Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/mqVCnppn0W9n9_VLaFMtNdLVB-s.roa
File: mqVCnppn0W9n9_VLaFMtNdLVB-s.roa (raw, json)
Hash identifier: QVlXZ3aALYBuzpKB2iSK+Pdudw26e3ZVgf2lLWjhGYI=
Subject key identifier: 9A:A5:42:9E:9A:67:D1:6F:67:F7:F5:4B:68:53:2D:35:D2:D5:07:EB
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0196C8EDAE9D2DAD9D7A935CD2EC8D4910C3
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/mqVCnppn0W9n9_VLaFMtNdLVB-s.roa
Signing time: Tue 13 May 2025 09:15:42 +0000
ROA not before: Tue 13 May 2025 09:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.0.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.96.0/19 maxlen: 19
87.192.128.0/18 maxlen: 18
87.192.192.0/20 maxlen: 20
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.192.224.0/19 maxlen: 19
87.232.0.0/19 maxlen: 19
87.232.160.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.0.0/17 maxlen: 17
89.124.0.0/24 maxlen: 24
89.124.128.0/18 maxlen: 18
89.124.192.0/19 maxlen: 19
89.124.224.0/20 maxlen: 20
89.124.245.0/24 maxlen: 24
89.124.248.0/21 maxlen: 21
89.125.0.0/16 maxlen: 16
89.126.0.0/16 maxlen: 16
89.126.0.0/22 maxlen: 22
89.126.4.0/22 maxlen: 22
89.126.8.0/22 maxlen: 22
89.126.12.0/22 maxlen: 22
89.126.16.0/22 maxlen: 22
89.126.20.0/22 maxlen: 22
89.126.24.0/22 maxlen: 22
89.126.28.0/22 maxlen: 22
89.127.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
89.127.192.0/19 maxlen: 19
89.127.224.0/20 maxlen: 20
89.127.240.0/21 maxlen: 21
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:ed:ae:9d:2d:ad:9d:7a:93:5c:d2:ec:8d:49:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: May 13 09:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa5429e9a67d16f67f7f54b68532d35d2d507eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:f2:ab:a6:a4:11:84:43:21:5c:d6:cf:fe:
ca:32:b5:1c:df:e1:62:17:05:bb:32:7b:f9:75:df:
ab:44:c1:6c:82:f9:9a:f6:05:23:66:40:51:46:72:
87:9a:7d:fe:cf:7b:6e:29:7c:39:54:d7:2f:ee:ac:
98:36:0b:e1:7b:d0:a4:fa:ef:26:38:bf:83:87:03:
e5:5a:50:f6:4f:97:64:8c:48:b3:09:c1:81:94:43:
fb:c5:74:cd:ce:e1:18:5f:79:f4:57:c6:3a:f1:74:
13:06:bd:46:13:a3:83:9b:71:f7:6e:51:78:27:6f:
e7:85:d4:fe:0d:8c:fe:9f:f7:02:d7:cc:38:23:bc:
f5:00:53:5a:eb:eb:42:38:5b:0b:4d:ac:b6:8a:29:
34:41:4f:4a:f5:a2:f8:f3:2d:db:ae:8a:f2:1a:5a:
5b:5b:7e:9c:10:62:47:70:bf:cf:7b:b3:ac:9f:d4:
38:8f:f2:23:da:f6:ba:c7:7d:27:25:50:08:f6:e3:
9c:91:7c:2f:5d:3a:f9:61:60:53:40:ea:51:a1:25:
2f:3b:db:d5:3f:ec:64:9b:43:87:e6:fd:2d:46:2c:
a7:32:c3:fd:ae:08:ed:09:bc:e8:a7:5e:26:ff:65:
20:5d:ec:64:fd:6d:2d:2b:d8:0f:6f:f7:88:4e:60:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A5:42:9E:9A:67:D1:6F:67:F7:F5:4B:68:53:2D:35:D2:D5:07:EB
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/mqVCnppn0W9n9_VLaFMtNdLVB-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.87.255
87.192.96.0-87.192.207.255
87.192.216.0/22
87.192.222.0-87.192.255.255
87.232.0.0/19
87.232.160.0-87.232.192.255
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.0.0-89.124.239.255
89.124.245.0/24
89.124.248.0-89.127.251.255
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
26:56:a1:d0:c5:76:5e:6f:77:6a:7d:f3:bc:ff:53:57:53:d0:
2b:d6:74:e0:24:30:d8:66:1e:d2:b1:59:39:a1:67:14:7f:cc:
e1:43:2b:68:da:e5:db:ed:29:8d:73:74:29:5a:2b:d5:72:21:
51:b3:c1:07:c8:c5:7f:37:db:66:b3:6b:e0:c0:27:70:b7:6d:
74:fa:0c:35:47:3b:5a:f3:bf:dd:61:c1:28:34:64:b1:87:05:
03:cd:08:2d:a1:4a:20:42:b7:56:bc:a2:03:92:e3:b0:b3:24:
03:b0:da:29:35:65:f9:95:e7:65:4c:88:61:4c:08:a3:72:fd:
74:ae:93:ab:23:9b:b1:1c:09:1d:6d:61:0d:07:67:f3:dd:98:
f1:fa:4e:0e:c8:2d:fc:2f:f0:2a:e6:cb:f9:1f:7b:20:cc:d4:
99:87:bb:f2:fe:34:a3:b6:95:57:6d:f3:75:29:5f:20:c7:a8:
c4:24:66:dc:5e:73:25:50:14:6d:f4:a5:d7:e1:54:0b:12:14:
63:42:98:95:63:6a:32:c0:6b:6e:71:da:e9:41:c0:22:e2:c3:
cb:d8:f8:b4:d8:c8:da:1e:d8:e8:ca:2f:da:3d:26:22:a9:f1:
68:c3:65:ac:ae:7e:74:ab:6f:56:1e:f9:11:ec:22:77:86:89:
1d:6a:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:51:37 2025 by rpki-client