Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/uHqEEK_CeVTkZzHJ_ju7OjK7Mjw.roa
File: uHqEEK_CeVTkZzHJ_ju7OjK7Mjw.roa (raw, json)
Hash identifier: 2wcQsB2Dd8Bp81lWqFvQ5whT58hMrcoP5M/yxZAeb9U=
Subject key identifier: B8:7A:84:10:AF:C2:79:54:E4:67:31:C9:FE:3B:BB:3A:32:BB:32:3C
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 01979D35E0F2B9AE9B0DBA485354D5F995D5
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/uHqEEK_CeVTkZzHJ_ju7OjK7Mjw.roa
Signing time: Mon 23 Jun 2025 14:34:03 +0000
ROA not before: Mon 23 Jun 2025 14:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209024
IP address blocks: 62.113.64.0/24 maxlen: 24
176.109.64.0/24 maxlen: 24
176.109.65.0/24 maxlen: 24
176.109.66.0/24 maxlen: 24
176.109.68.0/24 maxlen: 24
176.109.69.0/24 maxlen: 24
176.109.70.0/24 maxlen: 24
178.236.24.0/24 maxlen: 24
178.236.25.0/24 maxlen: 24
2a02:28:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:35:e0:f2:b9:ae:9b:0d:ba:48:53:54:d5:f9:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jun 23 14:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b87a8410afc27954e46731c9fe3bbb3a32bb323c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:a0:45:af:e0:a7:de:41:30:2a:a7:49:fc:
02:85:b1:58:d6:6e:49:b9:85:ba:9e:b5:f3:da:ef:
f6:7b:ca:a9:b9:cb:98:ee:41:74:ad:24:88:06:ca:
0f:ca:3e:6a:a1:16:14:83:8d:c1:cb:dd:c2:35:5b:
f0:c0:78:99:85:20:82:ee:b7:d1:46:2b:6e:1a:4f:
57:b8:2c:cf:a1:6a:b0:a1:1a:97:44:eb:03:e1:7b:
ea:ef:16:d4:50:cd:eb:ce:4c:64:29:7f:5c:e2:5f:
ca:5a:24:df:21:8e:dd:03:73:3b:0b:0f:d9:8d:4b:
07:94:6d:1b:6a:16:e7:70:29:bd:0d:57:f5:0f:58:
c2:ed:53:30:be:98:52:f7:b3:25:5f:7d:f5:ae:21:
05:24:58:80:1e:4b:e9:c0:a3:41:20:06:8b:9a:a7:
5a:07:45:cc:ce:dc:29:b1:7a:c1:db:cc:d9:ad:42:
65:28:e8:63:be:a5:9c:33:2a:2b:7e:62:e3:e3:1c:
bc:26:06:f3:33:78:0e:56:6a:51:13:dc:80:b3:9b:
7d:8a:6a:9e:e6:1d:54:1b:df:dc:52:50:18:11:00:
32:b1:a3:f4:26:b4:b1:b6:c6:5d:66:5c:31:ec:b8:
6d:46:44:5c:98:4b:50:12:33:dd:eb:af:e3:57:83:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7A:84:10:AF:C2:79:54:E4:67:31:C9:FE:3B:BB:3A:32:BB:32:3C
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/uHqEEK_CeVTkZzHJ_ju7OjK7Mjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.64.0/24
176.109.64.0-176.109.66.255
176.109.68.0-176.109.70.255
178.236.24.0/23
IPv6:
2a02:28:d::/48
Signature Algorithm: sha256WithRSAEncryption
02:f7:a0:03:67:f5:b4:85:9d:93:1f:f0:84:cc:f3:63:5d:b2:
3a:e3:c1:68:f5:3b:84:b7:7b:b3:a3:7d:6a:49:1c:75:b5:4e:
55:ba:8e:12:47:6c:db:db:22:57:39:d1:9c:d5:b3:20:57:f4:
a1:6a:ce:73:07:3a:4e:16:05:d4:9b:f7:e7:a4:69:14:ab:d0:
10:27:cc:65:f1:53:73:6c:bd:a4:24:fb:f6:34:06:db:db:52:
10:66:e0:36:f1:09:f3:98:07:02:17:14:4e:c5:93:b2:86:cb:
6a:5a:4e:9c:1e:c6:2f:62:e5:72:57:da:59:73:a3:e0:7e:37:
8e:a8:f0:c4:71:fb:61:e1:d7:aa:1b:9a:b6:89:9e:95:0a:e7:
5f:4b:52:0f:c0:96:b4:05:1e:28:a3:48:10:77:78:91:2f:2f:
ba:ef:a7:2c:9c:b1:0e:b4:a9:2a:15:f8:7f:d4:1e:5b:3a:d9:
37:3b:f9:9b:38:48:e9:78:03:64:eb:94:38:8e:9a:32:2c:d3:
ba:ea:44:b1:78:38:22:9b:64:b5:4b:1c:6d:dd:93:e0:25:1c:
a9:81:8c:25:39:09:71:88:95:c5:2e:67:2b:dc:31:c1:5f:5a:
e2:63:4e:ba:27:a2:1d:27:2a:e1:1a:8b:43:fc:aa:cd:b3:e7:
86:50:d2:32
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZedNeDyua6bDbpIU1TV+ZXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjUwNjIzMTQzNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODdhODQxMGFmYzI3OTU0ZTQ2NzMxYzlmZTNiYmIzYTMyYmIzMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAWgRa/gp95BMCqnSfwChbFY1m5J
uYW6nrXz2u/2e8qpucuY7kF0rSSIBsoPyj5qoRYUg43By93CNVvwwHiZhSCC7rfR
RituGk9XuCzPoWqwoRqXROsD4Xvq7xbUUM3rzkxkKX9c4l/KWiTfIY7dA3M7Cw/Z
jUsHlG0bahbncCm9DVf1D1jC7VMwvphS97MlX331riEFJFiAHkvpwKNBIAaLmqda
B0XMztwpsXrB28zZrUJlKOhjvqWcMyorfmLj4xy8JgbzM3gOVmpRE9yAs5t9imqe
5h1UG9/cUlAYEQAysaP0JrSxtsZdZlwx7LhtRkRcmEtQEjPd66/jV4NVlQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFLh6hBCvwnlU5Gcxyf47uzoyuzI8MB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvdUhxRUVLX0NlVlRrWnpISl9qdTdPaks3TWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAuBAIAATAoAwQAPnFAMAwD
BAawbUADBACwbUIwDAMEArBtRAMEALBtRgMEAbLsGDAPBAIAAjAJAwcAKgIAKAAN
MA0GCSqGSIb3DQEBCwUAA4IBAQAC96ADZ/W0hZ2TH/CEzPNjXbI648Fo9TuEt3uz
o31qSRx1tU5Vuo4SR2zb2yJXOdGc1bMgV/Shas5zBzpOFgXUm/fnpGkUq9AQJ8xl
8VNzbL2kJPv2NAbb21IQZuA28QnzmAcCFxROxZOyhstqWk6cHsYvYuVyV9pZc6Pg
fjeOqPDEcfth4deqG5q2iZ6VCudfS1IPwJa0BR4oo0gQd3iRLy+676csnLEOtKkq
Ffh/1B5bOtk3O/mbOEjpeANk65Q4jpoyLNO66kSxeDgim2S1Sxxt3ZPgJRypgYwl
OQlxiJXFLmcr3DHBX1riY066J6IdJyrhGotD/KrNs+eGUNIy
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:35:39 2025 by rpki-client