Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa
File: 5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa (raw, json)
Hash identifier: 8fAOJFpGS1CZZLyn3E+heU8rt8qm4ywsWgdel84Aa/Q=
Subject key identifier: E6:23:2E:C1:62:3C:5D:A1:21:45:95:D2:EE:BE:D3:72:2B:70:F4:F4
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 0199A3FC452FECADB5D8F72D0068F695AF8A
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa
Signing time: Thu 02 Oct 2025 08:14:02 +0000
ROA not before: Thu 02 Oct 2025 08:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 46.254.176.0/21 maxlen: 24
93.94.32.0/21 maxlen: 24
93.94.32.0/24 maxlen: 24
93.94.33.0/24 maxlen: 24
93.94.34.0/24 maxlen: 24
93.94.35.0/24 maxlen: 24
93.94.37.0/24 maxlen: 24
93.94.38.0/24 maxlen: 24
93.174.64.0/21 maxlen: 24
158.58.136.0/21 maxlen: 24
185.34.84.0/22 maxlen: 24
185.84.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:fc:45:2f:ec:ad:b5:d8:f7:2d:00:68:f6:95:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Oct 2 08:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6232ec1623c5da1214595d2eebed3722b70f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:fd:e0:4b:f0:03:be:cb:13:93:fd:d6:3d:
32:02:a2:01:d4:9f:c5:05:b4:76:77:14:bf:49:64:
c6:11:6c:3f:9c:9c:14:54:c3:5c:f2:33:45:01:cf:
c6:d7:cf:41:fe:2f:10:62:c0:bb:2c:9f:d0:8f:d4:
67:a8:7a:0d:a8:a5:0d:f6:92:c2:05:94:f4:55:98:
7f:e5:b5:99:a2:e7:55:72:fd:de:e4:e7:12:a7:ec:
34:a8:d1:d2:c6:c1:23:89:5c:dc:b5:e9:29:df:ed:
ae:c9:e0:69:fd:1c:b2:ee:3a:9b:34:7f:65:4a:31:
ac:c2:f5:ff:fa:08:75:d4:45:1f:fe:aa:a7:e0:2a:
16:52:ff:58:c7:5d:50:d2:b6:a7:62:6c:c5:5e:73:
e5:09:13:e6:de:c6:38:02:7d:50:99:c4:3d:4c:41:
36:6c:a2:3f:c0:5e:ec:92:98:33:2c:a4:18:bb:46:
a8:95:75:cb:5f:5d:de:ce:78:1b:89:5f:d1:cf:9e:
b1:ff:d8:ce:9d:d5:e4:70:91:3b:57:9e:c2:4f:74:
b1:71:b0:8d:43:43:a2:69:8e:94:35:40:ea:3b:c1:
cd:c4:49:51:7c:df:fd:6a:e0:77:9f:c3:c2:c7:c3:
cf:0d:8b:d6:5a:ef:0d:68:0f:62:5b:22:e0:36:a1:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:2E:C1:62:3C:5D:A1:21:45:95:D2:EE:BE:D3:72:2B:70:F4:F4
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.176.0/21
93.94.32.0/21
93.174.64.0/21
158.58.136.0/21
185.34.84.0/22
185.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:bb:4e:1f:8c:79:23:7e:9e:bc:ca:a8:d1:b4:15:34:88:f4:
f1:75:5b:2c:8e:a8:f5:95:bb:56:dd:73:7a:2f:a5:23:1c:6a:
31:75:a6:7c:71:71:47:17:d2:75:39:f0:45:cc:40:c1:87:36:
65:33:99:a8:f0:ba:7d:b0:43:24:84:e8:94:79:66:ff:78:f9:
8b:c7:2c:6c:ee:c1:6e:d4:1a:14:03:da:33:20:41:2a:30:d8:
d9:99:d7:e4:25:90:14:fa:0d:2f:83:39:a2:7e:c0:c8:33:87:
9e:f4:d6:38:31:fc:cc:17:ca:2b:d8:44:ff:f4:6a:3a:b9:01:
19:5e:c8:78:79:09:1d:6c:b8:36:e1:d8:93:8d:8d:d5:d4:01:
be:ce:c4:a1:3c:0a:67:38:b3:64:dc:75:ff:a3:32:7d:4b:83:
81:9a:c1:f4:f9:89:40:ed:43:25:11:60:39:6b:cd:ff:92:b3:
e8:8a:33:5c:84:3b:33:e4:46:ce:4c:e9:12:f7:61:1a:06:89:
45:b7:84:15:fe:ed:24:ef:a6:c9:fd:6a:9d:c0:7e:fd:10:4b:
fb:46:f3:63:02:53:3f:25:14:10:35:f7:f2:d4:3f:15:60:2e:
b3:98:6b:9c:57:8e:71:61:02:be:78:af:0f:5a:93:1f:96:64:
73:40:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:00 2025 by rpki-client