Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa
File: AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa (raw, json)
Hash identifier: Cwl60Pf8FeqjdxXJ5cDfKK3o0IpaaLfb9WkIIUUlizI=
Subject key identifier: 02:30:DE:05:0B:3A:66:F2:DD:F9:74:90:E4:20:63:E2:C9:B9:C9:D8
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0199164B662C6E6B68BEDCF368874F6E8501
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa
Signing time: Thu 04 Sep 2025 19:54:24 +0000
ROA not before: Thu 04 Sep 2025 19:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.148.209.0/24 maxlen: 24
84.22.151.0/24 maxlen: 24
91.204.180.0/24 maxlen: 24
91.204.181.0/24 maxlen: 24
91.204.182.0/23 maxlen: 23
91.204.182.0/24 maxlen: 24
91.218.176.0/22 maxlen: 24
91.232.8.0/22 maxlen: 24
195.234.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:4b:66:2c:6e:6b:68:be:dc:f3:68:87:4f:6e:85:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Sep 4 19:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0230de050b3a66f2ddf97490e42063e2c9b9c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:00:2d:9d:07:a1:7c:53:b4:11:82:c0:a4:
fe:76:7c:b3:99:30:49:a4:57:2d:45:fd:a7:3f:59:
f8:63:ac:ae:34:0e:8c:6d:fe:d6:95:89:0b:90:3f:
21:4e:12:96:fa:a7:2d:d5:01:55:49:5c:ee:63:95:
1b:2d:de:4d:77:00:5d:d7:27:57:22:03:be:07:b2:
5f:fa:b0:0b:cc:67:19:a4:bd:1a:3c:3c:59:26:92:
e6:0c:72:70:27:68:9b:22:78:e7:3f:70:bc:d5:da:
78:7a:7b:fc:f1:fd:bb:a5:93:c7:f0:0c:39:81:4f:
70:19:f4:8c:6d:af:07:39:a9:01:84:c1:06:6d:c9:
f4:91:2a:d6:f3:06:31:2f:2a:5e:90:a1:cd:53:d2:
e4:bc:c3:b2:59:eb:0c:5a:e1:0e:1c:8e:dd:95:df:
fd:44:f3:4c:44:fb:07:87:45:00:74:d1:66:aa:f5:
34:20:8b:c5:79:a6:4d:29:ca:75:33:56:e6:fe:e7:
5f:e2:73:fc:2f:b2:ab:86:6b:fd:c7:f2:9e:bc:2a:
b4:b2:eb:8f:57:2d:28:37:89:5c:cc:67:84:18:b8:
e2:91:6a:38:dc:17:ae:2d:fd:93:f2:fd:b5:af:31:
bc:ea:72:c6:30:a1:d6:5e:1c:70:59:bd:32:a7:2c:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:DE:05:0B:3A:66:F2:DD:F9:74:90:E4:20:63:E2:C9:B9:C9:D8
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.209.0/24
84.22.151.0/24
91.204.180.0/22
91.218.176.0/22
91.232.8.0/22
195.234.90.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fc:2c:00:30:0f:a1:55:25:73:fe:9a:b9:57:5e:58:6d:17:
c4:00:7c:df:8f:52:f4:a7:54:8e:cd:51:6b:0f:08:cf:2b:0b:
ca:47:b1:5a:4b:98:de:3a:98:03:ea:cb:59:4f:7b:fd:b4:3c:
6f:c1:16:a4:c0:fa:e5:0e:8d:01:9c:d4:bd:3d:2a:04:59:e6:
05:53:ad:93:a1:90:05:c5:46:62:a7:fc:b6:1f:0b:09:05:27:
2c:f2:e7:9a:c2:95:2a:7f:c2:19:e4:7d:de:02:0f:84:f2:a8:
8f:e6:59:6a:9f:67:74:00:67:02:29:d2:a4:37:c3:8c:28:13:
84:a6:46:87:c7:dc:c5:76:1e:dd:8d:2e:48:a6:81:eb:52:6b:
92:a2:ca:f4:01:f4:a3:22:03:d6:9f:17:46:1b:07:ff:21:c1:
28:81:08:89:91:30:6b:d1:64:b7:42:b1:8d:5e:a0:d1:21:e3:
85:23:41:16:1e:b3:4e:c3:70:35:10:a3:90:90:80:f0:39:f4:
68:8f:7a:b2:b3:76:41:be:37:cc:b0:82:57:d8:25:4e:ab:3f:
fa:42:03:b4:3b:f2:ce:e9:5f:c8:30:2d:4e:7c:90:3d:65:a7:
b9:cc:1c:f3:a1:fd:0c:80:8e:51:45:e3:51:a2:48:e1:a2:b4:
8d:4f:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:15:53 2025 by rpki-client