Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/F9W7CMwh6bAUQrKwkIzFXnqjNFo.roa
File: F9W7CMwh6bAUQrKwkIzFXnqjNFo.roa (raw, json)
Hash identifier: +huBRX66DiH29m/cg7mfJ/KpSPmLQUyfEZv0+3YkFl8=
Subject key identifier: 17:D5:BB:08:CC:21:E9:B0:14:42:B2:B0:90:8C:C5:5E:7A:A3:34:5A
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 0198D7478190A0B1E32130BCBF4759F8E2BB
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/F9W7CMwh6bAUQrKwkIzFXnqjNFo.roa
Signing time: Sat 23 Aug 2025 14:14:04 +0000
ROA not before: Sat 23 Aug 2025 14:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5430
IP address blocks: 62.104.0.0/16 maxlen: 16
62.104.45.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.174.0/24 maxlen: 24
89.58.120.0/21 maxlen: 21
194.97.0.0/18 maxlen: 18
194.97.0.0/19 maxlen: 19
194.97.58.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.96.0/24 maxlen: 24
194.97.101.0/24 maxlen: 24
194.97.102.0/24 maxlen: 24
194.97.103.0/24 maxlen: 24
194.97.122.0/24 maxlen: 24
194.97.160.0/19 maxlen: 19
194.97.172.0/22 maxlen: 22
195.4.0.0/17 maxlen: 17
195.4.27.0/24 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.92.0/23 maxlen: 23
195.4.176.0/21 maxlen: 24
195.4.224.0/19 maxlen: 19
2001:748::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:47:81:90:a0:b1:e3:21:30:bc:bf:47:59:f8:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Aug 23 14:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d5bb08cc21e9b01442b2b0908cc55e7aa3345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:86:65:b5:44:fe:29:c8:97:02:9c:12:7c:
ae:ac:5c:a4:73:8e:f1:ae:7f:b8:08:9d:7b:d1:18:
55:f0:1f:3b:37:23:a2:a5:aa:d9:49:25:ed:8e:cd:
c2:3f:42:87:0f:d9:6b:d9:32:ed:0e:55:b9:78:d4:
1b:e4:2f:fc:f2:20:49:92:c3:95:ad:39:84:24:4b:
93:2b:68:58:c8:9f:4c:d2:92:b5:7d:3b:92:fc:12:
28:14:85:93:d9:a6:6e:94:e3:37:ba:ac:6a:cc:1a:
48:df:bb:cc:14:1d:93:8b:0e:8b:10:8a:36:38:dd:
c8:a8:47:1e:cd:e0:d2:8e:83:07:9c:94:ae:37:5c:
ea:a0:d4:e6:f1:9e:72:7e:8c:b6:36:88:5a:ba:ad:
2d:06:34:79:33:b0:37:cb:f1:6a:0f:48:1e:cf:46:
57:d6:23:fb:ff:01:d5:89:63:bb:a9:c3:3a:9a:7b:
b3:8c:fe:08:d2:6a:db:d5:95:6d:00:f6:42:4d:be:
5f:22:11:f2:a2:99:67:39:67:eb:d1:1e:d1:85:e6:
6a:3c:e3:18:b3:4b:ed:1c:7a:27:b4:00:f9:ff:7a:
0d:87:77:1d:a5:27:c5:d0:55:6d:51:a2:fb:0b:02:
9d:d7:21:8e:ad:18:21:47:1b:5f:66:78:1a:8a:50:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:BB:08:CC:21:E9:B0:14:42:B2:B0:90:8C:C5:5E:7A:A3:34:5A
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/F9W7CMwh6bAUQrKwkIzFXnqjNFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.58.120.0/21
194.97.0.0/18
194.97.96.0/19
194.97.160.0/19
195.4.0.0/17
195.4.176.0/21
195.4.224.0/19
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
07:05:fb:52:84:17:0a:02:dd:48:da:de:06:24:d9:3d:46:76:
dd:0c:77:15:3b:3e:56:6c:52:45:73:31:29:a3:29:de:95:94:
d4:63:86:b4:48:ec:8f:55:da:65:3a:dc:52:ec:78:c8:83:b0:
93:d1:8e:4d:eb:1d:7d:53:ad:db:43:ca:0b:b5:ba:2b:ca:02:
13:e5:7d:be:62:5b:ca:03:9f:b7:a9:c6:bf:90:22:d2:05:e8:
68:f5:63:ee:53:6e:1e:b9:20:ff:2f:23:b7:fa:9f:2b:32:bf:
52:1b:7f:e6:04:17:a2:6a:6c:d9:1b:63:e8:a3:cb:0a:58:75:
40:c5:46:a5:89:01:aa:7f:9d:86:82:51:99:be:21:25:df:21:
d0:83:72:5b:6c:d0:1a:e6:d2:b6:4c:db:11:ac:b3:5a:10:6e:
8b:31:aa:f9:1b:d1:4a:a9:cd:cf:34:83:31:c0:c4:66:df:f4:
96:29:ef:f0:6c:14:87:16:6a:a0:cf:4c:84:ef:ac:51:d8:19:
67:de:91:81:a1:17:c5:3a:33:d8:06:02:dc:8d:49:f7:44:f7:
a0:2d:79:12:fd:50:80:71:02:ab:9b:4e:6c:cb:18:7f:1b:b9:
da:05:82:bb:4e:bc:19:a0:69:ef:99:28:a1:1b:0a:34:a9:6d:
24:85:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:15:17 2025 by rpki-client