Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C60QHuDhmki5HDsS5swkS7-cTJc.roa
File: C60QHuDhmki5HDsS5swkS7-cTJc.roa (raw, json)
Hash identifier: GQk61UgkT6nlLMetNZXHhvn7KEXLDolsAHU+sdfoGwA=
Subject key identifier: 0B:AD:10:1E:E0:E1:9A:48:B9:1C:3B:12:E6:CC:24:4B:BF:9C:4C:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197A20D28B3B15FB04F36F696D5994690E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C60QHuDhmki5HDsS5swkS7-cTJc.roa
Signing time: Tue 24 Jun 2025 13:07:40 +0000
ROA not before: Tue 24 Jun 2025 13:07:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:0d:28:b3:b1:5f:b0:4f:36:f6:96:d5:99:46:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 24 13:07:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bad101ee0e19a48b91c3b12e6cc244bbf9c4c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:e8:55:42:be:4a:6d:f2:50:81:20:3e:ec:
a6:14:f0:4a:49:c3:97:80:c4:35:83:5b:4c:18:26:
9f:95:32:50:b5:85:db:5a:1e:99:94:2a:af:41:cb:
9d:11:e7:6a:4c:0c:04:cb:d3:76:f4:18:97:55:2a:
45:48:8b:5d:63:ba:af:08:d6:84:a2:06:f3:1e:69:
e3:e2:dc:fc:35:a7:3c:94:2c:ce:e9:92:c7:01:e3:
39:58:23:7b:58:b9:5c:b2:7f:39:cc:11:58:ec:ab:
95:f0:96:3b:e4:d8:ba:2a:c5:4d:1a:32:8e:10:08:
fd:5c:e6:79:f8:89:77:eb:9c:35:d0:6c:70:23:a5:
55:3f:48:38:cf:fb:67:46:00:dd:dd:a9:f0:fe:25:
bc:8f:1d:23:f5:6b:db:27:86:02:36:57:11:ea:84:
61:e1:db:15:1e:13:7f:9d:33:4c:84:14:f1:16:13:
55:44:00:ac:50:2e:52:bc:09:f3:d7:b3:5c:0e:56:
04:84:31:06:95:00:5b:7c:55:02:3e:c5:1f:ce:79:
e3:79:00:f4:71:07:f0:3b:f1:f1:7a:ec:af:0d:37:
89:fe:46:76:07:c9:67:25:fa:f9:40:8f:1a:e8:74:
b7:1d:13:83:dd:4a:f2:85:53:cf:65:9d:03:74:e9:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:10:1E:E0:E1:9A:48:B9:1C:3B:12:E6:CC:24:4B:BF:9C:4C:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C60QHuDhmki5HDsS5swkS7-cTJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.108.0/24
87.120.196.0/24
91.92.21.0/24
109.206.240.0/24
109.206.243.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.221.0/24
185.252.179.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d6:bf:dc:9a:d7:15:e5:5c:a9:fa:bc:61:4d:ad:9e:33:9d:
b6:eb:fc:42:aa:59:75:81:80:52:34:aa:88:b7:7a:32:f6:03:
bd:61:01:15:4b:56:0b:83:fd:8b:ce:c9:b0:8a:87:f3:8e:53:
69:de:7c:d9:08:5e:2a:83:a2:87:0c:e3:1b:82:05:68:6c:42:
6e:6d:18:23:72:fa:5a:41:bf:e0:15:21:73:b2:f4:8e:f7:8e:
1d:28:6c:de:e1:46:e4:d0:ad:46:fb:31:72:cc:9c:f4:d3:a3:
15:f2:54:48:67:c9:db:49:6d:61:a2:5e:86:db:07:85:a5:fc:
ac:e1:75:b0:3c:e4:07:c2:59:08:0d:91:c6:37:18:9b:c9:ad:
dc:0b:d1:f9:69:51:15:78:0c:90:68:e6:47:80:2c:1b:04:6f:
0e:82:7e:48:7c:01:7e:cb:fc:7f:79:f2:e1:57:ab:2c:b9:3d:
0e:66:f0:24:53:84:b0:df:4b:8a:29:13:26:49:23:ea:64:58:
08:74:21:12:59:8c:f5:80:ef:bc:e6:f7:3e:0c:b5:60:9b:51:
92:7d:5c:3f:f8:ed:71:24:4b:35:75:7b:d2:2e:5e:74:39:22:
1f:0f:7a:80:25:0d:11:d4:ea:5a:fd:07:2a:8f:c3:c8:c3:e7:
7e:68:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:15 2025 by rpki-client