Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/egq6xFpWrLpO_u50yZL8HaDkVzk.roa
File: egq6xFpWrLpO_u50yZL8HaDkVzk.roa (raw, json)
Hash identifier: hw9YCYHpnSpyNNxfxUiBMiNI5Kne7OkazLDcgOYFclU=
Subject key identifier: 7A:0A:BA:C4:5A:56:AC:BA:4E:FE:EE:74:C9:92:FC:1D:A0:E4:57:39
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 0197E5E8CD9857CD9A7581E850B33CD77BCA
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/egq6xFpWrLpO_u50yZL8HaDkVzk.roa
Signing time: Mon 07 Jul 2025 17:22:08 +0000
ROA not before: Mon 07 Jul 2025 17:22:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
85.158.110.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.221.222.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:e8:cd:98:57:cd:9a:75:81:e8:50:b3:3c:d7:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jul 7 17:22:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0abac45a56acba4efeee74c992fc1da0e45739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:0a:45:e7:0b:0c:9b:6a:d7:5a:2a:93:50:
e0:13:9b:0c:6a:99:22:ac:dc:ea:56:ef:ca:e5:53:
4d:b2:ec:ed:7f:67:c0:ce:4d:ad:89:ba:74:6c:1d:
c2:5d:aa:cf:04:79:eb:6c:4e:fe:de:06:f2:2d:08:
75:b0:24:50:86:7d:6a:dc:ae:c8:a6:fc:bb:17:54:
74:8b:da:70:16:11:ba:54:93:29:be:f2:74:ff:86:
17:ec:56:af:4f:9c:27:a5:89:88:6f:6d:68:36:a9:
c6:94:87:07:c5:07:46:3e:ce:01:9d:c5:64:b8:f1:
a1:4a:4a:b1:d1:42:8e:2e:e4:0d:2a:ef:c8:7d:da:
1a:a6:88:9f:06:ce:75:d2:82:ce:4a:7f:72:38:65:
e3:ca:5a:69:0c:f8:90:b6:bb:b7:0c:32:1c:53:c2:
b7:62:15:50:e0:5e:db:9b:5f:f8:7e:bd:a9:72:f4:
bf:94:48:83:06:03:05:0d:d3:aa:d3:ad:f1:b6:e0:
8f:48:cf:4d:cf:4a:bc:36:e3:0c:eb:10:64:88:88:
02:a5:93:71:69:05:c8:31:a6:bd:36:4b:22:8e:df:
80:e7:25:f0:78:97:55:12:06:c0:e8:d2:8e:6d:4e:
46:ca:26:65:22:d9:ce:85:22:de:90:34:f8:02:93:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:BA:C4:5A:56:AC:BA:4E:FE:EE:74:C9:92:FC:1D:A0:E4:57:39
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/egq6xFpWrLpO_u50yZL8HaDkVzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
85.158.108.0-85.158.110.255
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.221.222.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:b9:c7:e7:56:dd:68:03:06:82:92:bf:6c:ff:92:eb:83:da:
a4:76:ea:89:5f:07:5d:07:dc:9b:f6:30:49:ed:e5:22:38:db:
7b:1c:f3:e6:35:0a:4b:83:e9:03:7d:8d:07:e3:ca:13:6a:4f:
03:9d:7f:df:3a:ce:84:32:7d:7b:5e:4c:48:79:10:d5:0e:99:
cb:71:12:91:71:b2:5e:08:a0:9c:89:f4:9d:d5:f0:28:60:95:
7a:6a:a9:15:22:af:03:70:4f:36:c3:a0:e4:ac:f2:90:2d:be:
02:bc:de:e6:f3:8d:58:2b:75:80:78:66:ac:d0:95:7f:34:d8:
c6:fd:3e:92:72:4d:8a:7a:ad:0e:6c:13:59:be:c1:35:c2:c6:
79:27:3e:56:a7:e2:72:84:b2:60:cf:97:15:87:4f:9e:2a:c6:
dc:a6:cd:86:ef:4a:8e:88:cd:ba:d1:0a:c8:57:5f:cb:d1:c0:
ec:68:c9:c1:fc:c5:20:84:c7:e7:51:d9:bb:56:c5:61:f4:88:
3a:cf:b3:15:93:c1:c6:de:63:4f:7c:da:11:1a:21:ad:11:8f:
b6:d9:ee:fb:ab:40:d1:2c:cf:a9:dd:1f:d8:d9:df:62:67:29:
8c:bc:12:26:b0:66:22:0f:d4:44:7a:70:9d:ae:87:ac:4e:7f:
ee:44:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:49 2025 by rpki-client