Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa
File: YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa (raw, json)
Hash identifier: KjnbFS24f0U0fBm1mqed6e/EL7zir4AQYBp9zdgcLZI=
Subject key identifier: 63:31:FD:16:93:3C:12:0F:ED:AB:3F:CB:DF:2D:E6:94:76:FB:65:B6
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 0197A1CC62F206A6F90E43483B1BE6D93C85
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa
Signing time: Tue 24 Jun 2025 11:56:55 +0000
ROA not before: Tue 24 Jun 2025 11:56:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49765
IP address blocks: 5.226.56.0/21 maxlen: 21
5.226.56.0/24 maxlen: 24
5.226.57.0/24 maxlen: 24
5.226.58.0/23 maxlen: 23
5.226.60.0/24 maxlen: 24
5.226.61.0/24 maxlen: 24
5.226.62.0/24 maxlen: 24
5.226.63.0/24 maxlen: 24
91.102.56.0/21 maxlen: 21
91.102.56.0/24 maxlen: 24
91.102.57.0/24 maxlen: 24
91.102.58.0/23 maxlen: 23
91.102.60.0/22 maxlen: 22
91.102.60.0/24 maxlen: 24
91.102.61.0/24 maxlen: 24
91.102.62.0/23 maxlen: 23
94.136.224.0/19 maxlen: 19
94.136.224.0/23 maxlen: 23
94.136.226.0/24 maxlen: 24
94.136.227.0/24 maxlen: 24
94.136.228.0/24 maxlen: 24
94.136.229.0/24 maxlen: 24
94.136.230.0/24 maxlen: 24
94.136.232.0/24 maxlen: 24
94.136.233.0/24 maxlen: 24
94.136.234.0/24 maxlen: 24
94.136.235.0/24 maxlen: 24
94.136.236.0/23 maxlen: 23
94.136.238.0/23 maxlen: 23
94.136.244.0/24 maxlen: 24
94.136.245.0/24 maxlen: 24
94.136.246.0/24 maxlen: 24
94.136.247.0/24 maxlen: 24
94.136.248.0/24 maxlen: 24
94.136.249.0/24 maxlen: 24
94.136.250.0/24 maxlen: 24
94.136.251.0/24 maxlen: 24
94.136.252.0/24 maxlen: 24
94.136.253.0/24 maxlen: 24
94.136.254.0/24 maxlen: 24
109.72.16.0/20 maxlen: 20
109.72.16.0/24 maxlen: 24
109.72.17.0/24 maxlen: 24
109.72.18.0/24 maxlen: 24
109.72.19.0/24 maxlen: 24
109.72.21.0/24 maxlen: 24
109.72.22.0/24 maxlen: 24
109.72.23.0/24 maxlen: 24
109.72.24.0/24 maxlen: 24
109.72.25.0/24 maxlen: 24
109.72.26.0/24 maxlen: 24
109.72.27.0/24 maxlen: 24
109.72.28.0/24 maxlen: 24
109.72.30.0/24 maxlen: 24
109.72.31.0/24 maxlen: 24
137.221.0.0/20 maxlen: 20
137.221.0.0/23 maxlen: 23
137.221.2.0/24 maxlen: 24
137.221.3.0/24 maxlen: 24
137.221.4.0/24 maxlen: 24
137.221.5.0/24 maxlen: 24
137.221.6.0/24 maxlen: 24
137.221.7.0/24 maxlen: 24
137.221.8.0/24 maxlen: 24
137.221.9.0/24 maxlen: 24
137.221.10.0/23 maxlen: 23
137.221.12.0/24 maxlen: 24
137.221.13.0/24 maxlen: 24
137.221.14.0/24 maxlen: 24
137.221.15.0/24 maxlen: 24
137.221.16.0/21 maxlen: 21
137.221.16.0/24 maxlen: 24
