Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/o0qUAT_TgmtKEJ1FtjKHFmcq_g8.roa
File: o0qUAT_TgmtKEJ1FtjKHFmcq_g8.roa (raw, json)
Hash identifier: jAvBf+l4Sh8bF638zbQb1GW8ZMXk7btIZOLQzFqdpZg=
Subject key identifier: A3:4A:94:01:3F:D3:82:6B:4A:10:9D:45:B6:32:87:16:67:2A:FE:0F
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019777C4871C83D5BE1E8BBA71FECF0F40B4
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/o0qUAT_TgmtKEJ1FtjKHFmcq_g8.roa
Signing time: Mon 16 Jun 2025 08:04:17 +0000
ROA not before: Mon 16 Jun 2025 08:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29314
IP address blocks: 31.6.128.0/18 maxlen: 18
31.6.192.0/19 maxlen: 19
31.6.218.0/24 maxlen: 24
31.42.16.0/20 maxlen: 20
37.131.128.0/19 maxlen: 19
37.190.128.0/17 maxlen: 17
62.61.32.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
80.244.128.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
81.190.0.0/16 maxlen: 16
82.115.64.0/19 maxlen: 19
83.68.64.0/19 maxlen: 19
84.38.80.0/20 maxlen: 20
85.117.0.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
89.17.224.0/19 maxlen: 19
89.228.0.0/16 maxlen: 16
89.229.0.0/16 maxlen: 16
89.229.64.0/19 maxlen: 19
89.230.0.0/16 maxlen: 16
89.231.0.0/16 maxlen: 16
89.231.96.0/19 maxlen: 19
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
94.78.128.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
94.251.168.0/24 maxlen: 24
95.129.224.0/21 maxlen: 21
95.174.32.0/19 maxlen: 19
176.107.112.0/21 maxlen: 21
176.221.96.0/19 maxlen: 19
185.31.184.0/22 maxlen: 22
193.43.240.0/22 maxlen: 22
193.106.76.0/22 maxlen: 22
193.200.118.0/23 maxlen: 23
194.116.132.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
195.93.222.0/23 maxlen: 23
213.136.224.0/19 maxlen: 19
217.70.48.0/20 maxlen: 20
217.75.48.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
217.172.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c4:87:1c:83:d5:be:1e:8b:ba:71:fe:cf:0f:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jun 16 08:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a34a94013fd3826b4a109d45b6328716672afe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:77:b9:6b:a8:b6:d5:72:43:dd:d3:63:e4:
59:2e:bd:3a:fb:98:35:45:6d:be:12:e0:1a:0a:00:
98:5b:73:3d:3d:af:7b:41:99:95:68:8c:09:9f:dc:
38:70:2a:eb:61:ed:14:37:a5:8e:f7:0e:96:38:de:
61:09:50:a9:8f:4f:90:c5:06:f6:9e:d7:6e:91:92:
05:88:8e:1e:43:c1:d5:af:2c:0c:e5:58:41:e2:d6:
10:7e:27:8e:d7:3b:04:5d:91:48:fd:7d:a4:fe:5e:
96:81:41:b2:6e:c7:36:ea:80:5a:c1:8e:1b:4c:87:
a0:9c:aa:3f:f7:22:b6:29:62:74:38:67:d6:15:ee:
66:51:d1:17:fc:25:67:3b:ef:8f:b3:db:78:fe:2e:
6c:70:e7:95:54:a4:6e:99:ca:38:2e:84:7c:30:8a:
b1:81:6e:8c:58:3a:b3:06:f0:ec:00:ef:d0:f3:b8:
1a:b2:10:4d:30:f6:10:d4:22:b6:30:9c:13:53:ef:
22:88:70:e5:79:63:ad:4d:d9:f1:a1:53:ad:07:cd:
fa:92:b1:b7:ce:87:8b:f5:27:c8:95:17:63:ce:dd:
31:48:9c:8b:b8:7a:8b:a7:ae:79:4a:87:5f:85:40:
05:a9:40:3d:61:51:93:cd:14:53:4f:8e:82:91:62:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:94:01:3F:D3:82:6B:4A:10:9D:45:B6:32:87:16:67:2A:FE:0F
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/o0qUAT_TgmtKEJ1FtjKHFmcq_g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
76:48:0b:f5:d1:f4:69:ab:2d:5a:37:16:e0:db:81:de:01:9a:
f8:89:35:4c:37:8c:4f:b0:e3:39:04:8a:93:0f:fd:33:ff:17:
ca:47:db:cc:67:f0:02:de:ee:96:5d:ab:1b:e6:96:c8:e8:2e:
c2:54:dd:65:7c:4d:f4:e5:54:20:f1:44:73:d4:60:e1:88:a6:
23:28:14:06:f9:e1:d2:6c:96:d2:e7:7c:64:cc:45:14:a9:60:
6a:f4:cb:2e:c4:64:d0:32:5c:d8:cd:09:4b:62:dc:cb:e1:78:
f6:f8:73:73:73:45:33:81:84:ed:f6:51:b3:72:78:9f:b2:9c:
5f:e2:13:19:c3:d3:d8:5a:ba:4d:f8:b8:39:32:7f:7b:8e:45:
17:0b:1d:78:18:58:57:bd:45:93:d2:50:d3:1e:40:0c:97:2d:
e4:3d:57:5f:b4:86:86:db:a1:8f:45:fd:51:82:6e:1f:da:3b:
0e:b4:7f:c8:6c:c2:11:7d:a1:44:ef:03:67:6b:f6:c2:8d:27:
41:ee:66:c0:cb:a8:af:e5:9d:fe:f1:85:ce:90:f6:0b:48:06:
21:c3:25:ee:40:b1:23:3e:6c:1b:d6:4a:81:ef:14:9a:1b:49:
3f:68:e6:f1:d0:0c:88:1c:e9:7c:20:71:b1:f8:29:43:7e:bd:
47:35:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:14:20 2025 by rpki-client