Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QuyJ0Z-a_Vo2KlMFwx0uUI4Pc7g.roa
File: QuyJ0Z-a_Vo2KlMFwx0uUI4Pc7g.roa (raw, json)
Hash identifier: CNK+9y7JIZcJkRrWftCJpU/N6bfG72JdohaJHbuuo18=
Subject key identifier: 42:EC:89:D1:9F:9A:FD:5A:36:2A:53:05:C3:1D:2E:50:8E:0F:73:B8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199B8B03AF87BC652C3F493029B3A144CC2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QuyJ0Z-a_Vo2KlMFwx0uUI4Pc7g.roa
Signing time: Mon 06 Oct 2025 08:43:01 +0000
ROA not before: Mon 06 Oct 2025 08:43:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 77.107.95.0/24 maxlen: 24
82.152.83.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
217.144.158.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:b0:3a:f8:7b:c6:52:c3:f4:93:02:9b:3a:14:4c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 6 08:43:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42ec89d19f9afd5a362a5305c31d2e508e0f73b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:df:6c:20:47:8c:e3:7c:a2:2d:cf:60:6f:
05:3e:fe:a0:8b:bc:48:06:b1:27:b2:83:12:11:8c:
48:39:ae:73:33:07:67:f9:d5:3f:f7:c1:61:32:11:
01:1b:8d:e0:ba:25:cc:50:08:4c:18:3b:7b:e5:c5:
81:08:90:55:ef:76:5b:a4:ae:66:86:df:9e:62:02:
c9:3a:fe:1b:0b:e0:c0:46:d4:27:90:9e:ac:5b:d8:
b3:30:cd:93:1b:97:fc:df:88:3a:f5:b4:22:d1:ff:
76:ba:ca:fd:46:f6:66:1b:cb:54:c0:fb:49:a6:68:
3c:ff:ce:4a:e8:04:67:60:fc:68:c1:48:bd:6d:30:
05:b3:ba:05:c0:37:e2:61:81:8d:9c:e0:fd:a2:f4:
71:0b:07:87:99:b7:9a:31:75:59:66:56:4b:06:1f:
23:71:94:9b:e4:3d:56:cb:cb:17:5d:65:d6:70:7b:
04:34:d0:83:da:59:83:48:af:95:bb:b7:a2:48:1a:
e9:ce:85:dd:22:4c:50:53:ab:02:97:39:28:02:1b:
d4:c3:42:88:ae:b6:fa:1a:83:e1:a0:d2:80:75:9f:
6c:26:9e:07:ed:0a:94:fb:9d:a5:36:b9:77:be:f1:
f1:9f:b5:5c:b8:33:8b:bb:22:8f:ec:b7:16:08:1c:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:89:D1:9F:9A:FD:5A:36:2A:53:05:C3:1D:2E:50:8E:0F:73:B8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QuyJ0Z-a_Vo2KlMFwx0uUI4Pc7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.95.0/24
82.152.83.0/24
82.152.142.0/24
89.213.104.0/24
89.213.123.0/24
213.210.52.0/23
217.144.158.0/24
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c2:e5:3c:14:a1:84:bc:0b:03:d5:1d:13:6e:1b:6d:98:80:
59:ab:0c:74:ce:67:4d:b6:3f:18:62:11:0f:20:9e:f3:c3:a6:
19:a7:18:0d:11:c1:35:1b:a7:63:10:13:a2:47:7d:89:1a:22:
e2:8b:12:ad:79:ad:91:6c:a5:bd:85:51:4c:33:ed:af:6f:75:
fe:0a:4b:3c:07:b7:6c:d0:8a:15:f6:4f:ff:02:8d:24:8f:47:
5d:f4:cf:64:f5:1c:d0:a1:9e:f0:27:d4:e0:90:1c:f0:93:fc:
80:8f:08:e1:38:a8:c2:5b:5b:fc:8b:29:aa:c7:32:b9:e2:d1:
18:7a:6f:5e:d0:56:b7:31:27:3c:60:8c:04:01:1b:52:6e:61:
95:89:6b:0a:98:14:18:6d:88:1e:06:a5:55:04:28:74:d5:77:
55:5f:33:9b:16:71:26:49:27:b5:f6:21:ff:f8:17:f0:35:15:
83:f8:b6:94:36:45:43:54:67:4c:d3:88:19:c8:dc:78:d3:02:
ee:77:60:68:d2:11:a0:ae:5f:06:af:10:ac:c6:8c:ad:bc:89:
99:8a:59:29:47:b2:df:c8:b5:1e:66:54:f0:76:9d:b5:60:50:
1c:61:6f:6c:05:bc:0c:b4:89:fa:75:eb:24:72:02:f1:be:f8:
fe:f9:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:03 2025 by rpki-client