Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6mAjaUbGCbkM8iCo-C2tquoZsiY.roa
File: 6mAjaUbGCbkM8iCo-C2tquoZsiY.roa (raw, json)
Hash identifier: HiQrH3r4qc9InJ7GnT9HiOdxmAD3SaE5z9M1Of1Oe1Q=
Subject key identifier: EA:60:23:69:46:C6:09:B9:0C:F2:20:A8:F8:2D:AD:AA:EA:19:B2:26
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0197BBD538B04422C3C76A07312D82561E99
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6mAjaUbGCbkM8iCo-C2tquoZsiY.roa
Signing time: Sun 29 Jun 2025 13:16:42 +0000
ROA not before: Sun 29 Jun 2025 13:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24631
IP address blocks: 62.220.97.0/24 maxlen: 24
87.107.102.0/24 maxlen: 24
87.107.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:d5:38:b0:44:22:c3:c7:6a:07:31:2d:82:56:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 29 13:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea60236946c609b90cf220a8f82dadaaea19b226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:62:56:61:49:8f:b2:52:53:ea:8b:fc:cd:
a7:fd:f7:7e:f6:65:48:c0:f4:40:0e:88:11:9b:35:
d1:55:d9:4c:62:d7:75:99:47:6a:6a:e3:1f:84:64:
32:56:b6:fd:15:2d:3a:e0:9f:98:2a:4c:16:87:78:
e2:b8:92:db:47:d2:50:af:2d:01:54:a3:70:21:c9:
d1:f3:5a:05:6a:c0:fd:9f:e5:df:c4:bf:8d:57:6d:
ac:b1:4e:46:b5:f7:d5:55:e2:af:03:79:44:67:aa:
f4:57:81:3f:6f:5f:d6:34:92:ef:c6:e8:9e:3a:b3:
cd:5f:10:0c:f0:03:f3:a0:c0:c4:64:91:8b:2e:db:
d1:07:87:80:8c:e6:89:c6:52:4a:3f:42:be:31:37:
78:5c:09:9b:c1:90:d4:3e:8a:04:02:81:4c:1e:fe:
0d:2b:b9:f9:dd:23:3d:c2:85:78:f4:fc:c1:c0:b3:
73:38:cb:46:ca:77:1f:49:f0:f1:0e:80:44:66:cb:
44:da:0e:9c:c7:53:be:7b:b1:18:af:20:e8:cd:35:
d1:bb:29:1b:95:57:dd:3c:d3:93:fa:4e:a9:45:c7:
69:15:90:24:ea:47:de:b3:24:86:c7:d1:5b:a0:46:
e3:51:7c:0c:37:8d:d1:cc:68:e7:6a:c9:b4:09:10:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:60:23:69:46:C6:09:B9:0C:F2:20:A8:F8:2D:AD:AA:EA:19:B2:26
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6mAjaUbGCbkM8iCo-C2tquoZsiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.97.0/24
87.107.102.0/24
87.107.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:31:0e:34:8c:d3:0e:b0:3b:35:b7:39:59:08:23:90:9d:1e:
6a:e5:b7:7e:1a:df:e4:48:d1:57:cb:62:88:ed:b2:a7:c1:9b:
5b:1a:df:67:b3:ad:ff:f5:5d:25:eb:ae:a9:9e:32:7c:79:2c:
42:a2:a2:d7:a5:fe:ea:b5:60:ad:3e:d0:bf:95:b2:e6:11:a5:
b6:02:d0:43:de:ed:f5:96:11:a5:2e:83:ad:61:83:8a:94:23:
3d:2e:ff:51:7f:35:78:3f:34:66:e3:54:e8:65:f9:6e:1d:cc:
3d:57:0a:69:c7:92:3f:c4:a5:a6:f1:1e:9f:d0:05:e6:d4:06:
b8:52:fe:f3:9a:8f:95:63:6e:6c:79:5d:a3:27:d6:c8:f8:d1:
74:ac:72:4b:05:dd:1d:9b:a9:a1:d9:67:28:bb:55:9f:03:cd:
1f:b2:92:0c:fb:4c:aa:25:16:d5:0b:b4:22:51:9d:7e:58:61:
64:10:50:5f:d9:a3:c0:c3:91:6d:62:cf:4a:e2:be:dc:4e:c8:
e0:ff:5d:c8:84:4c:ae:3d:00:20:55:76:5f:cd:7e:f3:b0:31:
82:e6:5b:45:6c:90:0a:a4:0f:2f:1f:1f:31:a2:da:4d:17:8f:
43:59:33:d9:bc:56:ae:16:fc:8c:82:34:a0:28:51:ef:57:84:
90:ea:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:40:38 2025 by rpki-client