Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/_R2-unRLTVoARNA84wK9QwIRcHg.roa
File: _R2-unRLTVoARNA84wK9QwIRcHg.roa (raw, json)
Hash identifier: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=
Subject key identifier: FD:1D:BE:BA:74:4B:4D:5A:00:44:D0:3C:E3:02:BD:43:02:11:70:78
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 0196F89D84DF0BE9EE0E83632590B9273178
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/_R2-unRLTVoARNA84wK9QwIRcHg.roa
Signing time: Thu 22 May 2025 15:29:54 +0000
ROA not before: Thu 22 May 2025 15:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8612
IP address blocks: 84.220.0.0/15 maxlen: 15
84.220.0.0/16 maxlen: 24
84.221.0.0/16 maxlen: 24
94.34.0.0/16 maxlen: 24
94.35.0.0/16 maxlen: 24
185.38.136.0/22 maxlen: 22
193.43.2.0/24 maxlen: 24
217.73.208.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:9d:84:df:0b:e9:ee:0e:83:63:25:90:b9:27:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: May 22 15:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd1dbeba744b4d5a0044d03ce302bd4302117078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:b0:d0:c6:af:8d:05:8f:e1:8e:83:b0:60:
93:5d:54:88:c7:46:8c:11:d2:5e:81:eb:4b:bf:88:
2f:bb:ac:80:40:03:0e:aa:c7:7d:e7:fe:bd:8e:90:
ff:b7:de:e8:2d:ea:1a:3d:42:60:70:69:6c:6e:18:
63:81:a1:54:97:7b:6c:cf:ba:85:65:9e:d7:97:3b:
8f:9e:7c:e6:2a:c1:78:60:65:6d:84:51:ca:d0:2a:
ae:cd:aa:db:26:74:1f:32:c8:3b:e4:76:25:d7:7e:
c5:d6:d4:07:58:06:ea:9a:eb:9b:37:8f:5e:9e:80:
6c:7b:4a:7d:05:82:85:ba:f0:27:e4:a9:d0:77:50:
97:c0:02:63:0a:23:ce:05:b1:8b:2a:35:98:17:37:
9e:a6:3d:8a:81:cd:e6:52:86:88:39:bd:56:1b:59:
f6:2d:2a:ab:f6:91:85:af:60:63:25:e1:7c:a1:7a:
0d:bc:fb:44:4c:c8:e1:7a:d3:e1:c7:4e:45:93:da:
d6:3e:c8:28:7e:e4:63:0b:9d:2f:32:27:5b:7c:80:
8d:9b:3b:a1:74:05:94:af:13:4e:55:38:2b:0d:92:
4e:38:49:c6:a8:4c:28:23:ff:ce:73:88:6e:cb:c1:
04:05:38:74:29:f5:ed:5a:23:67:6d:db:29:90:86:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:BE:BA:74:4B:4D:5A:00:44:D0:3C:E3:02:BD:43:02:11:70:78
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/_R2-unRLTVoARNA84wK9QwIRcHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.220.0.0/15
94.34.0.0/15
185.38.136.0/22
193.43.2.0/24
217.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
19:f5:48:a6:3b:bb:fa:09:00:82:c7:a6:05:3f:8f:0e:7e:0e:
7f:f3:31:24:11:ea:94:62:88:c2:fe:e7:6d:93:e4:ac:1d:23:
5c:39:f5:ca:b8:60:1c:c4:26:56:2e:95:4c:bc:f6:d5:ea:6e:
f9:fa:0c:7a:93:38:c0:b7:9a:3f:a1:1a:1f:a3:2d:29:08:76:
99:05:4f:67:6b:68:7a:9f:fd:5d:26:92:54:cd:29:f0:e5:80:
c1:24:99:e3:65:53:b5:e7:e1:a1:d4:8d:42:c5:69:74:bd:45:
ae:54:cd:99:10:6b:4d:bb:87:fc:50:1a:77:a2:bf:85:a9:f9:
67:57:01:e9:7c:64:d9:bb:84:c6:96:e0:f0:6a:97:18:12:0d:
d7:96:15:86:82:a8:16:48:ae:b2:2d:95:ff:1e:99:0e:fb:22:
d9:72:e7:cd:46:51:bf:9c:45:f5:62:ef:6a:d2:2c:72:88:ec:
79:d1:69:9c:dc:8c:64:ef:bc:cd:af:5b:c0:40:7f:dd:20:6d:
79:09:c7:dd:a4:80:08:91:58:6c:03:5d:91:27:5d:73:f9:49:
f2:9b:65:0b:4f:8b:0d:7f:58:e6:03:68:b5:6c:90:5e:86:92:
1b:b6:44:df:d4:29:7c:f1:1e:b6:67:cb:1b:50:a5:b3:c5:a7:
b4:b8:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:15 2025 by rpki-client