Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/QFguoxvoNV5o70jalR0A2VlXzXM.roa
File: QFguoxvoNV5o70jalR0A2VlXzXM.roa (raw, json)
Hash identifier: 2+UBeSRibvdK5AQUBHDMwTwKy4nvWwZ4jD+67wEJIBI=
Subject key identifier: 40:58:2E:A3:1B:E8:35:5E:68:EF:48:DA:95:1D:00:D9:59:57:CD:73
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 01983B5073A3D8D51F4C7425954D206DBD17
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/QFguoxvoNV5o70jalR0A2VlXzXM.roa
Signing time: Thu 24 Jul 2025 07:23:04 +0000
ROA not before: Thu 24 Jul 2025 07:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48065
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
178.52.0.0/21 maxlen: 21
178.52.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:50:73:a3:d8:d5:1f:4c:74:25:95:4d:20:6d:bd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 24 07:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40582ea31be8355e68ef48da951d00d95957cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e4:03:cd:a5:7d:9b:e5:58:db:3a:e5:bb:af:
88:2f:da:2e:97:db:91:f3:39:01:47:eb:69:6d:19:
14:82:d2:7e:96:db:74:9d:bc:a1:b8:13:2a:04:6b:
63:53:2c:b3:2a:a4:96:ba:af:5f:5b:31:98:7a:57:
58:6f:5f:f1:c8:24:b3:2c:1f:f1:ca:7e:40:78:8e:
67:1e:41:a5:8a:33:ee:63:6c:7b:a0:bb:5c:3b:e0:
ec:d3:7b:dc:e6:02:5c:e8:51:87:ad:ff:d3:1a:e8:
4a:b3:7b:ed:17:ef:c4:25:17:b3:87:a8:ab:45:39:
fa:8c:59:7d:e0:77:0f:f9:79:3f:10:f9:63:25:84:
b3:62:40:ea:96:c9:6a:0e:83:0a:8b:e4:d1:32:7a:
b5:0f:31:8c:bf:d9:ff:c8:8d:08:ac:c0:9c:f5:d8:
dd:49:b1:9f:c0:89:ad:b3:d3:6e:87:d3:62:c4:1d:
0b:e6:d5:cc:b4:51:eb:4a:44:e3:1b:bc:22:12:cf:
69:aa:0f:49:45:1a:bc:64:5a:be:25:e1:45:ed:d8:
0a:21:12:0c:4d:6e:ef:79:74:38:8d:19:eb:be:5b:
e8:ed:95:8d:03:37:59:12:16:f0:e3:02:55:5e:39:
99:4b:bb:2c:68:04:92:0c:71:cc:20:2f:15:bb:04:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:2E:A3:1B:E8:35:5E:68:EF:48:DA:95:1D:00:D9:59:57:CD:73
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/QFguoxvoNV5o70jalR0A2VlXzXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0/16
94.252.192.0/19
178.52.0.0/21
178.52.128.0/21
Signature Algorithm: sha256WithRSAEncryption
73:4a:03:b5:70:6d:8c:57:fa:ad:a2:a2:a1:27:83:77:84:f1:
4e:e4:a0:4a:8f:88:54:ec:7d:fc:65:1b:d9:ca:d5:de:cb:34:
dd:ae:c6:4e:14:f5:ea:54:dc:04:3c:99:a9:7b:b9:14:35:77:
5c:56:f2:ea:de:19:03:00:e8:59:3b:58:21:1d:e0:64:5f:0e:
72:ce:75:a6:a6:21:b7:a4:93:b1:6b:dd:f5:d3:03:22:27:9e:
13:73:06:46:84:95:5c:11:8a:43:90:dd:6a:e9:0b:f3:cf:9d:
df:74:77:77:cc:7d:d2:28:a8:e7:a6:c8:92:e9:81:61:86:39:
3e:9a:f2:ee:33:29:4e:6a:ed:06:6e:9e:82:45:1f:7c:98:14:
0f:71:01:fa:ca:72:79:71:15:42:84:21:ae:c0:81:a5:50:95:
e2:b7:9d:52:20:80:4f:60:f5:92:f7:f5:09:35:b2:f8:e5:27:
83:d1:5d:17:6f:b8:ee:dc:4e:8e:a7:a5:07:04:1f:83:3f:11:
1f:a6:5d:38:91:3b:57:a2:38:3b:2a:34:28:5a:1f:f3:f8:16:
72:7b:81:ba:8a:30:7a:fa:8f:d2:50:30:96:0b:73:ed:02:cb:
65:39:49:02:04:bc:04:f1:56:2a:49:95:12:aa:25:8e:05:cf:
f5:f5:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:36 2025 by rpki-client