Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LaajQT8UwBWFNaRi-jIojBq0WyA.roa
File: LaajQT8UwBWFNaRi-jIojBq0WyA.roa (raw, json)
Hash identifier: ZkZjakVN6aPN1d4jYMrA0iD1EVTfF2LyjXQ1E06pZwI=
Subject key identifier: 2D:A6:A3:41:3F:14:C0:15:85:35:A4:62:FA:32:28:8C:1A:B4:5B:20
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01982CDD1F25C63EBC065574F6314DC1CF45
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LaajQT8UwBWFNaRi-jIojBq0WyA.roa
Signing time: Mon 21 Jul 2025 12:02:25 +0000
ROA not before: Mon 21 Jul 2025 12:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.0.0/21 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.206.0/24 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:dd:1f:25:c6:3e:bc:06:55:74:f6:31:4d:c1:cf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 21 12:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2da6a3413f14c0158535a462fa32288c1ab45b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:7b:c3:c6:63:ac:9f:3d:c0:3f:82:3b:3b:
8c:bd:f4:8c:11:58:15:37:7c:6a:53:64:52:ef:2a:
34:9b:13:9c:e9:85:f7:30:db:c1:68:11:8c:61:b1:
e7:14:8b:db:16:e9:ca:14:d6:a0:2d:8e:5f:f1:2f:
ca:5e:f5:57:01:8d:c6:e8:ab:dd:87:d9:f6:2b:ed:
4b:40:ca:c0:cf:3a:98:88:4c:15:dd:7b:69:d5:bb:
c9:98:57:af:26:9c:bc:19:c2:b5:e4:e8:56:1c:ff:
e1:cd:3d:69:06:e1:35:12:fd:af:a0:28:98:2b:14:
b4:ad:28:c6:dd:67:69:68:fb:6f:6c:3b:e9:3a:7b:
cd:39:81:f2:f7:a7:fe:52:c5:2a:5d:f6:79:e2:d9:
fe:63:0e:0d:37:57:a8:0e:13:0c:ef:71:e6:8e:08:
f6:94:a0:c2:06:a0:92:39:6e:aa:60:8e:52:1c:a4:
2e:c2:f2:73:55:cd:69:f2:e3:19:0e:bd:11:d7:b7:
e8:1a:e2:42:f0:96:c6:28:4a:68:c5:3e:9b:77:15:
92:6d:70:35:89:75:5a:3f:26:9f:da:ad:5e:44:83:
e6:42:65:40:c8:e7:73:be:8b:0a:40:29:b3:e4:76:
5a:35:35:83:ed:8a:f7:28:93:00:d2:1a:27:16:25:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:A3:41:3F:14:C0:15:85:35:A4:62:FA:32:28:8C:1A:B4:5B:20
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LaajQT8UwBWFNaRi-jIojBq0WyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0-62.220.125.255
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.0.0/21
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.173.0/24
87.107.188.0/23
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
05:9a:33:da:e1:93:64:bc:a4:20:dd:97:2b:ae:cc:37:21:3c:
8c:21:dd:fc:a9:78:c7:6a:91:c2:8a:76:e0:bb:93:6e:11:d1:
4f:43:86:19:84:c6:06:77:ac:ea:7a:a7:e5:4b:50:26:79:f4:
26:46:20:d8:67:f9:53:77:17:a1:74:e1:0f:bf:86:36:35:6c:
c1:de:7c:11:91:91:c8:c8:4e:52:4b:9c:dd:84:f4:6c:f8:31:
ed:9c:14:40:6a:3b:60:cf:c8:95:0e:17:2e:cf:b3:ac:fe:16:
07:2e:ef:f0:84:91:50:e4:c7:b0:2e:66:73:eb:0f:62:14:e9:
a6:2b:47:14:2a:72:be:06:ed:69:da:30:86:97:a2:f9:00:78:
7b:0e:dc:a8:21:f9:4f:88:0f:bf:27:a6:6c:dd:64:f4:15:3b:
b8:eb:e3:3a:70:d3:c1:02:20:0f:35:63:63:59:33:94:f7:7a:
d7:df:9d:ff:be:1a:f7:7d:b9:0f:85:06:17:29:41:23:39:a3:
15:8d:35:32:b5:47:aa:9a:71:26:80:ee:c8:3a:e8:92:ef:f5:
8f:10:30:65:e9:86:ea:f0:a4:9d:49:03:ad:54:30:08:29:28:
47:6e:68:49:50:6c:0f:36:be:5f:0d:a8:d4:1a:d3:fe:f2:41:
c8:fe:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:46:19 2025 by rpki-client