Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/W4_dQd7C2mAGB3I24C-30P9-KR0.roa
File: W4_dQd7C2mAGB3I24C-30P9-KR0.roa (raw, json)
Hash identifier: Hqcu5oe9JYOMkNSJBN1TTQswujAkOBAd75J8FP6BT4w=
Subject key identifier: 5B:8F:DD:41:DE:C2:DA:60:06:07:72:36:E0:2F:B7:D0:FF:7E:29:1D
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0197F482E5E336D0F454C881C9557EA220EE
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/W4_dQd7C2mAGB3I24C-30P9-KR0.roa
Signing time: Thu 10 Jul 2025 13:25:08 +0000
ROA not before: Thu 10 Jul 2025 13:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.50.0.0/19 maxlen: 19
92.50.32.0/19 maxlen: 19
147.136.68.0/22 maxlen: 24
147.136.76.0/22 maxlen: 24
147.136.84.0/22 maxlen: 24
168.199.128.0/22 maxlen: 24
168.199.160.0/22 maxlen: 24
168.199.192.0/22 maxlen: 24
168.199.212.0/22 maxlen: 24
168.199.212.0/23 maxlen: 23
185.101.244.0/23 maxlen: 24
185.101.246.0/23 maxlen: 24
185.101.252.0/23 maxlen: 23
185.101.254.0/23 maxlen: 23
185.171.252.0/23 maxlen: 23
185.171.253.0/24 maxlen: 24
185.171.254.0/23 maxlen: 23
185.226.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 16:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:82:e5:e3:36:d0:f4:54:c8:81:c9:55:7e:a2:20:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 10 13:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b8fdd41dec2da6006077236e02fb7d0ff7e291d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:f3:98:d1:39:05:b6:6b:bc:60:b1:38:ba:
45:01:31:47:46:47:b4:db:6f:fc:a2:c7:7c:54:cc:
22:83:71:f8:b2:65:2e:e2:30:88:b2:1c:b3:25:ea:
56:79:0d:36:6c:08:c6:4d:7f:fa:da:d8:f1:f0:cb:
60:8d:19:fc:ec:c3:ab:4b:0b:57:53:e3:d2:4c:97:
12:d7:1d:ac:1e:6f:c0:05:12:05:2e:ef:82:e8:a0:
bd:2f:7b:01:bb:5e:54:85:c3:da:8e:e6:ad:f5:0f:
94:69:45:4f:f3:83:1c:b5:e7:e9:26:14:fc:e2:a9:
28:08:66:bf:d2:8b:a2:5d:77:0c:ef:22:05:db:50:
e0:d1:47:61:eb:ee:de:a7:f3:c6:26:3e:f8:a7:12:
12:e0:8b:e4:90:c8:42:c0:4a:9f:3d:16:c6:2e:fc:
3d:d0:f8:75:78:8c:fa:52:e0:d7:f4:62:4e:5a:d4:
87:19:5c:3f:22:7d:f2:47:73:6b:03:8e:c4:4a:46:
4f:9a:80:31:0a:9c:f9:ef:2e:cc:1c:2b:b1:a2:d1:
cc:55:dd:92:f5:5a:cd:e0:49:2d:a3:e7:8b:88:c1:
58:91:6a:83:d1:61:67:57:e4:7b:59:73:39:48:25:
f0:df:1f:20:8c:f4:53:78:db:72:0f:25:c7:a1:04:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:DD:41:DE:C2:DA:60:06:07:72:36:E0:2F:B7:D0:FF:7E:29:1D
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/W4_dQd7C2mAGB3I24C-30P9-KR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.68.0/22
147.136.76.0/22
147.136.84.0/22
168.199.128.0/22
168.199.160.0/22
168.199.192.0/22
168.199.212.0/22
185.101.244.0/22
185.101.252.0/22
185.171.252.0/22
185.226.204.0/23
Signature Algorithm: sha256WithRSAEncryption
38:61:6c:7f:74:d3:ed:a0:14:23:dd:3c:7e:e4:94:82:76:5c:
f1:ae:0f:61:5b:b6:76:d3:8d:c8:0f:6e:6f:d5:d8:28:8d:b4:
44:27:a3:97:94:cd:4f:ac:ab:f0:05:30:68:cd:ad:d4:10:7a:
80:de:0d:6d:3b:ca:f0:b7:c5:1a:d9:3f:a5:f2:d7:5a:05:a9:
30:ed:2b:a7:42:2d:0f:f5:80:3f:dd:ab:06:36:e8:41:3e:3d:
b8:5f:3f:9b:28:c4:c5:cb:ff:7f:65:97:7b:b7:c8:38:3c:f7:
f2:5c:db:86:3d:51:64:19:cd:13:c1:48:39:99:a8:dd:ae:67:
9d:f9:ce:17:24:42:76:b5:cb:d1:f6:d0:f9:ff:20:61:3c:32:
13:29:a4:4d:39:e8:e4:5b:2e:99:1c:5f:a0:83:d5:43:57:f7:
83:4f:11:cb:df:34:c9:42:98:a1:f7:30:59:ce:21:cb:d0:e6:
db:70:f2:00:53:d1:db:dd:35:3d:10:a2:25:44:9a:2d:7f:51:
f1:5f:2f:fe:3b:24:fd:a4:cb:88:45:49:94:d7:50:70:2e:27:
aa:ff:e3:e8:80:e7:a3:6d:4d:b0:28:75:bc:f0:9e:ba:1b:c3:
dd:f2:a4:0a:6d:df:09:e5:bd:1d:01:5c:e9:3a:52:61:f8:7b:
69:ec:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:34:43 2025 by rpki-client