Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/qGNxVRIhvMDYI5LZ_Vl9S3rhWPc.roa
File: qGNxVRIhvMDYI5LZ_Vl9S3rhWPc.roa (raw, json)
Hash identifier: A64MjanIkQ8ukg/riCQQDjM5t/zWrzXBJspszNezj3s=
Subject key identifier: A8:63:71:55:12:21:BC:C0:D8:23:92:D9:FD:59:7D:4B:7A:E1:58:F7
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 0197877025F10AE913C7A5E085D54A6189C9
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/qGNxVRIhvMDYI5LZ_Vl9S3rhWPc.roa
Signing time: Thu 19 Jun 2025 09:06:03 +0000
ROA not before: Thu 19 Jun 2025 09:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205952
IP address blocks: 62.113.95.0/24 maxlen: 24
62.213.72.0/21 maxlen: 21
62.213.94.0/23 maxlen: 23
62.213.102.0/23 maxlen: 23
62.213.112.0/23 maxlen: 23
62.213.116.0/24 maxlen: 24
185.48.236.0/22 maxlen: 22
212.24.37.0/24 maxlen: 24
212.24.39.0/24 maxlen: 24
212.24.40.0/24 maxlen: 24
212.24.43.0/24 maxlen: 24
212.24.50.0/24 maxlen: 24
212.24.57.0/24 maxlen: 24
212.158.168.0/24 maxlen: 24
212.158.170.0/23 maxlen: 23
212.158.174.0/23 maxlen: 23
217.23.129.0/24 maxlen: 24
217.23.139.0/24 maxlen: 24
217.23.152.0/21 maxlen: 21
2a01:9860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:70:25:f1:0a:e9:13:c7:a5:e0:85:d5:4a:61:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jun 19 09:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a86371551221bcc0d82392d9fd597d4b7ae158f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:e1:23:ff:cb:d9:3d:59:ad:4c:8b:e5:1f:
48:85:95:ba:59:9d:b5:29:f7:1d:15:c7:c7:0f:ed:
cc:6d:3a:f7:92:c3:3a:61:15:42:00:fd:4f:4e:0d:
b7:ff:5e:55:bf:e4:9b:1e:bd:a3:69:af:de:55:d3:
fe:ca:58:b7:09:b7:01:4e:9d:d8:a2:f5:a0:cb:c8:
ed:1f:0f:13:be:e7:b0:91:86:5c:d9:a9:41:f3:ec:
0d:d9:ac:52:7f:0b:d2:bd:f2:c2:8e:63:f7:d3:3b:
52:04:c8:9b:7c:ec:d6:49:4a:f4:ea:40:07:11:ed:
b3:bc:2d:b0:5f:b0:30:e1:da:01:4c:7b:49:86:19:
d7:93:56:e8:39:11:a6:f5:9f:41:43:82:59:34:9f:
91:d3:76:1b:ec:8f:ba:b4:a1:68:10:05:3e:ee:07:
8b:25:7a:58:f4:33:c4:0a:a7:37:ea:90:9c:3a:f2:
f4:ec:d8:61:73:51:89:75:3c:ac:ca:a7:43:16:9e:
4d:b3:1e:b2:55:01:f8:84:31:6f:b2:09:07:68:c0:
2f:75:dc:8a:10:d4:e8:2d:98:5d:4c:25:03:12:db:
27:38:d3:e5:55:9d:c5:d1:0d:2f:d0:f8:84:c3:a1:
97:bd:2f:5d:60:94:c2:4d:17:5e:37:94:48:54:90:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:71:55:12:21:BC:C0:D8:23:92:D9:FD:59:7D:4B:7A:E1:58:F7
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/qGNxVRIhvMDYI5LZ_Vl9S3rhWPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.95.0/24
62.213.72.0/21
62.213.94.0/23
62.213.102.0/23
62.213.112.0/23
62.213.116.0/24
185.48.236.0/22
212.24.37.0/24
212.24.39.0-212.24.40.255
212.24.43.0/24
212.24.50.0/24
212.24.57.0/24
212.158.168.0/24
212.158.170.0/23
212.158.174.0/23
217.23.129.0/24
217.23.139.0/24
217.23.152.0/21
IPv6:
2a01:9860::/32
Signature Algorithm: sha256WithRSAEncryption
9e:c4:21:f5:40:7a:54:47:a0:11:e0:f5:14:a9:a5:21:2b:fb:
d8:13:ea:6e:a4:6c:f9:ca:ec:27:be:08:8c:f3:94:e3:c2:6c:
07:4b:16:77:8c:bd:33:3a:70:3f:d6:a9:c4:14:5d:68:9f:c8:
fe:3c:2a:0b:28:dd:ad:f4:47:87:8c:2f:95:7a:ec:ee:7c:d8:
19:ca:fd:f3:b3:6a:c4:e1:8f:85:74:7c:7e:2e:80:1b:42:0f:
cf:30:12:15:21:58:1d:25:c6:e5:f7:7f:d8:e3:67:4c:ac:70:
5d:45:ea:18:46:06:02:49:4f:2e:1e:68:28:90:82:38:3c:83:
62:14:9a:02:f7:00:e4:ba:bc:db:b9:57:1a:60:2e:4e:0e:cb:
ec:8e:91:3c:f8:62:0e:39:63:2b:40:e4:dc:c0:e7:b8:d1:26:
e6:b0:8c:c7:86:06:b4:25:cc:15:6c:9a:f7:58:b8:0a:78:15:
2a:f5:c7:d6:42:0f:fa:39:89:f3:83:57:3c:5e:01:d5:b1:45:
4e:04:8a:cf:a9:3a:8e:75:d1:dc:35:97:af:c6:0d:08:fb:23:
0f:cc:bd:b8:b3:1d:8b:7c:d8:7f:08:38:a7:1f:29:a3:2a:ff:
b2:48:63:15:04:e1:f0:74:e3:ef:7d:57:1a:71:c2:0e:75:e3:
8a:00:65:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:09 2025 by rpki-client