Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/axmcs0YwsBBvp13WSQvabhXKgO8.roa
File: axmcs0YwsBBvp13WSQvabhXKgO8.roa (raw, json)
Hash identifier: APz6BdxBlveXPEBlyV0DL9bK8BYpnxs2Kict8QvSCMo=
Subject key identifier: 6B:19:9C:B3:46:30:B0:10:6F:A7:5D:D6:49:0B:DA:6E:15:CA:80:EF
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0199187F534F8B03CB0DB97AD6AD040206BE
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/axmcs0YwsBBvp13WSQvabhXKgO8.roa
Signing time: Fri 05 Sep 2025 06:10:21 +0000
ROA not before: Fri 05 Sep 2025 06:10:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:7f:53:4f:8b:03:cb:0d:b9:7a:d6:ad:04:02:06:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Sep 5 06:10:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b199cb34630b0106fa75dd6490bda6e15ca80ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:9d:b6:d9:41:77:65:39:9b:11:d2:4d:4a:
eb:be:36:cb:0f:55:89:a6:1b:19:58:74:e0:dc:b3:
36:17:cd:52:91:d2:f5:0e:8e:4e:10:33:7c:26:c1:
48:85:a8:ba:89:c2:6a:a6:1f:d7:44:0b:2b:78:5f:
4e:57:18:08:e6:2c:d8:86:c3:4a:c2:07:f0:dc:72:
73:64:61:2a:51:dc:ce:5b:10:72:a6:f6:7a:a5:2c:
01:0d:92:da:8d:ac:46:82:df:7d:5b:ac:fc:0f:2e:
8c:98:50:d1:1f:24:38:90:6a:26:e7:bd:61:04:66:
ac:36:ab:05:7d:df:f3:36:45:95:64:75:1a:d3:00:
0f:99:9a:1d:dd:e4:35:17:65:13:87:6c:4c:5a:b3:
1b:cc:49:ee:d5:38:96:d9:02:ef:46:47:5a:7e:e0:
8c:42:6e:fb:35:99:45:83:8f:69:af:b4:4f:8d:da:
51:7f:f7:72:72:b9:8e:e9:7e:1e:04:fa:49:37:52:
04:85:52:cc:90:7b:8e:6b:cb:68:0d:3c:6e:d0:55:
e3:cb:7c:08:45:e4:08:e1:11:bc:19:bf:96:3f:e6:
71:41:ed:03:9e:36:92:eb:d2:a0:c9:b0:1d:01:23:
79:64:31:04:88:1d:d7:7a:13:57:8a:d4:b0:cd:b0:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:9C:B3:46:30:B0:10:6F:A7:5D:D6:49:0B:DA:6E:15:CA:80:EF
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/axmcs0YwsBBvp13WSQvabhXKgO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/24
91.151.82.0/24
91.151.91.0/24
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
59:5c:89:ec:25:6f:8f:35:c5:91:fc:9e:db:d1:fd:81:86:9a:
28:04:a2:f4:78:b3:2d:9a:b6:b5:ac:ef:b7:16:e0:28:9f:4b:
ff:4c:fc:c8:ad:59:59:24:c7:01:c6:9a:42:39:b3:15:6a:12:
8f:82:0f:d8:9d:0b:87:3f:d1:38:0b:7f:ad:af:5c:a2:ec:ca:
b4:b6:4b:d0:3a:35:bc:82:16:1d:ff:b4:9a:d5:c9:30:ae:3a:
db:41:ff:e1:dd:2e:19:82:b6:0f:31:0e:09:f7:a8:01:79:d3:
5d:5d:35:35:13:e1:dc:0a:b0:1d:44:c0:0f:da:8c:f7:0f:74:
e4:7a:89:fc:73:fc:ef:3c:f8:69:ba:a3:65:ad:ac:9e:4f:25:
59:14:3b:7d:4a:ee:72:b4:e8:7d:f3:95:aa:51:8a:1f:0a:a8:
9e:ca:e9:68:4e:cf:e5:97:fa:8d:d4:6b:74:b1:cc:83:ec:19:
3f:07:4f:b2:70:82:41:e6:63:39:00:53:f1:62:13:bd:6e:e9:
67:7a:0c:fd:cf:12:b6:bf:b6:6c:03:ac:bf:8b:f0:3e:ea:fe:
f4:7e:16:6a:23:e0:6d:af:13:87:47:98:08:4e:aa:2c:0d:a1:
2e:11:1b:ba:bc:4a:4d:f8:93:4a:30:82:9c:2e:94:dd:e0:3a:
e5:85:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:08:50 2025 by rpki-client