Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/RlIkcF8LuODaxIujEnNWDk02pSo.roa
File: RlIkcF8LuODaxIujEnNWDk02pSo.roa (raw, json)
Hash identifier: kY34QFN9p9fQ3/mWC+xr3JVSNAC8iRBd/0Q4LhkJ0WQ=
Subject key identifier: 46:52:24:70:5F:0B:B8:E0:DA:C4:8B:A3:12:73:56:0E:4D:36:A5:2A
Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Certificate serial: 019A16DA184D07BD3649797B645E6F665D6B
Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/RlIkcF8LuODaxIujEnNWDk02pSo.roa
Signing time: Fri 24 Oct 2025 15:33:02 +0000
ROA not before: Fri 24 Oct 2025 15:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213691
IP address blocks: 83.143.152.0/23 maxlen: 23
91.213.213.0/24 maxlen: 24
185.238.196.0/23 maxlen: 23
193.106.232.0/22 maxlen: 22
217.72.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:da:18:4d:07:bd:36:49:79:7b:64:5e:6f:66:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9
Validity
Not Before: Oct 24 15:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=465224705f0bb8e0dac48ba31273560e4d36a52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:6c:23:a6:6b:02:7c:4d:02:31:03:b9:bf:
e9:10:52:9f:d5:42:ee:e6:5a:74:9c:e9:7e:d1:ff:
b0:89:6e:3d:8e:56:34:e4:27:a7:3b:c0:54:e4:c5:
2e:16:be:b2:63:2f:98:0a:a5:54:f0:62:89:b7:0a:
82:cc:ef:26:3e:53:e1:8f:31:b5:c5:dd:fe:88:46:
2a:aa:0c:dd:d1:3b:0f:8b:85:5f:e8:3d:06:a0:a7:
f5:32:37:78:7d:5f:37:20:a1:77:1f:e7:10:99:a3:
59:43:0e:ae:be:f8:69:85:d0:a1:11:c2:68:45:e3:
2c:d0:5e:01:6e:b8:8b:c4:04:0b:d2:bf:a1:cc:0e:
61:17:39:3d:47:28:40:55:dd:df:38:0f:6e:de:0f:
8b:71:17:50:05:f6:68:ff:2e:cc:31:2c:c7:c0:47:
62:63:2c:d1:b2:7a:d3:88:d6:55:f6:01:45:39:2e:
cd:29:b2:11:04:cf:7c:5e:27:aa:be:f2:ea:aa:eb:
c5:18:96:5b:8e:12:8b:78:98:68:54:a6:df:a5:7d:
93:23:36:a6:d6:53:ce:14:d3:e1:ed:6a:53:48:f7:
27:76:e2:78:ae:c1:41:5d:c9:54:52:1c:fa:70:ef:
db:d4:6e:a3:94:db:3f:db:7c:02:d1:eb:e2:07:65:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:24:70:5F:0B:B8:E0:DA:C4:8B:A3:12:73:56:0E:4D:36:A5:2A
X509v3 Authority Key Identifier:
keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/RlIkcF8LuODaxIujEnNWDk02pSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.152.0/23
91.213.213.0/24
185.238.196.0/23
193.106.232.0/22
217.72.8.0/22
Signature Algorithm: sha256WithRSAEncryption
28:45:dc:18:f1:bc:07:0c:b4:c0:3b:97:b9:4f:b0:cf:9c:7f:
46:00:d6:eb:7e:00:32:65:ee:d0:71:7d:7a:14:4b:f1:0d:49:
95:aa:d2:e5:32:88:66:d0:1f:3b:69:53:d8:19:93:64:91:ca:
98:24:52:b6:6f:a7:22:db:83:e4:c1:8e:fa:14:8c:47:a3:77:
a6:92:a7:c7:70:7e:44:53:f3:38:cd:6f:ff:c3:2e:b1:1b:82:
60:0d:17:f2:9c:fd:85:ba:e1:7c:fb:e0:51:ac:71:10:14:cb:
bf:0f:7f:58:30:c9:45:23:49:5d:17:6c:13:86:c8:e3:3e:84:
5b:2c:fa:c6:03:fb:d5:13:2b:ff:35:a2:42:30:0f:9a:88:8a:
af:ca:1a:43:c7:12:a2:53:f6:39:ad:26:4f:a2:f5:3e:a2:72:
37:fd:5b:c2:38:92:50:74:83:ff:c1:8c:9d:9e:03:54:9b:a0:
de:d9:da:74:17:b4:2e:8a:cf:a8:f3:f0:78:f0:4d:64:09:68:
c5:14:f8:81:19:04:8e:1a:7a:bc:48:19:f9:e7:12:df:96:da:
76:d6:33:c1:08:f2:91:68:ed:46:f7:3f:68:2f:c5:64:be:4f:
42:a3:62:71:02:23:89:3a:57:c3:4a:0f:00:14:c5:0c:47:d6:
a4:35:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:49:24 2025 by rpki-client