Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QWF8iPmkcL6NOooL8tPM7IMPoUo.roa
File: QWF8iPmkcL6NOooL8tPM7IMPoUo.roa (raw, json)
Hash identifier: bzBipE6wAO2T/yEjaOJi1+OmhaU74b59cVPkctxln9Y=
Subject key identifier: 41:61:7C:88:F9:A4:70:BE:8D:3A:8A:0B:F2:D3:CC:EC:83:0F:A1:4A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0198A243AA67D1C73F3A6E4950265C48849C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QWF8iPmkcL6NOooL8tPM7IMPoUo.roa
Signing time: Wed 13 Aug 2025 07:10:00 +0000
ROA not before: Wed 13 Aug 2025 07:10:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 5.182.114.0/24 maxlen: 24
77.242.145.0/24 maxlen: 24
77.242.149.0/24 maxlen: 24
77.242.157.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.200.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.220.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:43:aa:67:d1:c7:3f:3a:6e:49:50:26:5c:48:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 13 07:10:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41617c88f9a470be8d3a8a0bf2d3ccec830fa14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:71:50:bd:b2:ee:e2:33:5a:88:fd:ae:39:
3b:2d:c6:bf:4a:1b:bb:59:f4:20:38:88:1e:6d:00:
40:2b:34:3e:68:37:5e:71:95:9d:9d:7e:33:c1:ca:
82:2e:27:91:b4:90:6d:13:91:80:6a:db:22:44:43:
cb:f2:b5:c4:42:b3:d4:9e:1d:5e:1c:5b:b8:9b:76:
5d:f4:88:ae:25:26:3f:80:1c:42:b3:6e:86:be:db:
4c:50:6b:1b:de:0a:27:c6:88:71:84:c8:7e:51:40:
4e:dd:b2:e1:c4:1e:82:a2:d1:d1:95:c4:0c:2d:4f:
56:ad:1e:32:2f:83:f2:ec:58:1b:ec:67:56:ab:54:
c7:a9:56:69:c6:78:1e:1f:31:b9:f4:cb:26:d3:39:
b8:85:a8:b8:15:ea:46:1f:50:61:e3:89:95:71:dc:
63:6b:ed:cd:91:eb:00:c2:6a:0b:c4:1b:5e:05:b8:
c6:b9:74:35:6c:eb:8e:9a:60:af:db:e7:a5:ad:d7:
8e:d3:85:20:f8:8e:de:ed:33:ee:f4:e9:4b:26:0c:
f1:0c:ca:1e:3d:c4:e5:95:36:ff:c3:61:c3:20:05:
03:8c:1a:fa:ee:ab:8b:6c:68:a8:b2:f2:99:ab:c4:
dd:d2:c6:13:99:2c:b0:64:45:a7:f4:66:9d:27:f8:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:7C:88:F9:A4:70:BE:8D:3A:8A:0B:F2:D3:CC:EC:83:0F:A1:4A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QWF8iPmkcL6NOooL8tPM7IMPoUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
77.242.145.0/24
77.242.149.0/24
77.242.157.0/24
77.242.159.0/24
88.151.63.0/24
88.209.200.0/24
88.209.211.0/24
88.209.220.0/24
88.209.224.0/23
88.209.229.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
89:af:b8:32:f8:38:23:4c:80:70:bc:9a:c6:a2:b6:0d:77:96:
2e:c0:f3:e7:1e:86:89:45:95:8a:4d:3d:75:ce:58:81:a0:86:
6f:98:90:73:ce:c9:82:60:98:b3:3c:30:58:61:74:4c:37:1d:
a9:29:2e:00:2a:2f:a0:74:df:ef:8a:8b:18:0d:a8:61:39:c5:
b8:03:bf:b1:32:17:08:15:5e:fb:54:47:60:3e:bd:25:43:4a:
88:fe:4d:37:e7:44:4d:33:64:ae:c6:ce:79:07:8d:e4:5b:d8:
f9:ee:1d:55:71:ab:ef:f3:b9:9d:cc:03:a7:13:69:35:bf:1c:
2e:ef:4f:88:6d:b2:0e:72:c3:44:a4:3c:84:ca:4a:73:7c:38:
3f:ed:a8:54:64:f1:9b:82:1b:f8:fa:1f:9f:54:75:7a:84:45:
96:b1:b2:8f:1c:dd:e8:3f:a2:e3:ae:c3:2e:34:bb:40:89:45:
50:1d:07:cf:db:e9:f2:10:c8:a5:de:9e:d2:19:6d:7b:04:33:
8a:12:9c:8c:d7:13:e8:22:bb:92:78:8f:d1:0d:5f:6f:07:90:
4f:a9:7e:08:4b:d1:c0:89:75:81:7e:b4:c3:3a:c5:dd:d0:80:
0d:a7:6a:48:ad:bd:a3:48:3f:f2:79:4e:f3:bb:d4:1a:c8:79:
96:bd:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:03 2025 by rpki-client