Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/DPUQ6ADZNEMLSYAxon1luKcIY4U.roa
File: DPUQ6ADZNEMLSYAxon1luKcIY4U.roa (raw, json)
Hash identifier: g+MR1MAY/piDayuURth49iV72/Mg+0nfGK3drHlnIS4=
Subject key identifier: 0C:F5:10:E8:00:D9:34:43:0B:49:80:31:A2:7D:65:B8:A7:08:63:85
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0198B9070EF197E2479A90459A11989E6EAB
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/DPUQ6ADZNEMLSYAxon1luKcIY4U.roa
Signing time: Sun 17 Aug 2025 17:15:04 +0000
ROA not before: Sun 17 Aug 2025 17:15:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.240.0/22 maxlen: 24
194.238.56.0/22 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.192.0/22 maxlen: 24
213.18.196.0/22 maxlen: 24
213.18.200.0/21 maxlen: 24
213.18.208.0/22 maxlen: 24
213.18.212.0/22 maxlen: 22
213.18.216.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.35.0/24 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.80.0/22 maxlen: 24
217.179.88.0/24 maxlen: 24
217.179.124.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
217.181.64.0/21 maxlen: 24
217.181.80.0/21 maxlen: 24
217.181.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:07:0e:f1:97:e2:47:9a:90:45:9a:11:98:9e:6e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 17 17:15:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf510e800d934430b498031a27d65b8a7086385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:4b:86:2b:29:bc:36:08:76:eb:bd:89:e8:
b1:cb:dc:e9:7f:4a:09:2f:7e:c1:8f:67:26:a2:65:
fc:6d:41:c9:ac:2f:37:24:5e:9a:30:72:d6:81:1c:
30:62:fa:3b:1e:40:28:23:8e:f9:12:7e:fb:b0:34:
fd:37:79:41:3e:ce:01:90:22:cf:9f:65:b4:a9:eb:
99:01:35:ef:74:78:1f:5e:90:f1:41:8f:b8:d2:d0:
a9:80:65:17:61:74:ce:09:82:d3:3f:22:f7:7b:45:
9c:3c:d3:46:39:90:32:e4:ee:e9:c1:ec:ee:79:e0:
23:d4:cf:a6:4a:3f:be:ba:9f:0b:ff:0b:fa:45:3f:
35:96:8c:dd:9c:25:7f:0d:1f:1d:b6:24:9a:77:b0:
d7:af:2b:94:3a:aa:2d:2c:19:69:39:24:9a:9d:86:
8c:3c:23:ae:8b:93:5d:e4:a8:9e:78:b2:37:79:50:
07:0c:e2:e7:d8:f6:24:f4:7a:97:e2:b7:b5:7d:d3:
07:1a:d1:90:b0:fc:17:09:fe:2c:35:65:ed:2e:1c:
23:d6:f3:9d:d2:f0:64:06:d3:3a:ae:43:cd:e5:db:
3f:d5:2e:e2:2a:85:4b:3e:62:8e:b7:90:1a:2e:ef:
51:83:b2:e4:37:5b:66:f9:5f:85:8d:fb:8b:4f:29:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:10:E8:00:D9:34:43:0B:49:80:31:A2:7D:65:B8:A7:08:63:85
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/DPUQ6ADZNEMLSYAxon1luKcIY4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
194.238.56.0/22
194.238.78.0/23
213.18.192.0/19
213.18.245.0/24
217.177.0.0/21
217.177.35.0/24
217.177.44.0-217.177.55.255
217.179.56.0/22
217.179.72.0/22
217.179.80.0/22
217.179.88.0/24
217.179.124.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
217.180.61.0/24
217.181.64.0/21
217.181.80.0-217.181.91.255
Signature Algorithm: sha256WithRSAEncryption
80:ab:69:c6:9b:c6:25:53:fe:1e:f9:0d:5d:3e:b2:df:37:3d:
f9:c0:b4:24:1c:44:ee:81:1b:8b:9c:e2:fc:18:f8:d2:55:d4:
7b:a6:e3:a3:f0:d5:dc:c7:7a:0c:e6:47:aa:6c:70:de:69:6e:
69:3f:4c:4c:ee:bd:85:2a:ed:44:9e:cf:e5:fb:43:fe:b4:35:
35:fb:d5:0e:cc:d1:86:dc:3a:9c:3e:9e:c2:35:72:99:ae:16:
94:69:db:23:3d:d0:d1:15:25:25:e1:ad:30:6c:76:8b:60:00:
45:ff:bb:e0:85:54:8e:e7:7b:3b:75:48:59:9a:93:ea:32:d0:
37:13:a3:86:69:73:f7:48:e1:b3:27:1c:7f:19:45:f2:34:a1:
c1:8b:c9:6a:a5:57:d9:14:54:97:f6:9a:13:f8:7f:dd:bb:77:
41:0e:70:1c:9b:a0:4e:26:20:a0:1f:3e:b6:44:ee:45:c6:72:
99:42:bf:fd:19:b6:f6:a7:22:77:03:5a:2c:94:cb:52:70:46:
7b:5d:a1:24:f3:0b:81:1b:d4:33:fb:e0:06:e9:54:86:44:67:
7e:e1:e7:87:41:c8:29:e7:ff:33:cb:a0:26:f0:84:35:1c:cb:
1f:89:40:a6:04:1d:75:1e:e1:4e:6d:3a:02:92:d8:5d:fe:69:
94:bf:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:53 2025 by rpki-client