Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa
File: lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa (raw, json)
Hash identifier: o+KPskkXXJU6m9owbhikJKpLSsQPEnvEdVWpnWT3wq0=
Subject key identifier: 94:9D:59:0E:B7:17:58:AC:9A:22:08:7B:93:7C:25:45:68:84:E0:A2
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0198082E4E2C2E3557E77B8413FB40F36ED4
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa
Signing time: Mon 14 Jul 2025 09:05:09 +0000
ROA not before: Mon 14 Jul 2025 09:05:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 62.220.112.0/21 maxlen: 21
62.220.113.0/24 maxlen: 24
62.220.116.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
81.12.0.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 23
81.12.60.0/22 maxlen: 24
81.12.64.0/18 maxlen: 24
81.12.95.0/24 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.56.0/21 maxlen: 24
87.107.64.0/22 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.92.0/22 maxlen: 24
87.107.100.0/22 maxlen: 24
87.107.136.0/21 maxlen: 24
87.107.148.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
87.107.176.0/21 maxlen: 24
87.107.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:2e:4e:2c:2e:35:57:e7:7b:84:13:fb:40:f3:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 14 09:05:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949d590eb71758ac9a22087b937c25456884e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:dc:6e:bc:d8:e7:70:2d:4f:12:e4:2f:d3:
2e:c3:0e:65:8e:e8:ee:3c:51:87:41:fe:91:6d:cb:
db:73:0f:ae:ee:68:62:15:5e:41:36:cc:c2:e1:46:
b1:c4:ba:2c:18:6f:71:63:28:f4:65:15:fb:fe:3f:
80:6f:fe:e4:c1:9e:f1:4b:0b:68:86:eb:a8:86:aa:
4b:32:7c:7d:9b:9a:b5:83:33:4c:f8:0f:9f:27:07:
c5:9f:47:4d:e3:11:be:33:20:d2:32:77:08:95:fb:
3d:fd:a4:a4:c8:37:63:f2:c1:10:68:f4:00:89:1d:
19:fb:fa:7b:fe:0f:9d:19:07:06:df:d9:84:aa:f9:
4d:1d:4f:61:d7:81:be:37:a9:56:0e:bc:f7:31:d4:
20:cc:6f:40:d4:6e:a5:b6:38:b3:bb:e2:e8:05:59:
18:f5:54:2f:25:d0:2b:8d:3c:e1:a5:69:62:87:d1:
bb:c3:7a:f0:db:3e:cf:75:89:42:8e:c5:ef:2e:ac:
70:34:f6:b1:cf:0a:55:73:40:c5:9e:61:73:4e:bd:
1d:bf:54:0a:4c:04:6c:ab:35:fe:9f:6b:b6:08:7f:
cc:10:11:98:6e:a9:59:7f:15:76:06:a4:01:c1:94:
5c:6a:e6:c0:fb:52:37:43:23:53:f0:83:15:cd:c8:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:59:0E:B7:17:58:AC:9A:22:08:7B:93:7C:25:45:68:84:E0:A2
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.56.0-87.107.67.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0/22
87.107.136.0/21
87.107.148.0/22
87.107.156.0/22
87.107.176.0-87.107.187.255
Signature Algorithm: sha256WithRSAEncryption
0c:63:fa:74:3c:4c:c9:bd:c2:25:b3:e5:18:eb:4e:33:e5:2b:
50:e8:3f:44:f5:9c:25:11:fd:1f:62:34:b4:1b:f0:86:eb:4a:
77:3e:6b:f2:df:88:e0:08:b5:3e:b9:cf:61:73:20:15:dc:00:
7d:69:8f:02:17:20:f1:81:25:e1:ee:68:c2:2f:ed:07:49:24:
86:e0:ea:9d:6a:1d:0f:77:57:9e:b0:d8:8d:55:6f:40:2b:c8:
0a:0d:d7:29:0c:06:e8:0f:fd:8f:ec:6e:a0:aa:c4:b2:92:4e:
2c:a0:76:8d:49:83:34:d8:7e:4c:5d:26:95:5d:0c:3c:53:81:
b0:fb:e9:07:6b:be:a6:c8:d6:37:fe:13:12:94:05:42:da:4a:
9f:d6:a2:e1:10:c0:d7:10:8f:8d:67:b0:2e:9c:f0:8b:65:72:
7f:90:1a:0a:6a:67:c7:af:08:48:e5:39:43:16:e6:4d:80:89:
ad:e6:87:13:52:76:2a:89:00:d3:92:e9:6e:20:b0:ac:38:8c:
44:8c:66:ce:5d:1c:c2:78:39:87:b0:f1:8a:33:88:8c:34:77:
93:e4:c3:e4:bb:d7:df:d6:8b:f9:d0:53:5c:15:a1:ca:1d:b6:
c8:78:ef:76:f7:17:ed:f8:54:30:00:81:3b:1a:51:e0:1b:94:
f2:52:42:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:16 2025 by rpki-client