Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1-GvME8QnWFzpw38o631i7dyDBRg.roa
File: 1-GvME8QnWFzpw38o631i7dyDBRg.roa (raw, json)
Hash identifier: WMF7/w0c4pOL0tZJz0aKHQzZFynDlFvEhg5kfRe454A=
Subject key identifier: F8:6B:CC:13:C4:27:58:5C:E9:C3:7F:28:EB:7D:62:ED:DC:83:05:18
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198EB379284445A7D301C61B1E676FECC60
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1-GvME8QnWFzpw38o631i7dyDBRg.roa
Signing time: Wed 27 Aug 2025 11:09:04 +0000
ROA not before: Wed 27 Aug 2025 11:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:37:92:84:44:5a:7d:30:1c:61:b1:e6:76:fe:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 27 11:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86bcc13c427585ce9c37f28eb7d62eddc830518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:cb:d5:de:18:64:c0:52:f6:48:1b:82:0b:
08:b9:9c:a9:96:47:29:66:ea:e0:3f:7d:5c:6b:90:
07:f7:b8:59:e4:8e:25:ff:12:eb:87:d0:1a:ce:dd:
f0:4d:84:94:ea:f7:73:6e:11:37:90:45:5f:f4:7d:
89:71:11:8d:6d:1c:8b:18:2c:9a:fd:88:0d:3e:28:
e7:7a:78:0e:05:48:51:27:f4:90:dd:92:7f:93:4a:
2b:b0:6f:3e:7c:bc:cc:58:0f:22:c8:c2:4f:39:8d:
6f:dd:df:52:3f:fc:64:ba:0d:9c:e7:de:a5:0d:e3:
23:a1:6a:6f:36:44:d7:7b:e6:bc:c8:58:14:31:bc:
47:d1:48:25:cb:e9:ee:62:42:d2:27:bb:a0:ce:53:
03:21:33:57:7b:99:14:4b:af:ed:a4:93:80:a8:7b:
f4:09:0a:47:dc:f4:85:94:bb:8f:50:71:18:d7:18:
f1:80:26:3f:85:21:5f:4a:bc:2c:48:99:ab:92:bc:
cf:2c:0c:9f:99:5c:43:38:5e:38:45:4d:5f:c3:5e:
df:11:1f:6b:a8:97:ad:c3:21:3f:2c:57:80:77:71:
0b:5a:ea:6a:ac:aa:f6:a6:fc:a7:99:f9:4b:66:73:
da:fb:df:12:9d:f7:a2:09:13:f9:72:ff:ad:57:6c:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:CC:13:C4:27:58:5C:E9:C3:7F:28:EB:7D:62:ED:DC:83:05:18
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1-GvME8QnWFzpw38o631i7dyDBRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
92.62.119.0/24
94.232.248.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
109.69.60.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
a0:fd:b0:6c:a4:d6:a4:9a:71:41:b4:b8:25:b3:eb:a6:45:08:
57:97:53:cf:32:67:ba:37:f1:5a:b3:c8:c4:6e:bc:b4:c2:2d:
d7:c4:7d:36:2a:52:92:f4:cd:8a:64:33:0d:b8:00:f5:82:f8:
a1:99:5f:fd:5b:6d:13:57:f4:49:bf:a6:d8:49:bc:c0:ba:7c:
95:74:55:d0:77:f5:6a:92:a8:b5:e0:84:10:43:1f:fb:19:67:
a5:aa:0f:31:f5:e4:d7:73:cb:95:64:b8:0d:06:14:90:1c:cb:
ad:7a:c0:16:d8:02:0f:f9:b8:f2:56:70:c5:10:1d:d7:69:39:
86:13:57:96:2f:de:23:76:5a:14:36:e9:9e:18:2b:5a:4d:a0:
e7:84:e7:fb:39:ca:87:81:f5:6b:83:b2:08:8f:cd:ee:1b:6d:
ab:c5:e5:51:a6:3b:7d:d2:84:33:59:8d:2b:96:5c:d3:27:43:
90:b1:04:8c:7d:ba:6a:72:c8:f4:87:a2:4b:49:cb:93:cd:7f:
d0:2f:60:9e:d0:ba:cf:d5:1d:cf:ff:fa:1b:20:b1:44:b3:ac:
ae:fc:73:91:1e:36:62:35:94:f5:92:23:94:62:d3:f3:42:63:
ef:73:25:d4:a0:d1:99:b2:db:f2:71:2d:63:a3:b1:3b:5b:38:
0c:ce:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:21:54 2025 by rpki-client