137.221.17.0/24 maxlen: 24
137.221.18.0/24 maxlen: 24
137.221.19.0/24 maxlen: 24
137.221.20.0/24 maxlen: 24
137.221.21.0/24 maxlen: 24
137.221.22.0/24 maxlen: 24
137.221.23.0/24 maxlen: 24
185.48.108.0/24 maxlen: 24
185.48.109.0/24 maxlen: 24
185.48.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:cc:62:f2:06:a6:f9:0e:43:48:3b:1b:e6:d9:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Jun 24 11:56:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6331fd16933c120fedab3fcbdf2de69476fb65b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:d4:a0:33:c5:22:5a:ae:d8:43:44:99:1a:
49:ca:18:b2:31:de:1c:65:bc:d8:a7:c9:04:0c:3f:
a1:9e:01:83:77:c3:94:72:2f:65:01:da:74:08:13:
dc:33:6f:b6:e5:28:a7:ce:d2:5d:ac:05:16:79:6a:
30:6a:6f:68:77:2f:2c:bc:25:44:74:c6:bd:cf:f6:
78:b4:92:22:5f:b1:53:3c:a4:9c:3a:eb:50:64:f8:
49:bd:04:c3:9f:a2:58:82:f1:10:88:0e:c3:3a:7f:
96:b7:80:ed:31:6d:cc:f2:b5:22:83:3c:ab:87:49:
6f:cd:5b:9f:90:85:ef:86:12:9b:21:f2:26:f7:92:
2b:b3:fb:b1:35:71:ac:2f:a1:68:ce:68:9a:76:ed:
9d:e3:41:cc:31:36:93:cc:26:b1:1f:b1:4b:9d:e5:
c9:15:4a:b1:b3:b6:95:51:9d:55:83:f8:18:14:00:
cd:d3:f5:0d:16:4a:29:01:0e:9c:85:97:75:80:bc:
42:ed:10:92:34:59:de:cc:3a:22:36:d1:78:54:ab:
23:ee:3b:0c:4c:2e:a6:c5:2f:ed:db:76:a6:5a:4b:
21:c8:af:7f:9b:b5:6b:47:cc:a0:8c:0d:a6:5c:fa:
33:7f:d7:18:4a:b9:bf:72:8f:1b:da:ea:50:2c:03:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:31:FD:16:93:3C:12:0F:ED:AB:3F:CB:DF:2D:E6:94:76:FB:65:B6
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.56.0/21
91.102.56.0/21
94.136.224.0/19
109.72.16.0/20
137.221.0.0-137.221.23.255
185.48.108.0/22
Signature Algorithm: sha256WithRSAEncryption
10:de:28:93:03:14:a0:5f:36:2d:6a:5f:d6:75:2b:41:07:4d:
2a:14:87:e9:04:86:2f:7a:a2:60:bb:e8:a7:c0:5e:59:b0:1b:
0e:02:88:ed:f0:c4:54:aa:10:56:7e:72:fd:cd:9c:7b:e5:58:
8e:0a:05:8f:4f:c3:6f:1a:2a:cb:5b:8a:f9:da:48:b9:78:ff:
99:ac:1f:4d:20:67:3e:a8:79:e9:a0:e9:11:0a:52:01:b2:07:
3c:3e:0a:ac:ff:3a:ec:74:6e:3d:54:d3:4a:f6:57:54:2f:fe:
76:ad:1d:e3:1f:46:a1:63:f2:81:e7:6b:65:b1:b5:5a:e9:d8:
24:4e:b5:32:04:0b:b6:b7:b2:7f:9e:83:a7:1c:cc:7c:52:8a:
cb:c0:cd:7c:c4:31:d1:6c:14:10:f6:b2:5f:32:4f:a9:32:73:
6f:27:12:50:02:75:52:d0:fd:a8:8d:5e:00:f4:e6:a6:4d:bc:
9d:ab:cd:57:3d:05:5b:60:4f:21:df:ea:de:be:72:86:72:7f:
d2:39:61:84:5e:13:8f:d2:60:10:c7:25:c8:cc:f4:26:c6:c2:
4e:f6:96:f4:f8:bb:58:13:f7:1a:12:15:30:a7:2d:43:7b:86:
b1:68:56:96:8a:fb:e3:20:09:c4:c8:eb:04:31:ab:08:4f:92:
a6:da:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:33:46 2025 by rpki-client