Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/qxAUvip_8lZbKoAfeyu3yfK1MRA.roa
File: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (raw, json)
Hash identifier: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=
Subject key identifier: AB:10:14:BE:2A:7F:F2:56:5B:2A:80:1F:7B:2B:B7:C9:F2:B5:31:10
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 01981DBB8643D58470BB208DF9FDE8D544D4
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/qxAUvip_8lZbKoAfeyu3yfK1MRA.roa
Signing time: Fri 18 Jul 2025 13:31:25 +0000
ROA not before: Fri 18 Jul 2025 13:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31252
IP address blocks: 37.233.0.0/18 maxlen: 32
87.248.160.0/19 maxlen: 32
89.28.0.0/17 maxlen: 32
89.28.21.0/24 maxlen: 32
89.28.69.0/24 maxlen: 24
91.216.97.0/24 maxlen: 24
95.65.0.0/17 maxlen: 32
178.18.32.0/20 maxlen: 32
178.168.0.0/17 maxlen: 32
185.17.224.0/22 maxlen: 32
185.70.188.0/22 maxlen: 32
185.175.80.0/22 maxlen: 32
188.138.128.0/17 maxlen: 32
188.244.16.0/20 maxlen: 32
195.93.218.0/23 maxlen: 32
2a00:9900::/29 maxlen: 128
2a01:320::/29 maxlen: 128
2a0b:dd00::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:bb:86:43:d5:84:70:bb:20:8d:f9:fd:e8:d5:44:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Jul 18 13:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab1014be2a7ff2565b2a801f7b2bb7c9f2b53110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:1e:b4:55:e5:36:4d:55:bb:21:cf:d4:08:
fa:47:de:53:d5:03:63:39:a4:ba:c0:7b:ba:eb:1c:
dc:5e:f6:5b:86:23:f5:fd:15:12:92:b4:ef:46:55:
ce:57:bd:20:cc:6b:6b:24:0c:57:c4:ba:b9:8b:7a:
e5:90:cb:ce:9b:6a:91:b4:bc:a9:b3:bd:2f:04:12:
25:97:53:57:35:2f:da:da:67:ed:66:80:dd:29:2a:
5d:bd:4e:9e:ac:dd:b5:ad:3b:5e:97:e2:c3:b9:1d:
84:ea:14:28:2a:ad:04:06:34:29:c6:60:c0:dd:e8:
a3:66:04:db:17:06:60:d6:82:a4:d6:a0:97:c4:ba:
3b:0c:22:dd:28:75:f4:2a:41:ff:1b:5f:d3:68:0f:
12:1a:d9:c8:db:e7:eb:ee:6b:d9:d0:bd:25:63:6c:
b2:67:ce:da:a3:30:c3:d7:bf:98:51:51:ce:26:e0:
50:05:ee:13:fc:c6:f5:a9:84:92:f0:5f:cf:b8:6c:
cb:33:f8:74:7b:c2:58:a0:a9:e6:1e:96:6c:36:66:
04:0f:53:14:2d:7a:2b:f5:88:51:3d:86:83:29:99:
7d:ec:c4:fc:9c:9f:5c:48:57:52:45:28:0c:b8:98:
a0:93:a8:d7:c6:3a:ba:17:02:33:fb:0f:13:66:00:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:14:BE:2A:7F:F2:56:5B:2A:80:1F:7B:2B:B7:C9:F2:B5:31:10
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/qxAUvip_8lZbKoAfeyu3yfK1MRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.0.0/18
87.248.160.0/19
89.28.0.0/17
91.216.97.0/24
95.65.0.0/17
178.18.32.0/20
178.168.0.0/17
185.17.224.0/22
