Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa
File: IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa (raw, json)
Hash identifier: /ne3uHIaKrP56Ewsozlm4hMMf/E0GgsFtxRU9KESn98=
Subject key identifier: 20:E5:23:4F:EC:38:36:7B:50:EA:62:DE:D7:1C:F1:58:A1:9A:EA:F6
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01991A3D398A4014411D2A4C6B4C4F320DBB
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa
Signing time: Fri 05 Sep 2025 14:17:23 +0000
ROA not before: Fri 05 Sep 2025 14:17:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60246
IP address blocks: 80.72.20.0/23 maxlen: 32
80.72.24.0/23 maxlen: 32
85.198.120.0/21 maxlen: 32
92.118.72.0/23 maxlen: 32
95.174.96.0/20 maxlen: 32
95.174.112.0/21 maxlen: 32
95.174.120.0/24 maxlen: 32
95.174.123.0/24 maxlen: 32
95.174.124.0/22 maxlen: 32
178.212.139.0/24 maxlen: 32
178.248.0.0/22 maxlen: 32
185.9.184.0/24 maxlen: 32
185.9.186.0/23 maxlen: 32
185.230.240.0/23 maxlen: 32
185.230.242.0/24 maxlen: 32
2a00:8740::/46 maxlen: 128
2a00:8740:10::/44 maxlen: 128
2a00:8740:20::/44 maxlen: 128
2a00:8740:30::/44 maxlen: 128
2a00:8740:100::/48 maxlen: 128
2a00:8740:110::/47 maxlen: 128
2a00:8740:112::/48 maxlen: 128
2a00:8740:201::/48 maxlen: 128
2a00:8740:ff00::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:3d:39:8a:40:14:41:1d:2a:4c:6b:4c:4f:32:0d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Sep 5 14:17:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20e5234fec38367b50ea62ded71cf158a19aeaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:ad:e6:24:1e:37:d3:f0:03:da:6f:c9:f2:
c0:56:f9:1b:bd:d0:f7:5a:72:4d:5a:0f:e5:69:ae:
f9:50:47:7f:19:e0:8e:c2:7e:25:5e:47:3c:77:2f:
e0:62:76:b4:78:87:cd:3e:e0:a1:0e:df:4d:c0:19:
5d:e1:e7:2d:9d:f9:b6:23:ee:00:49:a5:9d:c5:79:
01:53:32:b2:f1:95:e3:8b:a8:f8:ed:4a:ae:26:40:
72:bb:5d:41:62:c7:a2:38:02:11:99:fa:69:c4:a9:
f7:a0:f6:ab:b1:b6:7a:3c:aa:49:61:0d:07:f1:18:
09:b9:9b:b5:6b:27:a0:87:a4:ed:54:cc:85:b0:e6:
ea:ca:82:0b:2f:b0:1c:aa:f8:66:53:11:1a:b5:3b:
55:29:3e:86:c3:47:e9:64:19:f2:c7:55:ee:95:81:
f7:de:9e:d8:36:71:e3:8d:b2:8d:4d:d8:e1:d3:10:
06:63:2e:0a:c6:7f:78:9d:7b:41:eb:5d:d4:1d:24:
04:8e:b0:18:a0:94:95:59:e4:83:af:15:be:e0:92:
f0:73:ad:81:5f:6d:76:05:c5:20:b4:22:07:dd:c8:
45:9d:2e:19:d6:a2:fe:81:d1:7d:08:f1:86:f8:6d:
a0:58:cd:9f:c1:8a:0a:e2:fd:64:b4:dd:90:b3:21:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E5:23:4F:EC:38:36:7B:50:EA:62:DE:D7:1C:F1:58:A1:9A:EA:F6
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/IOUjT-w4NntQ6mLe1xzxWKGa6vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.20.0/23
80.72.24.0/23
85.198.120.0/21
92.118.72.0/23
95.174.96.0-95.174.120.255
95.174.123.0-95.174.127.255
178.212.139.0/24
178.248.0.0/22
185.9.184.0/24
185.9.186.0/23
185.230.240.0-185.230.242.255
IPv6:
2a00:8740::/46
2a00:8740:10::-2a00:8740:3f:ffff:ffff:ffff:ffff:ffff
2a00:8740:100::/48
2a00:8740:110::-2a00:8740:112:ffff:ffff:ffff:ffff:ffff
2a00:8740:201::/48
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
13:3e:7b:c3:29:6c:fd:0f:80:1b:64:bc:a3:2d:05:d5:5a:33:
c0:27:5a:97:a5:ed:33:50:de:48:1a:72:3f:61:d5:34:1b:bf:
6c:4d:d7:44:fc:d3:21:78:f3:13:df:35:d6:ab:6c:61:a5:0f:
5a:60:35:25:6c:e2:64:7b:7c:8f:2c:98:fc:93:ee:2d:a5:4c:
cf:69:eb:b0:43:31:18:8c:fd:e7:2d:d8:32:ab:84:0f:a5:6a:
e0:12:48:5e:87:a3:c0:50:61:e8:6c:22:60:62:75:d8:39:a5:
25:9b:3f:c0:09:d3:53:8a:8d:7c:fc:7c:d7:bf:82:71:98:0e:
d0:62:ca:f2:88:e0:c4:a6:8c:80:1c:1a:5a:fe:ab:7b:19:1b:
de:7c:19:41:eb:45:79:09:0b:3e:b2:30:87:af:a8:0d:7f:7c:
2e:bc:50:71:2d:96:e3:15:73:6c:a7:9e:9a:a3:97:33:ad:f6:
26:94:be:c3:6d:a4:22:42:63:a4:6e:f1:42:df:cd:8e:2e:ea:
ba:69:e2:88:19:ec:a2:c6:c8:33:eb:78:1c:4f:15:d5:84:d2:
e0:8e:c5:a5:70:7b:19:50:6d:41:8d:62:57:0b:31:4a:41:9f:
e4:b3:e6:01:ad:e1:c9:2c:07:03:cf:f7:aa:20:39:a4:55:a5:
bc:5d:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:50:34 2025 by rpki-client