Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DEEKMObjh2dv97ksxPHzfvJBIUE.roa
File: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (raw, json)
Hash identifier: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=
Subject key identifier: 0C:41:0A:30:E6:E3:87:67:6F:F7:B9:2C:C4:F1:F3:7E:F2:41:21:41
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 0198EA8D48008749C73D6A4E4E19F890C86C
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DEEKMObjh2dv97ksxPHzfvJBIUE.roa
Signing time: Wed 27 Aug 2025 08:03:04 +0000
ROA not before: Wed 27 Aug 2025 08:03:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33852
IP address blocks: 83.139.0.0/24 maxlen: 24
83.139.1.0/24 maxlen: 24
83.139.2.0/24 maxlen: 24
83.139.5.0/24 maxlen: 24
83.139.6.0/23 maxlen: 23
83.139.8.0/21 maxlen: 21
83.139.8.0/24 maxlen: 24
83.139.9.0/24 maxlen: 24
83.139.10.0/24 maxlen: 24
83.139.11.0/24 maxlen: 24
83.139.12.0/24 maxlen: 24
83.139.13.0/24 maxlen: 24
83.139.14.0/24 maxlen: 24
83.139.15.0/24 maxlen: 24
83.139.16.0/24 maxlen: 24
83.139.17.0/24 maxlen: 24
83.139.18.0/24 maxlen: 24
83.139.20.0/24 maxlen: 24
83.139.36.0/22 maxlen: 22
83.139.39.0/24 maxlen: 24
2a01:4000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:8d:48:00:87:49:c7:3d:6a:4e:4e:19:f8:90:c8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Aug 27 08:03:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c410a30e6e387676ff7b92cc4f1f37ef2412141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:35:90:54:91:a4:26:f8:a3:00:bd:af:86:
bb:c1:b0:bd:10:eb:8c:12:03:e5:f0:8c:11:11:79:
87:37:08:a2:fb:c1:00:41:84:e3:cb:02:3f:90:68:
36:6d:bd:25:f8:33:c3:1e:fc:43:4d:f0:e9:91:df:
e4:3f:14:c2:e6:c0:e2:25:6d:fc:b1:79:f9:cd:29:
14:68:18:df:c7:ec:6d:2c:ba:1b:6d:5f:64:3a:92:
2f:d5:f5:f1:d5:23:de:2f:ca:19:94:10:a8:26:e7:
89:8a:1a:06:b2:e5:c6:a3:eb:c3:e2:b0:2c:66:b8:
80:52:4e:1d:a4:bf:e6:06:58:61:49:2d:c1:29:d3:
69:1b:a5:ad:48:9d:df:59:53:8f:d7:39:d5:c4:b0:
eb:e5:40:5e:6a:ce:1e:7f:11:ba:11:42:89:3f:e0:
a9:6c:86:3e:d1:dc:2a:18:2c:9f:85:0e:10:e3:81:
5c:40:cf:4f:43:a6:68:40:d1:19:04:9e:47:0b:1b:
e2:c6:ad:64:d5:ba:bf:38:14:6a:5d:ce:98:f4:18:
f3:47:ca:83:48:45:5c:d8:e2:33:9d:d8:a3:5f:c4:
38:51:30:bc:5b:38:40:8f:6a:f0:ef:b7:b2:35:b5:
49:aa:7b:48:bd:67:db:d4:0f:4d:e1:dc:46:8d:41:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:0A:30:E6:E3:87:67:6F:F7:B9:2C:C4:F1:F3:7E:F2:41:21:41
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DEEKMObjh2dv97ksxPHzfvJBIUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.0.0-83.139.2.255
83.139.5.0-83.139.18.255
83.139.20.0/24
83.139.36.0/22
IPv6:
2a01:4000::/32
Signature Algorithm: sha256WithRSAEncryption
2b:3f:48:b9:44:02:a0:b7:1c:5e:1e:aa:40:7d:dc:bf:a3:87:
52:1b:a0:22:c7:c2:96:5d:20:5c:69:32:4d:83:64:30:c3:bb:
cf:3f:9d:fb:ab:27:37:04:e0:07:f1:84:3c:35:a4:c0:2d:9f:
a1:ab:3e:93:2b:3f:a9:53:20:22:35:c1:9d:14:74:0f:fd:18:
80:b0:25:d1:17:a8:e2:60:08:89:e5:97:b8:fb:f2:16:8c:d0:
85:b5:78:64:f9:1e:ac:a7:37:13:1d:79:d1:1e:c5:b6:35:c4:
30:aa:fb:1e:39:d6:19:fc:f6:19:72:c7:09:08:aa:a9:4e:8f:
f9:ad:64:b8:ff:36:e1:c1:7b:c2:17:f5:e5:98:38:20:3b:d5:
b7:30:17:01:26:da:cc:5b:11:dd:40:f5:6e:d5:d6:17:58:c5:
8b:e4:ec:97:0a:2a:f9:12:94:29:40:72:ba:ea:3d:2f:54:d3:
38:1a:80:d8:e8:97:5d:0a:70:68:ad:da:3a:92:0b:2f:48:19:
d8:8f:59:93:5c:1f:99:c8:91:57:94:cb:ce:78:4f:e5:cd:8f:
d0:91:8f:d5:e2:5a:7e:9f:06:85:68:64:56:9f:ee:40:3d:71:
f5:82:f7:5e:e7:19:ba:e5:ae:c2:22:0e:3b:dc:5a:31:69:2b:
c9:f9:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:57:27 2025 by rpki-client