Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/7fPxL-uHp2NClvaUSSes1QZFjgY.roa
File: 7fPxL-uHp2NClvaUSSes1QZFjgY.roa (raw, json)
Hash identifier: 10Jo3zGeUKwhoqlKRLe84C64rFl5TQbdrOY/xZjeKog=
Subject key identifier: ED:F3:F1:2F:EB:87:A7:63:42:96:F6:94:49:27:AC:D5:06:45:8E:06
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0197A2C26F165F16461FCC6050DE60598C22
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/7fPxL-uHp2NClvaUSSes1QZFjgY.roa
Signing time: Tue 24 Jun 2025 16:25:40 +0000
ROA not before: Tue 24 Jun 2025 16:25:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51026
IP address blocks: 62.220.126.0/24 maxlen: 24
62.220.127.0/24 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.24.0/24 maxlen: 24
81.12.25.0/24 maxlen: 24
81.12.26.0/24 maxlen: 24
81.12.27.0/24 maxlen: 24
81.12.30.0/24 maxlen: 24
81.12.31.0/24 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/24 maxlen: 24
87.107.153.0/24 maxlen: 24
87.107.166.0/24 maxlen: 24
87.107.167.0/24 maxlen: 24
87.107.174.0/24 maxlen: 24
87.107.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:c2:6f:16:5f:16:46:1f:cc:60:50:de:60:59:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 24 16:25:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf3f12feb87a7634296f6944927acd506458e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:c2:31:17:b9:05:f6:21:26:06:a0:51:0f:
85:04:68:86:b9:b8:8b:ef:c8:ea:98:36:ea:35:86:
f3:5d:f7:31:a8:50:96:7f:5c:be:54:65:eb:79:6b:
8c:7d:cd:4a:21:e1:7b:d4:9d:6b:8b:d3:ba:4f:d5:
6d:f5:d0:ee:e0:8b:2b:4f:48:28:e9:b8:50:30:85:
ac:43:f6:2e:e6:65:a6:a8:69:8e:d4:18:da:ce:ea:
a2:f8:99:57:7f:c9:c7:fd:16:e9:1b:e0:5a:dd:1f:
2c:84:a9:05:32:9c:0f:60:32:3e:81:74:a5:02:c6:
42:45:7f:fa:1e:31:32:f5:bf:d0:b8:a1:c2:04:44:
76:dd:87:cd:3b:02:7c:f9:0e:0e:b2:47:ad:78:14:
57:02:33:2f:a8:fd:32:86:34:a4:34:25:45:19:3d:
bd:d9:ee:51:ed:5a:08:4c:c1:41:e4:51:2d:1b:1e:
b2:04:92:37:b9:61:ad:54:c8:51:72:e6:48:ca:7e:
a1:9a:c4:08:64:15:43:3f:d1:3c:4d:0b:57:9c:6d:
fb:df:c8:21:83:00:c2:1e:be:7c:ce:12:1d:d8:95:
88:1e:a3:7c:bf:94:e3:19:5a:9b:8b:e9:eb:a0:a8:
8e:5c:d2:79:fc:f8:5c:8b:ca:3b:c5:36:bf:59:ab:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:F1:2F:EB:87:A7:63:42:96:F6:94:49:27:AC:D5:06:45:8E:06
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/7fPxL-uHp2NClvaUSSes1QZFjgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.8.0/23
87.107.108.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f7:c6:e7:fc:46:b3:82:92:5e:cf:fd:d1:62:da:a1:48:0c:
be:74:4b:70:bd:0f:33:87:7c:9d:6e:96:af:0e:3f:15:5c:f7:
46:50:49:08:67:73:64:81:13:63:f8:94:08:ce:f8:3b:36:63:
71:82:5c:7e:40:c6:52:2a:de:d1:9d:ef:2a:c2:73:04:de:a1:
26:13:27:b1:4d:77:59:3e:85:59:d2:36:f9:ab:bb:af:8f:23:
48:1b:f9:a8:c2:4d:12:41:fb:12:b2:73:9d:ba:e5:51:80:ae:
82:31:69:15:e5:e6:3a:9a:90:de:da:2a:ac:ec:66:61:46:2a:
a9:eb:1d:37:81:50:41:c8:6c:7b:58:94:bb:1e:4f:6c:5e:ec:
0e:dd:bd:22:56:cd:82:d2:8a:f3:55:85:dd:34:b6:8b:32:60:
42:e8:6e:d8:86:99:8b:fc:a2:30:87:fa:cf:81:54:b1:23:af:
52:7a:c4:97:00:df:97:0d:44:3d:23:22:3f:3b:9d:2f:65:fe:
6c:b3:41:c0:5f:99:ab:5c:c2:0c:da:61:4a:00:9b:cd:4e:76:
3c:8f:84:96:4f:62:34:c5:c6:35:4d:5f:78:69:f6:91:24:44:
47:28:04:82:e3:7a:e6:a0:ed:bf:70:84:9e:e6:6b:7b:98:3f:
aa:28:0c:f6
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZeiwm8WXxZGH8xgUN5gWYwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwNjI0MTYyNTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGYzZjEyZmViODdhNzYzNDI5NmY2OTQ0OTI3YWNkNTA2NDU4ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBzCMRe5BfYhJgagUQ+FBGiGubiL
78jqmDbqNYbzXfcxqFCWf1y+VGXreWuMfc1KIeF71J1ri9O6T9Vt9dDu4IsrT0go
6bhQMIWsQ/Yu5mWmqGmO1Bjazuqi+JlXf8nH/RbpG+Ba3R8shKkFMpwPYDI+gXSl
AsZCRX/6HjEy9b/QuKHCBER23YfNOwJ8+Q4OsketeBRXAjMvqP0yhjSkNCVFGT29
2e5R7VoITMFB5FEtGx6yBJI3uWGtVMhRcuZIyn6hmsQIZBVDP9E8TQtXnG3738gh
gwDCHr58zhId2JWIHqN8v5TjGVqbi+nroKiOXNJ5/Phci8o7xTa/WavMCQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFO3z8S/rh6djQpb2lEknrNUGRY4GMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvN2ZQeEwtdUhwMk5DbHZhVVNTZXMxUVpGamdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBPtx+AwQC
UQwYAwQBUQweAwQBV2sIAwQCV2tsAwQAV2uQAwQBV2uYAwQBV2umAwQBV2uuMA0G
CSqGSIb3DQEBCwUAA4IBAQAz98bn/EazgpJez/3RYtqhSAy+dEtwvQ8zh3ydbpav
Dj8VXPdGUEkIZ3NkgRNj+JQIzvg7NmNxglx+QMZSKt7Rne8qwnME3qEmEyexTXdZ
PoVZ0jb5q7uvjyNIG/mowk0SQfsSsnOduuVRgK6CMWkV5eY6mpDe2iqs7GZhRiqp
6x03gVBByGx7WJS7Hk9sXuwO3b0iVs2C0orzVYXdNLaLMmBC6G7YhpmL/KIwh/rP
gVSxI69SesSXAN+XDUQ9IyI/O50vZf5ss0HAX5mrXMIM2mFKAJvNTnY8j4SWT2I0
xcY1TV94afaRJERHKASC43rmoO2/cISe5mt7mD+qKAz2
-----END CERTIFICATE-----
Generated at Sun Jun 29 23:10:45 2025 by rpki-client