Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tY0l6BpEF6yNwvXNZ1oCpT31z7Q.roa
File: tY0l6BpEF6yNwvXNZ1oCpT31z7Q.roa (raw, json)
Hash identifier: KewTQB7pFTvTmBBQEAo3zBVBpNd7N61Mav2UciRhutE=
Subject key identifier: B5:8D:25:E8:1A:44:17:AC:8D:C2:F5:CD:67:5A:02:A5:3D:F5:CF:B4
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01992EAC86DA2192C84AE407CE981EB274F2
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tY0l6BpEF6yNwvXNZ1oCpT31z7Q.roa
Signing time: Tue 09 Sep 2025 13:31:22 +0000
ROA not before: Tue 09 Sep 2025 13:31:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.148.132.0/22 maxlen: 24
93.88.158.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.130.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:ac:86:da:21:92:c8:4a:e4:07:ce:98:1e:b2:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 9 13:31:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b58d25e81a4417ac8dc2f5cd675a02a53df5cfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:f6:b1:cb:a7:a6:33:33:b6:02:35:07:be:
25:1e:6d:99:c6:f7:85:f9:bc:54:c8:19:e5:b6:aa:
d2:7a:44:09:d5:96:52:8a:05:e1:6f:2a:a2:40:d4:
ee:8d:f8:2e:32:51:fe:9c:8b:99:3b:73:87:1a:5d:
c7:5b:9c:c7:85:91:00:ba:5b:43:e4:11:45:33:15:
7d:b4:dd:2a:da:71:e7:33:93:00:16:10:9f:95:0e:
0d:b1:45:1e:af:ed:56:ed:58:78:e3:e7:71:b8:b6:
16:6b:a8:d2:26:7b:3f:13:6a:f0:15:4d:7f:ae:46:
26:73:e6:73:bd:d6:35:7b:f5:78:86:90:fd:07:f1:
8a:6d:13:63:5f:90:24:13:d3:3b:ff:b8:3e:c8:f6:
65:ad:ad:c1:32:ac:db:01:bc:0e:f4:d3:f1:2e:c9:
78:53:25:a4:1a:7e:d6:4c:36:ab:dc:11:59:bc:99:
dc:e4:1a:ab:15:ab:5d:52:64:8a:89:a5:30:cf:79:
1a:93:03:fd:16:b9:ee:e5:56:fd:9e:d7:c6:bf:fe:
78:2d:68:a9:f6:53:c4:2c:e5:50:61:f5:2d:8b:ef:
c0:10:76:59:07:f0:b5:5a:57:26:0c:87:68:31:41:
a2:62:40:6c:a9:cd:f3:df:a8:05:66:79:91:99:b1:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:25:E8:1A:44:17:AC:8D:C2:F5:CD:67:5A:02:A5:3D:F5:CF:B4
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tY0l6BpEF6yNwvXNZ1oCpT31z7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.132.0/22
93.88.158.0/24
95.155.129.0-95.155.131.255
Signature Algorithm: sha256WithRSAEncryption
33:00:d8:24:a9:10:49:94:35:40:6e:7c:9f:7e:4a:94:fe:f4:
cd:64:c6:13:d8:c5:76:3a:56:70:26:cb:34:9d:10:f1:77:3f:
c7:ab:f0:83:ef:e8:72:20:6b:23:4e:50:74:8c:1a:36:0d:d8:
f2:3e:a8:71:38:23:90:c5:5f:3c:e8:a2:2c:a7:51:eb:c0:c4:
d4:d4:55:bc:e6:63:cc:b3:11:df:5d:5e:62:e3:7e:91:d9:8f:
9e:38:50:88:0d:2b:4b:7c:b6:a9:69:36:eb:ba:a0:7e:24:6e:
38:fe:58:cd:6e:3e:e8:07:60:f1:a2:11:a4:e9:fc:c4:db:d8:
ad:6e:81:bf:b1:58:c1:dd:22:5c:82:d2:ed:80:4b:34:e8:78:
4e:d1:00:53:6f:6c:38:0b:20:7d:2f:7d:fe:c3:85:82:c5:9d:
55:ec:f9:30:87:03:ff:47:72:79:79:6c:0d:05:cc:f7:76:aa:
40:de:03:63:aa:8c:ab:b9:98:18:4f:3b:95:03:44:51:5a:3f:
67:72:f6:04:03:a4:f3:be:42:e8:67:e3:58:25:f1:e0:42:86:
1c:26:a2:7d:4d:29:3a:85:79:81:5a:ae:be:0e:a0:a5:e8:ff:
fd:3f:bb:74:b7:07:be:28:d9:75:8a:8a:88:ea:2c:ad:1f:45:
6a:6f:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:12:09 2025 by rpki-client