185.70.188.0/22
185.175.80.0/22
188.138.128.0/17
188.244.16.0/20
195.93.218.0/23
IPv6:
2a00:9900::/29
2a01:320::/29
2a0b:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:84:a9:5c:84:d7:e6:41:d3:8b:dd:f3:71:ce:9b:92:d5:e9:
0a:43:20:18:07:da:dc:b4:0e:62:fe:80:d8:87:9c:d1:fe:0d:
d1:7d:aa:37:6f:76:b4:dd:31:ae:34:a1:ee:ea:be:53:8c:29:
0e:97:d4:ab:b3:34:6a:43:e5:da:47:7a:0d:b5:0c:62:80:5f:
03:7e:14:84:9b:5a:7b:54:54:35:be:66:a3:b4:bd:2c:7b:e2:
45:5c:45:1b:bc:5b:23:fd:e0:d0:27:cf:c9:fa:ec:3e:e7:bb:
58:83:77:f1:64:49:d9:71:91:09:b4:19:00:6c:37:ef:83:d5:
03:04:5b:9c:6e:5b:f7:47:90:9d:05:f5:70:2a:48:c5:6d:77:
eb:14:12:b8:5a:d1:6f:ea:da:a6:2c:c4:1c:a2:ee:47:74:bf:
d0:e7:d3:1f:f8:a8:7a:3e:af:b4:77:5b:45:56:74:25:a9:10:
a1:b4:fb:da:cb:08:6e:cb:eb:d6:d5:19:4d:3b:9e:1c:90:bc:
85:f1:59:77:f2:e5:04:e7:eb:89:44:85:48:86:da:de:c3:39:
86:da:6c:b2:57:d0:20:60:75:f9:e7:69:1e:62:53:49:c9:4e:
f8:ab:c6:69:8d:0d:50:09:ee:d6:12:63:c3:68:84:e6:38:37:
54:4c:18:ab
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAZgdu4ZD1YRwuyCN+f3o1UTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3
OTc1ZTIwHhcNMjUwNzE4MTMzMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjEwMTRiZTJhN2ZmMjU2NWIyYTgwMWY3YjJiYjdjOWYyYjUzMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2YetFXlNk1VuyHP1Aj6R95T1QNj
OaS6wHu66xzcXvZbhiP1/RUSkrTvRlXOV70gzGtrJAxXxLq5i3rlkMvOm2qRtLyp
s70vBBIll1NXNS/a2mftZoDdKSpdvU6erN21rTtel+LDuR2E6hQoKq0EBjQpxmDA
3eijZgTbFwZg1oKk1qCXxLo7DCLdKHX0KkH/G1/TaA8SGtnI2+fr7mvZ0L0lY2yy
Z87aozDD17+YUVHOJuBQBe4T/Mb1qYSS8F/PuGzLM/h0e8JYoKnmHpZsNmYED1MU
LXor9YhRPYaDKZl97MT8nJ9cSFdSRSgMuJigk6jXxjq6FwIz+w8TZgAGyQIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFKsQFL4qf/JWWyqAH3srt8nytTEQMB8GA1UdIwQY
MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt
YTI1ZTA3Y2VhMmMwLzEvcXhBVXZpcF84bFpiS29BZmV5dTN5ZksxTVJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw
LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEBiXpAAME
BVf4oAMEB1kcAAMEAFvYYQMEB19BAAMEBLISIAMEB7KoAAMEArkR4AMEArlGvAME
ArmvUAMEB7yKgAMEBLz0EAMEAcNd2jAbBAIAAjAVAwUDKgCZAAMFAyoBAyADBQMq
C90AMA0GCSqGSIb3DQEBCwUAA4IBAQAPhKlchNfmQdOL3fNxzpuS1ekKQyAYB9rc
tA5i/oDYh5zR/g3Rfao3b3a03TGuNKHu6r5TjCkOl9SrszRqQ+XaR3oNtQxigF8D
fhSEm1p7VFQ1vmajtL0se+JFXEUbvFsj/eDQJ8/J+uw+57tYg3fxZEnZcZEJtBkA
bDfvg9UDBFucblv3R5CdBfVwKkjFbXfrFBK4WtFv6tqmLMQcou5HdL/Q59Mf+Kh6
Pq+0d1tFVnQlqRChtPvaywhuy+vW1RlNO54ckLyF8Vl38uUE5+uJRIVIhtrewzmG
2myyV9AgYHX552keYlNJyU74q8ZpjQ1QCe7WEmPDaITmODdUTBir
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:14 2025 by rpki-client