Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/qY49_zMYcxE9KGOl7CqKGZj8a0g.roa
File: qY49_zMYcxE9KGOl7CqKGZj8a0g.roa (raw, json)
Hash identifier: upYiYtciQmGdVVrCv44QY9m5idlwNSvObhkb+ghmQwY=
Subject key identifier: A9:8E:3D:FF:33:18:73:11:3D:28:63:A5:EC:2A:8A:19:98:FC:6B:48
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01998148E7B05FD0AA96A6E677B3CE5A9194
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/qY49_zMYcxE9KGOl7CqKGZj8a0g.roa
Signing time: Thu 25 Sep 2025 14:31:02 +0000
ROA not before: Thu 25 Sep 2025 14:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 203.202.233.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a00::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0a:37c0::/30 maxlen: 30
2a0a:37c4::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0b:a280::/30 maxlen: 30
2a0b:a284::/30 maxlen: 30
2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0d:88c0::/30 maxlen: 30
2a0d:88c4::/30 maxlen: 30
2a0f:1180::/30 maxlen: 30
2a0f:1184::/30 maxlen: 30
2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/30 maxlen: 30
2a0f:5584::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
2a0f:7c80::/30 maxlen: 30
2a0f:7c84::/30 maxlen: 30
2a0f:9fc0::/30 maxlen: 30
2a0f:9fc4::/30 maxlen: 30
2a0f:a140::/30 maxlen: 30
2a0f:a144::/30 maxlen: 30
2a0f:a500::/30 maxlen: 30
2a0f:a504::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a0f:c780::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
2a14:4380::/30 maxlen: 30
2a14:4384::/30 maxlen: 30
2a14:4480::/30 maxlen: 30
2a14:4484::/30 maxlen: 30
2a14:4980::/30 maxlen: 30
2a14:4984::/30 maxlen: 30
2a14:4a80::/30 maxlen: 30
2a14:4a84::/30 maxlen: 30
2a14:4b80::/30 maxlen: 30
2a14:4b84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:81:48:e7:b0:5f:d0:aa:96:a6:e6:77:b3:ce:5a:91:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 25 14:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a98e3dff331873113d2863a5ec2a8a1998fc6b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:11:b3:18:2f:6e:9d:fb:11:09:88:69:3a:
50:91:45:24:9d:a3:94:91:48:4c:46:82:4c:a7:c7:
48:1a:52:3c:97:36:f2:19:0d:72:de:13:3d:f8:cc:
ca:94:1e:e8:5d:14:2f:de:89:a9:05:df:bd:91:cd:
b8:88:6c:2f:a2:63:4b:ec:55:bd:81:46:c8:a7:75:
fc:d7:66:d6:64:da:15:2c:4a:87:e7:46:53:f1:c8:
95:69:13:5c:fd:7a:fc:31:c8:de:e0:bf:7f:73:8f:
0e:87:86:82:c4:9b:b5:a2:31:a0:bf:ae:ac:2a:3b:
0f:42:9f:7f:11:d2:cc:e1:b1:c7:0e:b9:ab:7e:4e:
c7:b1:23:45:84:99:70:33:1e:ff:61:0c:bd:68:59:
bc:f3:67:3c:94:4b:8e:c4:df:46:e8:d3:73:08:cc:
ee:a5:c4:97:03:f5:8f:79:23:32:22:24:eb:43:15:
e0:78:8b:e9:6f:a2:96:ea:be:73:69:c2:b1:4e:fc:
fd:87:f3:7c:75:47:50:a3:0a:40:98:be:dc:83:c2:
e8:6d:a1:49:ed:73:dd:5e:2c:da:e5:cd:1f:48:4a:
35:4f:e9:4b:11:4c:bc:fc:05:44:95:2e:ea:9b:d8:
31:24:76:5e:69:79:9b:84:bf:46:07:61:cc:61:de:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:3D:FF:33:18:73:11:3D:28:63:A5:EC:2A:8A:19:98:FC:6B:48
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/qY49_zMYcxE9KGOl7CqKGZj8a0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.233.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a00::/29
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
80:d4:00:62:63:14:ca:a7:bc:4c:12:89:60:38:96:0f:3b:15:
4c:72:1b:4e:e2:c5:a1:af:f1:9c:08:41:cb:ae:05:64:2b:0d:
85:06:9a:6d:e6:ab:a8:bf:ca:f5:bf:cc:be:8b:7e:e2:8c:fa:
df:a0:30:f2:e7:15:53:f5:98:0e:a8:9a:ab:79:3a:07:52:82:
ed:c0:1d:f0:fb:6c:ee:fa:eb:19:aa:76:fb:71:67:bd:d2:d9:
b3:fb:2b:9a:c7:e8:e8:1a:ce:bb:13:9b:b3:f9:8e:a1:06:1c:
ea:ac:e2:12:75:62:2d:c0:3f:3c:81:e3:c5:3e:d5:cc:ed:48:
46:0f:0d:86:0a:dd:82:92:0a:3d:7d:e6:0f:a4:87:c7:25:ef:
4b:97:ae:dd:06:a4:eb:ac:e0:d1:73:0e:1a:86:80:d2:f1:2e:
3b:e1:58:69:2d:6a:c0:78:39:e8:3e:e3:2b:8d:0c:12:71:88:
41:2f:c2:28:01:fc:a0:34:c2:ec:c2:81:1f:03:ac:f7:e0:15:
49:81:ce:58:b2:8d:81:f3:e6:4f:86:e0:9f:cb:6c:fe:19:7b:
71:bb:53:86:61:3b:fa:d5:d1:ea:f5:cf:0d:48:33:a6:7b:6d:
a0:31:b9:d9:95:4b:59:0c:a7:27:da:71:0a:62:2f:4f:1b:a0:
c0:d6:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:45 2025 by rpki-client