Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3VD3KDm1-ZwXfutJ3IomSxv6HLA.roa
File: 3VD3KDm1-ZwXfutJ3IomSxv6HLA.roa (raw, json)
Hash identifier: 8H4oM5vxaCaQtr2/zuYuK25q47MV8AArFt9zfND1WaQ=
Subject key identifier: DD:50:F7:28:39:B5:F9:9C:17:7E:EB:49:DC:8A:26:4B:1B:FA:1C:B0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0197CA176E6CD877329CCD681D4AD4AE82D8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3VD3KDm1-ZwXfutJ3IomSxv6HLA.roa
Signing time: Wed 02 Jul 2025 07:43:42 +0000
ROA not before: Wed 02 Jul 2025 07:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50670
IP address blocks: 81.21.8.0/22 maxlen: 22
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.65.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
176.241.68.0/24 maxlen: 24
176.241.69.0/24 maxlen: 24
176.241.70.0/24 maxlen: 24
176.241.71.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 04:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:17:6e:6c:d8:77:32:9c:cd:68:1d:4a:d4:ae:82:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 2 07:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd50f72839b5f99c177eeb49dc8a264b1bfa1cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3c:d4:06:5b:fd:c7:f7:90:4a:0e:7c:50:5f:
9a:5f:1d:e6:e4:fc:b8:47:c4:a1:12:0a:c5:bc:b4:
7d:5c:4b:ad:59:a0:cd:6f:54:77:fd:3f:52:c0:98:
c1:da:68:8a:33:63:90:70:76:c6:48:41:18:cf:ff:
41:3c:d0:70:16:49:5e:ad:ec:e3:4b:c4:35:f9:d1:
b8:61:cc:0a:1c:c7:3b:f9:5a:db:ec:8f:a3:6c:01:
0f:8c:a1:8a:f9:e3:e8:53:73:bf:71:96:7f:70:00:
65:c2:64:f5:fb:de:cc:96:4f:ac:3e:26:aa:71:48:
4f:12:0e:1e:c1:55:e5:ab:62:bc:36:c0:fc:84:3b:
e3:60:58:e1:c6:4e:5e:1a:a0:8e:78:66:b2:33:e8:
6b:d4:63:e0:44:41:77:a8:6d:ce:18:0a:43:e6:eb:
d1:3a:58:69:7a:1d:1f:3e:64:61:ce:06:bf:49:64:
32:3b:d5:06:96:7a:60:0f:fa:c6:42:ff:67:a8:2d:
a8:c9:96:b4:04:53:e4:45:b1:e1:14:49:16:28:af:
62:7b:de:15:f9:5e:c9:bd:ac:6d:dc:5e:00:fe:06:
d9:e3:25:d9:0d:2b:3d:dc:cb:92:ba:ca:2f:81:76:
0b:e4:04:01:d0:f9:1c:a7:ba:13:94:73:1d:ed:28:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:F7:28:39:B5:F9:9C:17:7E:EB:49:DC:8A:26:4B:1B:FA:1C:B0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3VD3KDm1-ZwXfutJ3IomSxv6HLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.8.0-81.21.14.255
109.237.192.0/20
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
93:c5:8b:f4:81:f3:b3:13:56:0e:e4:9d:3a:c7:a0:0b:bb:06:
a4:83:30:44:6f:c1:a9:c4:a8:36:67:05:00:81:39:78:ef:14:
4a:d0:6b:9f:db:13:7a:de:02:75:64:01:e6:e6:7e:79:12:54:
af:51:b8:13:12:e2:37:d4:53:1d:22:d3:de:65:af:c4:3d:d2:
be:b9:94:4c:a8:91:5a:03:69:c5:4c:f6:c6:ef:11:41:7c:53:
fe:7a:16:12:37:60:66:9c:a8:74:05:ca:26:00:85:78:7f:a3:
85:ed:5b:6d:24:29:8a:ea:c5:f8:2b:e8:4e:df:66:29:a1:4f:
51:42:a3:93:6b:bd:ad:a5:08:ab:33:10:3c:8b:c2:af:12:44:
f1:91:4a:95:3a:b8:56:1e:5a:b1:72:c7:e5:a5:01:ec:5f:03:
28:41:fe:78:73:bf:89:04:da:d5:82:76:b5:6e:f5:c1:3e:17:
6a:72:41:d3:87:9b:46:f2:30:af:38:2c:c7:99:92:01:00:a9:
0c:32:da:be:ed:bd:e1:fc:21:2a:1f:a5:09:e7:1b:69:b1:4c:
da:24:a7:4c:78:9a:df:7d:6e:ae:74:7d:d8:ae:eb:2a:01:75:
c6:1b:df:0a:41:64:07:d4:88:22:11:f4:e4:16:c1:a2:dc:7f:
16:08:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:56:07 2025 by rpki-client