Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/GtM4pSsiK5eSfyxXfFff62QmvIQ.roa
File: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (raw, json)
Hash identifier: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=
Subject key identifier: 1A:D3:38:A5:2B:22:2B:97:92:7F:2C:57:7C:57:DF:EB:64:26:BC:84
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 0197F85104E4B9AF25A1A6B8AB1C0B1678CE
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/GtM4pSsiK5eSfyxXfFff62QmvIQ.roa
Signing time: Fri 11 Jul 2025 07:09:08 +0000
ROA not before: Fri 11 Jul 2025 07:09:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42334
IP address blocks: 62.84.64.0/24 maxlen: 24
62.84.65.0/24 maxlen: 24
62.84.66.0/24 maxlen: 24
62.84.67.0/24 maxlen: 24
62.84.68.0/24 maxlen: 24
62.84.69.0/24 maxlen: 24
62.84.70.0/24 maxlen: 24
62.84.71.0/24 maxlen: 24
62.84.72.0/24 maxlen: 24
62.84.73.0/24 maxlen: 24
62.84.74.0/24 maxlen: 24
62.84.75.0/24 maxlen: 24
62.84.76.0/24 maxlen: 24
62.84.77.0/24 maxlen: 24
62.84.78.0/24 maxlen: 24
62.84.79.0/24 maxlen: 24
62.84.80.0/24 maxlen: 24
62.84.81.0/24 maxlen: 24
62.84.82.0/24 maxlen: 24
62.84.83.0/24 maxlen: 24
62.84.84.0/24 maxlen: 24
62.84.85.0/24 maxlen: 24
62.84.86.0/24 maxlen: 24
62.84.87.0/24 maxlen: 24
62.84.88.0/24 maxlen: 24
62.84.89.0/24 maxlen: 24
62.84.90.0/24 maxlen: 24
62.84.91.0/24 maxlen: 24
62.84.92.0/24 maxlen: 24
62.84.93.0/24 maxlen: 24
62.84.94.0/24 maxlen: 24
62.84.95.0/24 maxlen: 24
185.114.252.0/24 maxlen: 24
185.114.253.0/24 maxlen: 24
185.114.254.0/24 maxlen: 24
185.114.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:51:04:e4:b9:af:25:a1:a6:b8:ab:1c:0b:16:78:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jul 11 07:09:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ad338a52b222b97927f2c577c57dfeb6426bc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:c7:cc:0c:73:df:df:6f:ca:8d:ce:ba:a1:
3a:38:da:85:f5:8e:20:43:7d:1d:7c:52:33:e0:c0:
38:90:ce:95:ea:e0:81:43:10:5b:c7:0f:5a:85:b0:
24:08:e8:a2:0a:5b:00:86:0f:1b:26:57:ce:cf:ec:
1f:a4:23:e8:b2:10:99:86:76:39:bd:0f:c5:b3:11:
f0:24:7e:f3:04:bf:bb:ea:94:9c:29:9c:02:0c:82:
9c:1f:4f:bb:3e:39:41:3e:43:0d:8c:fb:0c:5d:de:
43:c2:ba:3e:2f:08:cf:ef:be:81:d2:37:40:87:49:
77:fc:95:fa:fc:f7:16:54:c2:6e:3e:eb:c2:b7:8a:
25:6b:d8:3a:8a:cd:82:9b:f4:cf:d0:87:37:ad:56:
dd:09:6e:81:be:f3:90:6d:c0:70:4c:cd:c8:9a:e9:
04:62:28:57:21:f2:c6:ad:9f:dd:9c:30:bc:8a:60:
bd:58:5a:8a:b0:7b:81:61:25:99:56:18:e1:09:bc:
0d:7b:fb:a7:7f:57:65:72:d0:fd:29:b6:6d:de:00:
63:8f:fe:cb:c3:41:1c:57:a2:ae:18:ff:24:7d:63:
2d:e1:ac:8d:50:a4:c2:2f:cf:ce:c4:10:c6:6a:24:
0f:54:5a:ab:c6:6d:16:fc:a3:89:c1:78:f5:06:06:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D3:38:A5:2B:22:2B:97:92:7F:2C:57:7C:57:DF:EB:64:26:BC:84
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/GtM4pSsiK5eSfyxXfFff62QmvIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.64.0/19
185.114.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b0:31:ae:c4:c3:8e:ba:19:ad:00:d8:04:dd:fe:33:75:89:
24:e6:fe:dd:89:bf:cf:6a:ef:75:4f:8a:f8:71:e2:df:3d:e8:
37:46:b1:b7:34:9f:84:aa:1c:4e:ee:ae:68:7b:ec:4c:0e:82:
f1:9b:17:47:9f:db:35:e0:eb:b3:ed:10:62:8b:e6:b9:51:a9:
48:86:a6:be:a1:b7:4f:b0:6f:f6:2d:7f:38:7e:10:92:f8:15:
6a:83:71:7b:5e:21:dd:2b:e4:ca:c0:d5:4c:f5:fd:1d:1e:df:
e8:ca:bf:ed:c6:15:40:32:53:40:20:dc:8f:69:02:4e:db:42:
e3:86:06:00:23:02:bf:b3:22:b0:2a:d2:18:27:bb:47:be:cc:
11:ff:4f:fd:5a:73:0a:78:e7:95:6b:eb:92:15:cb:44:bd:36:
b6:9e:61:3c:1b:4d:fc:fb:4a:d6:3f:00:68:2f:8a:24:fc:54:
a4:b2:8f:21:b3:1b:1c:72:97:0a:01:51:f4:31:40:9a:dc:9f:
30:95:23:48:ca:42:47:92:24:85:57:71:20:0f:d7:17:4d:b2:
90:67:88:42:f8:49:bf:c0:bf:ef:65:b2:fa:ce:6b:9b:10:d5:
26:52:cc:d4:80:e8:59:b1:e3:ea:5e:24:3b:3d:c9:90:fb:f0:
b0:66:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:16:30 2025 by rpki-client