Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s4dvNuymeWaTrR6WPurEb6x7WtM.roa
File: s4dvNuymeWaTrR6WPurEb6x7WtM.roa (raw, json)
Hash identifier: 3ugqAwQiwvAKQ0QNlc4KeINnE/I0856BiNUqlBAw6Q8=
Subject key identifier: B3:87:6F:36:EC:A6:79:66:93:AD:1E:96:3E:EA:C4:6F:AC:7B:5A:D3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0197D49597C46DACF567B497B99C80A19D13
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s4dvNuymeWaTrR6WPurEb6x7WtM.roa
Signing time: Fri 04 Jul 2025 08:37:42 +0000
ROA not before: Fri 04 Jul 2025 08:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:95:97:c4:6d:ac:f5:67:b4:97:b9:9c:80:a1:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 4 08:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3876f36eca6796693ad1e963eeac46fac7b5ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:21:a3:0e:e1:5b:6f:c3:7c:3b:b0:21:81:74:
16:e4:97:0b:fb:15:54:12:cf:12:c6:d3:bd:86:9b:
57:f1:a8:11:36:e0:70:cc:3c:84:2f:75:75:9b:44:
6e:5b:27:ac:4b:37:b4:ec:ba:c2:17:18:9a:9e:dd:
0b:f4:7c:6e:09:03:75:8e:d6:87:74:c2:52:ff:ba:
31:1e:be:41:6f:67:d7:9e:c1:bd:75:b1:3a:63:f7:
f5:67:fc:1a:53:f6:57:8e:cc:b2:b8:81:a7:95:7b:
94:ee:41:77:ef:11:01:72:8a:61:3f:32:60:29:50:
1b:6b:32:6a:f6:d1:f4:57:0b:47:64:b0:36:89:6e:
72:de:99:59:c0:00:d4:d7:10:09:9a:74:18:25:6e:
69:60:51:c4:8d:5c:2f:a8:05:da:92:88:27:b5:45:
79:b0:d9:f3:61:6f:ec:87:8a:cf:f0:c9:de:97:a5:
67:5a:2c:52:77:e5:a3:6f:e1:e7:8d:20:fb:2e:78:
a9:da:c6:51:9b:83:40:cf:02:7e:e0:7d:33:d5:87:
bd:60:3f:af:08:05:4d:b4:90:34:53:d6:23:2a:9a:
77:40:51:09:36:3d:c1:c6:a1:93:70:ec:8e:de:95:
ed:2d:8d:37:55:98:ce:ca:81:16:58:68:b3:4a:ae:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:6F:36:EC:A6:79:66:93:AD:1E:96:3E:EA:C4:6F:AC:7B:5A:D3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s4dvNuymeWaTrR6WPurEb6x7WtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.50.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
167.17.183.0-167.17.188.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:ba:2b:cf:fe:7e:b9:5f:22:60:f0:72:b9:b4:3a:38:18:cb:
bc:ae:ed:7d:88:23:0a:de:2d:f6:84:11:e8:b7:e7:ea:b9:80:
ce:17:d3:c8:c0:90:f2:1d:40:1b:0d:d3:e2:50:bd:1d:42:e4:
56:f9:65:db:10:f4:03:88:a9:fd:0d:52:54:dd:6c:94:2b:e3:
42:ac:71:15:ab:07:8b:e2:b4:c7:cc:4c:66:4d:02:c1:01:aa:
27:dd:74:d3:8b:12:b0:b2:64:d0:23:54:fe:78:20:25:5a:17:
72:89:df:9b:27:8c:d9:f6:b6:f7:00:7b:ff:d2:bc:ba:9e:9b:
e5:c1:d3:8b:98:96:27:94:72:a5:9a:ce:55:07:80:63:a6:12:
73:59:cc:0b:30:e4:5b:ad:7a:5f:6a:7a:c8:f4:b5:4f:f1:fb:
e7:70:ee:91:f7:e3:23:bf:c9:ef:ea:6c:65:82:2d:dd:e4:67:
ea:25:27:92:7a:8f:82:d6:f9:2c:b8:d5:d1:a9:d6:72:f4:37:
07:76:42:af:f9:1c:3b:5d:d7:aa:7c:46:88:af:ff:f2:21:6b:
5b:56:23:02:70:a2:a9:ac:e0:e5:e1:6e:3b:bf:3d:bb:4c:ba:
03:9d:46:70:91:08:3b:39:da:c8:69:06:4f:b0:86:70:0e:e0:
38:9f:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 01:29:07 2025 by rpki-client