Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ffSTkNPIiZpEtpWWodnp-E62PR0.roa
File: ffSTkNPIiZpEtpWWodnp-E62PR0.roa (raw, json)
Hash identifier: zfi9z9vv9i6kZpAB79iGBR0mg0wwIS76zddY9IyYsTk=
Subject key identifier: 7D:F4:93:90:D3:C8:89:9A:44:B6:95:96:A1:D9:E9:F8:4E:B6:3D:1D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0197A2C27041F6097FBED1278E5EA8411E56
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ffSTkNPIiZpEtpWWodnp-E62PR0.roa
Signing time: Tue 24 Jun 2025 16:25:41 +0000
ROA not before: Tue 24 Jun 2025 16:25:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:c2:70:41:f6:09:7f:be:d1:27:8e:5e:a8:41:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 24 16:25:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df49390d3c8899a44b69596a1d9e9f84eb63d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:13:36:2f:78:7b:61:89:7f:31:88:a6:8a:
29:42:5b:7c:90:5f:a5:b5:1b:4c:18:68:c9:a7:33:
f8:16:9d:4d:c7:ae:38:93:d9:45:10:08:9c:87:87:
23:5c:8a:5c:42:57:ed:c5:ed:8a:6a:70:2c:a5:35:
e4:ff:52:88:07:5f:30:82:d9:03:f3:c6:79:8a:95:
6e:20:9d:35:19:1a:ed:14:ec:5f:5e:04:60:1f:a1:
bf:66:44:f2:91:e0:f3:77:01:7d:ac:33:1b:5f:8a:
6f:cc:60:38:11:21:d5:91:fc:49:c4:09:79:c8:46:
9b:d7:61:46:8f:ce:8e:bc:d1:bf:a6:5d:81:95:1e:
62:42:71:07:d6:6d:56:13:2f:5b:47:60:09:cd:4d:
fe:2b:3d:90:c3:61:3f:b3:5e:16:01:a2:15:e6:12:
3e:df:14:71:f9:90:4b:72:33:51:3c:d5:40:0c:72:
ec:c7:91:de:2b:91:13:a6:9c:b7:ac:bf:7a:db:5d:
31:96:fd:88:c5:83:11:9e:bc:00:06:ac:61:5a:29:
62:4e:78:ff:20:b8:8c:04:1d:19:21:82:4b:63:96:
11:78:6b:2f:bb:88:14:4c:2b:7d:72:95:e7:5a:4a:
ad:40:1e:7d:fb:c3:19:2c:20:be:04:2e:78:b5:2a:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:93:90:D3:C8:89:9A:44:B6:95:96:A1:D9:E9:F8:4E:B6:3D:1D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ffSTkNPIiZpEtpWWodnp-E62PR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.8.0/23
87.107.108.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:24:5a:f7:a6:67:1d:52:ec:20:a7:3f:bf:2e:58:c4:c8:cb:
14:30:0c:fa:5a:c0:19:c2:e0:96:cc:6f:28:f4:aa:6f:06:ad:
34:1b:13:63:63:6e:3e:5e:d2:eb:0b:c1:8c:4b:93:62:e4:95:
18:3b:22:a4:64:58:70:5c:66:47:58:93:e2:63:e6:50:1d:e2:
1f:17:04:9d:c1:ef:87:41:35:b9:6b:65:32:82:26:f7:c7:1b:
0c:db:7d:87:a4:3e:38:81:ca:61:6f:8c:f5:f0:31:d8:7d:4a:
60:d2:37:33:64:c1:f4:87:da:0c:4a:f3:6f:0d:74:68:12:4c:
b9:85:ab:96:d5:60:a8:74:b0:ed:a2:01:d5:2e:39:08:27:78:
5b:78:72:51:57:f1:6d:d0:b9:b7:fa:7a:af:a5:d2:6e:1d:ec:
95:a7:b2:c3:ec:3f:be:18:66:f2:ca:20:f2:c3:24:55:73:8d:
f4:09:24:55:75:78:cc:00:03:6a:2c:bc:63:63:04:11:64:a8:
dd:87:e6:4b:53:e8:f5:45:3c:81:c0:31:51:ca:af:ee:9e:8e:
c4:df:94:25:03:4f:54:f0:2a:44:0b:25:ba:70:f6:3b:ef:70:
e4:4e:0b:11:c5:62:ba:d6:87:1b:8a:57:ac:7a:20:f6:af:c5:
07:b3:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:57:36 2025 by rpki-client