Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/QSSnC_q8o-WsNaAyAgJiGCCIy84.roa
File: QSSnC_q8o-WsNaAyAgJiGCCIy84.roa (raw, json)
Hash identifier: +tcnmJxQS3P4w2G5HOWxZj9/1mLanqdz69L9k66eqp4=
Subject key identifier: 41:24:A7:0B:FA:BC:A3:E5:AC:35:A0:32:02:02:62:18:20:88:CB:CE
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0199C34317A993743649531A2E6E0B3E21DE
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/QSSnC_q8o-WsNaAyAgJiGCCIy84.roa
Signing time: Wed 08 Oct 2025 09:59:38 +0000
ROA not before: Wed 08 Oct 2025 09:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.12.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:43:17:a9:93:74:36:49:53:1a:2e:6e:0b:3e:21:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Oct 8 09:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4124a70bfabca3e5ac35a032020262182088cbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:50:73:20:1a:42:d3:db:ec:51:5a:88:e2:
80:c5:9b:2d:2f:d7:4d:20:b7:59:e7:2a:81:4c:ba:
5e:a1:d7:6b:cd:65:2d:1a:5c:71:87:19:e8:f1:1d:
0d:a8:e5:28:1b:18:97:7b:67:48:29:21:ff:51:9a:
f9:cc:d1:7e:56:94:c1:f3:a8:ac:12:48:af:24:72:
9e:91:04:f9:d9:20:e9:b8:fa:b7:dc:3b:76:81:7d:
b2:d0:73:87:53:23:d2:4c:4e:84:1a:64:ef:36:cb:
26:30:1c:88:22:d1:ba:9f:ae:67:ec:1b:9d:d0:a0:
57:ea:54:46:6e:6e:53:e1:9c:dc:8a:00:2c:3e:8f:
aa:7b:23:c9:7a:3f:fb:9d:6b:9d:16:2b:f6:ac:2d:
93:d9:a7:db:2f:b0:14:b0:d4:ef:9e:92:49:63:14:
dd:d5:ca:61:8a:1f:0c:5a:94:74:35:b5:d0:8c:29:
d9:32:d6:c0:c5:4c:c6:19:ff:48:2f:da:2e:a1:5e:
e3:fa:c2:fa:b3:27:4b:69:ed:45:96:15:33:dc:0b:
c6:f5:29:35:d2:09:79:22:ae:c2:59:d4:a7:bd:ba:
f5:c7:42:eb:dd:ca:b2:71:63:75:73:8a:0c:15:21:
1d:cf:a3:3d:5e:a3:be:3d:ef:cf:ce:66:e2:4b:62:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:A7:0B:FA:BC:A3:E5:AC:35:A0:32:02:02:62:18:20:88:CB:CE
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/QSSnC_q8o-WsNaAyAgJiGCCIy84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
81.96.0.0/12
82.0.0.0-82.20.255.255
82.28.0.0/16
82.30.0.0-82.37.255.255
82.42.0.0-82.45.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
a5:50:8e:e6:9f:c8:3f:d1:1f:85:4d:d0:5a:6f:75:38:c3:8a:
1a:ac:20:8b:4b:20:f5:59:61:95:83:b8:1e:7a:32:48:69:eb:
f3:85:a1:19:4b:9d:e0:bc:e6:3d:0d:78:61:c7:d8:38:aa:d3:
e7:8a:cd:22:ea:1e:6a:fa:cc:ab:a9:a9:98:d0:3c:f3:97:37:
7d:20:75:7f:19:97:5b:b7:58:da:9f:5a:87:64:10:77:64:da:
d2:a0:b2:67:89:0f:d0:55:3b:28:b4:7d:71:ef:c3:85:a5:22:
a2:2d:a8:49:77:51:83:3e:a6:de:ed:5b:89:7f:48:d6:9a:3f:
18:db:b4:67:4e:6f:97:6d:be:fb:70:b7:81:db:d7:b8:81:7a:
8d:f8:6c:a3:da:84:9e:83:1a:83:fd:5f:25:ef:52:36:6b:a3:
ca:41:46:b4:10:23:bf:b5:8b:ec:47:f8:fb:2a:7b:e8:a4:6f:
74:74:a5:f5:7e:2c:59:53:da:4a:cf:82:27:56:13:98:cd:b3:
1f:60:bf:48:66:d9:ce:3f:76:c9:c8:63:c0:02:12:92:7f:b2:
b0:35:8a:79:02:ab:96:59:2d:c4:03:f4:a8:18:a7:82:2e:1b:
5d:86:26:de:67:29:59:89:ff:a2:0a:30:3d:1c:99:7f:7a:8f:
33:71:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:30 2025 by rpki-client