Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Fhw6rDvK-EpkH1NrC2h_ewR3pQM.roa
File: Fhw6rDvK-EpkH1NrC2h_ewR3pQM.roa (raw, json)
Hash identifier: EVe8LbqKxm6DCm2LK8ufkvhi3Emu/5P3TM8Kz5KLl4I=
Subject key identifier: 16:1C:3A:AC:3B:CA:F8:4A:64:1F:53:6B:0B:68:7F:7B:04:77:A5:03
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019914A72C1DDA2020FEAEB7500884C403A6
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Fhw6rDvK-EpkH1NrC2h_ewR3pQM.roa
Signing time: Thu 04 Sep 2025 12:15:24 +0000
ROA not before: Thu 04 Sep 2025 12:15:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9002
IP address blocks: 2.58.98.0/24 maxlen: 24
31.128.32.0/22 maxlen: 24
37.233.82.0/23 maxlen: 24
37.233.84.0/23 maxlen: 24
37.233.86.0/24 maxlen: 24
45.92.174.0/24 maxlen: 24
45.130.212.0/22 maxlen: 24
45.137.188.0/24 maxlen: 24
45.145.5.0/24 maxlen: 24
45.145.163.0/24 maxlen: 24
45.145.168.0/24 maxlen: 24
45.152.87.0/24 maxlen: 24
45.156.20.0/24 maxlen: 24
46.173.20.0/24 maxlen: 24
77.73.233.0/24 maxlen: 24
77.73.235.0/24 maxlen: 24
77.73.238.0/24 maxlen: 24
83.222.20.0/23 maxlen: 24
90.156.254.0/23 maxlen: 24
91.218.142.0/23 maxlen: 24
185.77.231.0/24 maxlen: 24
194.36.208.0/24 maxlen: 24
194.113.209.0/24 maxlen: 24
212.74.231.0/24 maxlen: 24
213.139.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:a7:2c:1d:da:20:20:fe:ae:b7:50:08:84:c4:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Sep 4 12:15:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=161c3aac3bcaf84a641f536b0b687f7b0477a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:4c:dc:29:9f:37:b1:ea:7f:a8:f4:47:62:
6a:e1:1f:40:2d:ea:b2:62:7e:01:08:ae:b3:ef:70:
5c:fb:66:88:33:5e:a0:a4:3b:85:bc:f3:e5:44:eb:
8e:8e:50:14:5d:c3:13:c5:6e:13:3b:c9:a4:dc:3e:
27:f1:47:6d:d6:99:73:f0:ad:5e:57:23:04:39:99:
7f:de:0f:ec:1b:5e:78:9c:28:c2:59:a6:3e:60:75:
b5:ed:e8:96:cf:8f:06:aa:2b:07:ac:47:eb:82:b6:
82:b1:bd:59:b4:02:0e:a6:c1:71:5e:dd:32:bb:b2:
56:5b:8f:04:7b:4e:d0:45:04:41:08:19:3d:d0:f0:
ab:39:2b:5c:64:4b:b4:07:9d:f1:19:04:ef:7b:fd:
19:d7:aa:4a:42:2c:b0:cb:c4:ba:9a:0a:71:98:59:
cb:6f:f5:c3:1f:db:01:45:bf:a8:99:3c:90:20:8a:
5f:00:82:af:5d:82:ef:5b:0b:2e:ee:7b:3f:80:53:
1d:f5:d3:69:62:b5:f3:73:fb:d4:f8:3e:42:a5:c7:
ec:3a:c9:f6:7b:39:c7:5c:b1:0e:d9:73:36:50:5c:
2b:b9:f9:ee:b5:11:fc:d9:bb:e9:9c:38:d4:0f:a0:
bd:9f:bf:8b:21:84:52:c1:43:0c:c2:ae:3e:50:e7:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:3A:AC:3B:CA:F8:4A:64:1F:53:6B:0B:68:7F:7B:04:77:A5:03
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Fhw6rDvK-EpkH1NrC2h_ewR3pQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.98.0/24
31.128.32.0/22
37.233.82.0-37.233.86.255
45.92.174.0/24
45.130.212.0/22
45.137.188.0/24
45.145.5.0/24
45.145.163.0/24
45.145.168.0/24
45.152.87.0/24
45.156.20.0/24
46.173.20.0/24
77.73.233.0/24
77.73.235.0/24
77.73.238.0/24
83.222.20.0/23
90.156.254.0/23
91.218.142.0/23
185.77.231.0/24
194.36.208.0/24
194.113.209.0/24
212.74.231.0/24
213.139.229.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:8b:47:fb:e6:cb:d5:5d:24:34:3f:d7:dd:c0:c5:36:38:
00:fd:4f:8b:1a:dc:58:54:de:4e:a3:19:0d:77:71:32:cc:07:
b0:62:20:dd:9e:1a:53:8e:51:7b:b5:29:a9:b9:5c:bf:b6:6d:
8e:1b:80:7b:8a:f6:d6:03:04:fb:3a:62:71:ae:41:06:f7:5b:
6b:99:95:72:d1:2c:90:56:a6:db:5c:da:80:68:ef:33:84:8d:
4f:b8:bd:f6:0f:e0:92:9e:4e:82:6c:65:63:42:5c:3e:3b:75:
cd:20:4e:b6:87:ec:b4:db:e1:8b:8f:ab:f3:9b:3c:6f:b6:0e:
38:8c:b5:8a:5f:ad:28:83:7c:b4:5d:df:5b:79:60:f8:2a:10:
53:14:b3:e1:f8:7d:b5:0d:4a:d0:0c:58:c8:aa:7a:5c:b7:de:
2b:e1:58:12:25:71:e3:88:0e:d4:4e:5f:0d:f3:35:0c:1f:e6:
7a:d0:61:a0:92:88:31:e4:86:37:66:02:46:3f:ae:e9:86:42:
9f:4c:02:06:09:bf:d3:b8:94:64:5f:30:e1:32:b7:9c:68:32:
7d:72:c0:38:1e:bc:bc:45:8d:f6:5a:9e:c3:eb:c8:4c:da:e7:
23:6d:3b:cc:2a:d8:0a:9b:85:8e:75:34:ed:75:98:54:27:84:
61:70:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 22:21:15 2025 by rpki-client