Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/tizL6qWbIsOeypyIPPPfmLusGE0.roa
File: tizL6qWbIsOeypyIPPPfmLusGE0.roa (raw, json)
Hash identifier: sAyubtv15VYxRHUf9fkBNCBE+xwZmyTEiVd/Zqvt42M=
Subject key identifier: B6:2C:CB:EA:A5:9B:22:C3:9E:CA:9C:88:3C:F3:DF:98:BB:AC:18:4D
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 0197A64CCC988C99C5F36676A6F02A2AC913
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/tizL6qWbIsOeypyIPPPfmLusGE0.roa
Signing time: Wed 25 Jun 2025 08:55:40 +0000
ROA not before: Wed 25 Jun 2025 08:55:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48635
IP address blocks: 62.221.192.0/19 maxlen: 24
94.126.32.0/22 maxlen: 24
109.237.208.0/20 maxlen: 20
185.21.240.0/22 maxlen: 22
185.21.240.0/24 maxlen: 24
185.21.241.0/24 maxlen: 24
185.21.242.0/24 maxlen: 24
185.21.243.0/24 maxlen: 24
185.87.248.0/22 maxlen: 24
2001:1460::/32 maxlen: 48
2a04:1cc0::/29 maxlen: 48
2a05:c4c0::/29 maxlen: 48
2a0d:7980::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:4c:cc:98:8c:99:c5:f3:66:76:a6:f0:2a:2a:c9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Jun 25 08:55:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b62ccbeaa59b22c39eca9c883cf3df98bbac184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:9e:8c:fc:34:18:d2:6e:6e:1e:34:19:81:
0e:20:9c:7c:82:07:17:cf:22:82:7a:2c:ac:bc:9e:
52:0c:09:e7:6a:bf:38:64:e8:5b:ba:da:21:69:d6:
b9:aa:e4:68:dc:e5:71:b4:54:45:02:b9:6f:4b:d5:
d2:b5:fa:8f:49:bb:75:55:e9:57:30:d5:75:68:0f:
37:02:b5:8b:7f:43:23:d1:99:9f:e7:0b:42:f1:6e:
41:71:2c:a7:bc:f0:e0:c8:5f:31:9a:13:a0:09:6c:
41:dc:25:02:85:a2:3a:ac:67:b2:8f:cc:68:1f:34:
48:73:16:fb:e4:29:0b:90:0f:82:91:ca:9d:94:91:
78:ce:c2:32:25:dd:3e:06:c0:b3:26:58:2f:8e:ae:
08:59:77:4f:61:80:d1:7a:4e:5a:4c:1a:4b:21:20:
97:6e:71:67:18:9c:23:fb:9b:7b:6c:09:55:47:39:
c9:44:08:5f:35:84:64:1f:75:09:14:77:de:37:f5:
a5:32:a4:3e:26:93:3a:6c:a2:ed:58:61:e9:f4:83:
b9:45:82:c2:06:c5:ae:64:cd:ab:cc:72:a4:ef:3d:
1c:c0:08:f0:fc:f2:71:34:f1:db:96:14:1c:e2:c2:
83:37:7b:0f:e2:5f:c0:66:4d:f9:b9:37:09:44:ef:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:CB:EA:A5:9B:22:C3:9E:CA:9C:88:3C:F3:DF:98:BB:AC:18:4D
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/tizL6qWbIsOeypyIPPPfmLusGE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.221.192.0/19
94.126.32.0/22
109.237.208.0/20
185.21.240.0/22
185.87.248.0/22
IPv6:
2001:1460::/32
2a04:1cc0::/29
2a05:c4c0::/29
2a0d:7980::/32
Signature Algorithm: sha256WithRSAEncryption
a0:c0:9a:fe:0f:07:33:62:1f:58:f7:b7:d8:14:ef:c9:50:4b:
94:33:7f:bd:ea:96:48:8f:19:cd:71:71:a6:42:87:8c:d6:a4:
3f:16:3c:42:f0:5d:5c:23:b2:07:15:81:6a:63:9a:e1:66:90:
75:fa:9a:75:05:c1:2c:01:7e:18:30:67:8a:f6:a6:0a:7e:fe:
73:7f:34:aa:ca:18:35:d4:06:9e:6f:42:8f:32:32:fa:3b:c9:
4e:51:ac:f3:d1:c0:1d:5e:e6:0c:ed:b3:be:0c:8d:38:7b:bd:
8b:70:2c:ba:ef:d8:e4:a7:64:2d:05:26:d1:ed:63:b9:e4:ce:
a2:6c:2c:04:bb:a3:eb:61:b4:ed:e7:1c:8d:ca:4c:71:95:ba:
6d:17:52:df:04:bf:37:cf:19:e3:b4:b7:23:f2:b0:c7:43:62:
b7:9c:1e:71:62:33:8e:91:b9:82:7b:ce:f1:53:82:a0:0b:93:
bd:b5:5a:28:09:fb:83:7d:9f:29:8d:d3:39:bc:3e:47:99:85:
ed:fb:2e:f6:f3:e5:e0:ec:55:2f:ee:c7:e3:09:08:cb:64:8c:
80:7a:78:0b:4c:c4:ac:f5:56:d3:a9:19:e6:4a:6a:f3:31:b5:
19:15:86:12:1b:3e:13:0b:26:88:a4:8d:4d:cd:58:16:87:58:
ae:80:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:02 2025 by rpki-client