen: 24
45.142.181.0/24 maxlen: 24
45.142.182.0/24 maxlen: 24
45.142.183.0/24 maxlen: 24
45.153.32.0/24 maxlen: 24
45.153.35.0/24 maxlen: 24
92.246.84.0/24 maxlen: 24
92.246.85.0/24 maxlen: 24
92.246.86.0/24 maxlen: 24
146.19.169.0/24 maxlen: 24
195.62.46.0/24 maxlen: 24
2a0d:c2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:90:b5:0a:e6:af:82:a1:c4:27:16:fc:9c:c0:0c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: May 17 09:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14bf5fbb53af9a81467e1903582620eaa937159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:f6:84:1b:f1:55:01:4b:d5:92:44:0b:c3:
fe:39:85:07:1c:fb:fc:72:a6:41:44:e5:d8:15:02:
1a:9d:e1:44:a0:29:21:85:98:8a:06:de:a2:45:f8:
95:97:b0:5a:61:ff:3e:fc:8b:a4:6f:e4:20:13:65:
49:79:8c:ce:c4:57:3a:d3:10:06:e4:ae:fe:ac:80:
f4:9b:f1:37:44:89:5e:4e:fc:45:1b:e4:f0:f1:9a:
6c:b3:b8:3f:24:21:0f:20:a1:15:37:dd:b7:37:ee:
86:90:16:34:bc:d8:77:50:00:9c:11:b1:28:6f:d0:
53:61:15:b1:73:ec:63:ed:7c:81:48:5c:5a:58:2f:
cd:67:20:c1:de:a3:b8:54:b1:52:5f:8a:e6:28:ab:
b6:c0:c2:7d:23:74:4a:6e:69:b0:08:f3:37:db:c1:
6a:2a:c7:a8:f7:bc:de:81:76:24:7d:2f:ee:71:df:
e3:00:b2:27:44:32:79:7e:67:a0:50:4f:bf:5b:a7:
6e:e7:4d:69:8a:ae:b1:58:05:4d:56:1c:02:b7:d0:
38:5b:03:b8:c0:da:76:77:c8:0b:43:f5:ff:2a:03:
7e:dd:8b:33:55:62:d1:06:54:21:97:1e:3b:13:83:
58:2e:ff:ee:59:5a:e1:cf:a2:70:e4:9f:87:92:70:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:5F:BB:53:AF:9A:81:46:7E:19:03:58:26:20:EA:A9:37:15:9C
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/FL9fu1OvmoFGfhkDWCYg6qk3FZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.180.0/22
45.153.32.0/24
45.153.35.0/24
92.246.84.0-92.246.86.255
146.19.169.0/24
195.62.46.0/24
IPv6:
2a0d:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:88:c2:c0:ab:e6:43:ce:ca:19:9f:bc:8e:9d:00:33:d2:93:
55:6a:1d:b3:f3:e3:71:e5:ee:5c:c8:b1:94:4d:8c:30:b6:c6:
40:27:24:bc:a0:36:3a:d5:5b:c7:67:38:4b:07:cf:5c:2f:66:
8c:9c:d1:3b:10:eb:a1:d6:4f:af:7f:1e:4c:6f:a1:f3:9a:19:
62:2e:96:df:ea:dd:15:b6:cf:11:3a:fc:f3:4b:e7:97:12:7c:
b1:28:b8:40:33:a9:e5:fb:b0:83:be:5b:89:09:26:15:97:6f:
c8:04:9a:31:13:08:eb:14:56:b1:ff:55:d0:b7:48:8f:ac:66:
54:2d:19:94:12:cb:a7:2d:b1:b7:ae:3b:8c:cd:7f:bb:4d:2e:
5e:db:60:9a:f3:bd:3f:90:08:ec:0b:55:2e:a6:ce:ea:34:1c:
3c:34:21:ea:6a:fb:36:cd:97:db:3c:f2:c0:6f:83:32:3a:f4:
d4:4f:43:b4:e5:39:bb:e7:0a:b2:de:d1:bc:fc:9c:56:50:ff:
e2:fd:cd:f1:55:78:ae:d3:d3:ed:6d:b2:ea:16:53:0c:fa:42:
e0:d8:2e:1d:42:64:9f:23:b9:6e:72:2a:34:a3:6f:bf:d1:b0:
ff:92:b4:31:d0:9d:00:31:56:75:8d:30:b5:ce:3a:41:78:fa:
01:5a:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:34:51 2025 by rpki-client