Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gqf0mtkbOrNRP3tA8UFKoGx2Pv4.roa
File: gqf0mtkbOrNRP3tA8UFKoGx2Pv4.roa (raw, json)
Hash identifier: xLTCoraPQvUZ97OrU4mtSKiePDMrLYdKWyAHxHmnE7w=
Subject key identifier: 82:A7:F4:9A:D9:1B:3A:B3:51:3F:7B:40:F1:41:4A:A0:6C:76:3E:FE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0197B17A44524F1F1C2222A5067DCA02688F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gqf0mtkbOrNRP3tA8UFKoGx2Pv4.roa
Signing time: Fri 27 Jun 2025 13:01:09 +0000
ROA not before: Fri 27 Jun 2025 13:01:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 79.121.188.0/23 maxlen: 24
79.121.194.0/23 maxlen: 24
79.121.208.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
93.152.0.0/23 maxlen: 24
93.152.10.0/23 maxlen: 24
93.152.12.0/22 maxlen: 24
93.152.48.0/22 maxlen: 24
93.152.64.0/22 maxlen: 24
93.152.116.0/22 maxlen: 24
94.185.130.0/23 maxlen: 24
94.185.132.0/23 maxlen: 24
94.185.136.0/23 maxlen: 24
94.185.142.0/23 maxlen: 24
94.185.148.0/23 maxlen: 24
94.185.152.0/22 maxlen: 24
94.185.152.0/23 maxlen: 24
94.185.154.0/23 maxlen: 24
94.185.168.0/22 maxlen: 24
94.185.168.0/23 maxlen: 24
94.185.170.0/23 maxlen: 24
94.185.172.0/23 maxlen: 24
94.185.180.0/23 maxlen: 24
94.185.186.0/23 maxlen: 24
94.185.192.0/22 maxlen: 24
94.185.192.0/23 maxlen: 24
94.185.194.0/23 maxlen: 24
94.185.196.0/23 maxlen: 24
94.185.200.0/22 maxlen: 24
94.185.200.0/23 maxlen: 24
94.185.202.0/23 maxlen: 24
94.185.204.0/23 maxlen: 24
94.185.214.0/23 maxlen: 24
94.185.216.0/23 maxlen: 24
94.185.220.0/22 maxlen: 24
94.185.220.0/23 maxlen: 24
94.185.222.0/23 maxlen: 24
94.185.230.0/23 maxlen: 24
94.185.232.0/23 maxlen: 24
95.177.3.0/24 maxlen: 24
95.177.5.0/24 maxlen: 24
95.177.13.0/24 maxlen: 24
109.174.128.0/22 maxlen: 24
109.174.128.0/23 maxlen: 24
109.174.130.0/23 maxlen: 24
109.174.134.0/23 maxlen: 24
109.174.136.0/23 maxlen: 24
109.174.140.0/22 maxlen: 24
109.174.140.0/23 maxlen: 24
109.174.142.0/23 maxlen: 24
109.174.152.0/23 maxlen: 24
109.174.160.0/22 maxlen: 24
109.174.160.0/23 maxlen: 24
109.174.162.0/23 maxlen: 24
109.174.168.0/23 maxlen: 24
109.174.172.0/23 maxlen: 24
109.174.250.0/23 maxlen: 24
109.174.252.0/23 maxlen: 24
109.204.0.0/22 maxlen: 24
109.204.16.0/22 maxlen: 24
109.204.24.0/22 maxlen: 24
109.204.96.0/22 maxlen: 24
109.204.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:7a:44:52:4f:1f:1c:22:22:a5:06:7d:ca:02:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 27 13:01:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82a7f49ad91b3ab3513f7b40f1414aa06c763efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:c8:05:da:4b:1f:13:23:aa:ff:b2:95:f7:
