Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/qJwj9MyFEcnrcGb2M4PXBqeqzTo.roa
File: qJwj9MyFEcnrcGb2M4PXBqeqzTo.roa (raw, json)
Hash identifier: CYEtqbUgFJtsnSmpVqHEZXtocTEs1taayC6QMxKwO1c=
Subject key identifier: A8:9C:23:F4:CC:85:11:C9:EB:70:66:F6:33:83:D7:06:A7:AA:CD:3A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019899D191068FB95D71E916E8B02F3AD20A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/qJwj9MyFEcnrcGb2M4PXBqeqzTo.roa
Signing time: Mon 11 Aug 2025 15:48:24 +0000
ROA not before: Mon 11 Aug 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 194.231.159.0/24 maxlen: 24
195.143.0.0/21 maxlen: 24
195.143.15.0/24 maxlen: 24
195.143.17.0/24 maxlen: 24
195.143.18.0/24 maxlen: 24
195.143.22.0/23 maxlen: 24
195.143.28.0/22 maxlen: 24
195.143.34.0/24 maxlen: 24
195.143.36.0/22 maxlen: 24
195.143.82.0/24 maxlen: 24
195.143.84.0/24 maxlen: 24
195.143.86.0/23 maxlen: 24
195.143.88.0/23 maxlen: 24
195.143.98.0/23 maxlen: 24
195.143.107.0/24 maxlen: 24
195.143.108.0/22 maxlen: 24
195.143.113.0/24 maxlen: 24
195.143.114.0/23 maxlen: 24
195.143.116.0/24 maxlen: 24
195.143.118.0/23 maxlen: 24
195.143.121.0/24 maxlen: 24
195.143.123.0/24 maxlen: 24
195.143.132.0/24 maxlen: 24
195.143.134.0/24 maxlen: 24
195.143.144.0/22 maxlen: 24
195.143.148.0/24 maxlen: 24
195.143.152.0/22 maxlen: 24
195.143.160.0/23 maxlen: 24
195.143.163.0/24 maxlen: 24
195.143.164.0/22 maxlen: 24
195.143.176.0/24 maxlen: 24
195.143.178.0/24 maxlen: 24
195.143.187.0/24 maxlen: 24
195.143.190.0/23 maxlen: 24
195.143.192.0/20 maxlen: 24
195.143.208.0/21 maxlen: 24
195.143.216.0/24 maxlen: 24
195.143.224.0/22 maxlen: 24
195.143.230.0/23 maxlen: 24
195.143.232.0/21 maxlen: 24
195.143.240.0/22 maxlen: 24
195.143.246.0/23 maxlen: 24
195.143.248.0/22 maxlen: 24
195.143.252.0/24 maxlen: 24
195.143.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:d1:91:06:8f:b9:5d:71:e9:16:e8:b0:2f:3a:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 11 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89c23f4cc8511c9eb7066f63383d706a7aacd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:30:62:9c:eb:72:c4:d2:78:47:e7:d6:07:
f3:bb:35:5f:c8:e3:68:86:0d:df:1f:c4:08:35:1f:
bb:99:7a:ce:3b:c8:5f:f7:63:74:62:92:ab:a5:6f:
68:68:22:d5:3c:2a:cb:49:8e:ea:d7:dc:64:97:3f:
5c:6b:57:a2:51:07:20:b3:34:80:95:a2:8b:c8:b8:
2f:a4:b8:07:28:74:ef:2e:8c:d4:0d:7e:23:5e:dd:
ff:9a:6b:ff:38:cd:64:9d:00:f7:45:14:fb:c4:da:
7b:d4:13:e6:7c:fc:4c:00:cc:ba:fb:67:23:54:60:
0a:ba:2e:ca:e8:91:b4:6a:e0:c1:48:f3:9f:f4:75:
b7:9e:41:73:1b:de:33:22:0b:49:57:b5:10:06:c6:
b2:aa:c2:b0:ab:3b:2d:16:7a:00:7e:28:d9:58:12:
74:bc:8c:03:66:d1:b1:df:d8:40:d2:41:48:db:d3:
16:19:9a:b9:a8:4d:b5:69:d2:44:bc:24:94:85:7f:
bd:8f:df:93:91:d7:36:97:39:b4:2d:2c:35:89:b8:
ac:76:97:da:ec:ba:a0:9e:1d:03:2e:d6:81:45:45:
d9:18:b6:18:69:c2:57:c6:be:9d:d7:5a:b9:57:20:
0f:de:af:fb:60:07:5a:76:56:b9:c4:41:72:ce:a3:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:23:F4:CC:85:11:C9:EB:70:66:F6:33:83:D7:06:A7:AA:CD:3A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/qJwj9MyFEcnrcGb2M4PXBqeqzTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.159.0/24
195.143.0.0/21
195.143.15.0/24
195.143.17.0-195.143.18.255
195.143.22.0/23
195.143.28.0/22
195.143.34.0/24
195.143.36.0/22
195.143.82.0/24
195.143.84.0/24
195.143.86.0-195.143.89.255
195.143.98.0/23
195.143.107.0-195.143.111.255
195.143.113.0-195.143.116.255
195.143.118.0/23
195.143.121.0/24
195.143.123.0/24
195.143.132.0/24
195.143.134.0/24
195.143.144.0-195.143.148.255
195.143.152.0/22
195.143.160.0/23
195.143.163.0-195.143.167.255
195.143.176.0/24
195.143.178.0/24
195.143.187.0/24
195.143.190.0-195.143.216.255
195.143.224.0/22
195.143.230.0-195.143.243.255
195.143.246.0-195.143.252.255
195.143.254.0/23
Signature Algorithm: sha256WithRSAEncryption
58:86:cf:ee:27:8d:e4:32:aa:02:a0:29:8b:94:73:a9:05:aa:
6b:bd:9e:5b:9d:55:15:3f:17:0f:e9:ff:67:98:5a:74:57:42:
3f:97:51:b4:ac:c2:73:b9:63:41:97:32:5f:f3:85:97:0a:60:
7b:0b:05:13:f3:74:d3:66:77:67:f5:2c:ba:09:51:2f:15:d4:
31:46:af:18:79:5d:c0:f4:ba:55:72:89:39:4d:55:a7:96:cd:
85:40:7c:26:8d:1c:1c:70:0c:82:54:d3:07:a7:0d:5b:84:59:
3c:72:1c:47:f8:60:56:f5:f8:dc:32:86:13:3c:84:b4:88:4d:
b0:0c:2c:d0:66:af:80:0f:f1:16:e8:d7:e0:fc:6d:ff:18:50:
b8:94:1f:b8:5d:78:b1:ff:43:6b:6e:8f:bd:25:e0:5d:7c:fb:
09:b4:76:36:71:54:7c:8a:3d:d6:df:50:b2:0b:dd:a4:63:e4:
dd:1e:e1:b3:f8:9f:fb:d7:ca:22:00:9e:67:50:63:ce:fe:18:
6a:c2:eb:51:86:64:1f:d9:f5:5e:35:b4:99:51:da:c3:d6:cc:
7c:30:7d:60:f0:3b:8c:1f:dd:20:1d:58:27:b3:ec:ac:89:37:
75:5f:2a:b3:50:3f:fc:44:b9:21:3a:a3:af:45:21:c2:07:30:
55:bc:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:32 2025 by rpki-client