ea:11:a1:79:13:3a:bc:7c:32:f3:d4:45:f6:af:be:
58:80:86:99:85:06:55:b7:7b:52:05:35:4e:82:5a:
71:f4:b1:b7:12:d6:e9:d5:af:dc:2b:cf:b3:a0:65:
58:db:a6:b9:31:6d:fe:a3:4e:62:bd:18:f8:aa:5d:
df:27:e4:b6:1d:97:d0:96:07:a7:e0:e5:0a:d1:00:
a3:cc:08:92:f2:dc:f7:46:df:e0:61:5c:93:6a:ff:
c2:29:fb:1c:ac:04:ba:a1:1a:e9:bc:54:58:e2:ea:
72:2a:ea:43:84:d5:de:d1:df:b3:e6:78:9e:4d:52:
41:ec:1d:d1:c1:ae:32:29:72:2c:86:3e:a4:96:3e:
7c:55:fc:4e:7a:18:50:f7:65:28:84:42:df:21:34:
51:91:54:f1:4a:39:3c:34:bb:c1:77:c3:b5:d0:54:
3a:8a:28:41:fd:db:0c:2f:36:53:d1:43:97:fc:27:
d7:3a:a9:6a:b5:55:08:38:cb:78:26:ce:3a:9d:af:
32:af:68:5b:b6:1a:6a:cf:e8:a0:35:5d:b1:2f:89:
55:ac:9a:23:93:6a:9d:68:83:5d:d7:d7:53:02:f3:
33:ff:7b:5c:97:be:06:20:07:dd:b2:5f:20:00:30:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:F4:9A:D9:1B:3A:B3:51:3F:7B:40:F1:41:4A:A0:6C:76:3E:FE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gqf0mtkbOrNRP3tA8UFKoGx2Pv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.188.0/23
79.121.194.0/23
79.121.208.0/23
79.121.222.0/23
93.152.0.0/23
93.152.10.0-93.152.15.255
93.152.48.0/22
93.152.64.0/22
93.152.116.0/22
94.185.130.0-94.185.133.255
94.185.136.0/23
94.185.142.0/23
94.185.148.0/23
94.185.152.0/22
94.185.168.0-94.185.173.255
94.185.180.0/23
94.185.186.0/23
94.185.192.0-94.185.197.255
94.185.200.0-94.185.205.255
94.185.214.0-94.185.217.255
94.185.220.0/22
94.185.230.0-94.185.233.255
95.177.3.0/24
95.177.5.0/24
95.177.13.0/24
109.174.128.0/22
109.174.134.0-109.174.137.255
109.174.140.0/22
109.174.152.0/23
109.174.160.0/22
109.174.168.0/23
109.174.172.0/23
109.174.250.0-109.174.253.255
109.204.0.0/22
109.204.16.0/22
109.204.24.0/22
109.204.96.0/22
109.204.124.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:87:8f:af:37:51:47:1b:59:91:20:e1:3e:13:c2:bc:ee:5f:
62:6f:4a:85:06:14:f2:fe:2f:2a:ec:f7:4c:55:37:c7:ff:94:
6e:cd:f4:c9:ac:c6:11:73:f6:7f:2f:22:cf:bb:6d:4a:8c:54:
09:1a:88:dc:29:c2:a0:d6:c8:d9:8c:4e:95:07:df:c7:db:b4:
40:9e:09:cf:c3:00:bb:cf:0d:60:42:6f:46:52:de:7a:1c:ce:
4f:d7:cd:86:bc:54:60:3d:d3:d6:96:cd:be:05:96:d0:34:02:
00:b4:5e:51:be:f1:50:ec:cf:f0:70:30:3c:62:cd:36:ab:3f:
87:5a:98:c5:44:b4:4f:b1:6b:8f:68:fb:ee:29:69:6b:da:ab:
8f:6c:a6:15:58:b3:3a:40:a1:5d:fc:d4:94:14:19:46:c7:a5:
5b:78:1a:5e:05:31:4b:7a:ba:6a:e1:58:f8:26:cc:fe:29:04:
3c:69:6f:39:da:2a:a3:36:09:6e:0a:8d:c1:ed:27:b3:92:03:
d3:db:0c:1e:7c:7b:3e:9c:50:0b:47:fc:aa:56:62:39:f7:0e:
ee:c6:d3:7e:e2:e8:a2:59:91:f6:d4:e1:1e:eb:a4:2a:9f:e9:
d4:3e:29:25:14:69:0e:c9:37:2f:5f:b4:a6:8a:b2:f0:f0:11:
31:3c:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:31:42 2025 by rpki-client