Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a8Cqhe1uQVWw7-czyiz6CpSXOvA.roa
File: a8Cqhe1uQVWw7-czyiz6CpSXOvA.roa (raw, json)
Hash identifier: Uzr3z4sf9ZW+bzlb8Tw1NHNl/lTUEw6rXPIr1H9nNFg=
Subject key identifier: 6B:C0:AA:85:ED:6E:41:55:B0:EF:E7:33:CA:2C:FA:0A:94:97:3A:F0
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0197ED1D97EA20DE25D97476ECEEE78248D6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a8Cqhe1uQVWw7-czyiz6CpSXOvA.roa
Signing time: Wed 09 Jul 2025 02:57:08 +0000
ROA not before: Wed 09 Jul 2025 02:57:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201776
IP address blocks: 2.63.144.0/20 maxlen: 20
2.63.176.0/20 maxlen: 20
2.63.224.0/20 maxlen: 20
46.61.150.0/24 maxlen: 24
46.61.245.0/24 maxlen: 24
84.42.92.0/24 maxlen: 24
84.42.93.0/24 maxlen: 24
84.42.94.0/24 maxlen: 24
84.42.95.0/24 maxlen: 24
85.174.144.0/20 maxlen: 24
92.50.204.0/23 maxlen: 23
92.50.204.0/24 maxlen: 24
92.50.205.0/24 maxlen: 24
176.119.169.0/24 maxlen: 24
176.119.170.0/24 maxlen: 24
176.119.171.0/24 maxlen: 24
176.119.172.0/24 maxlen: 24
176.208.74.0/24 maxlen: 24
176.211.120.0/22 maxlen: 22
188.128.76.0/23 maxlen: 24
188.128.76.0/24 maxlen: 24
188.128.77.0/24 maxlen: 24
188.254.122.0/23 maxlen: 24
188.254.122.0/24 maxlen: 24
188.254.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:1d:97:ea:20:de:25:d9:74:76:ec:ee:e7:82:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 9 02:57:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc0aa85ed6e4155b0efe733ca2cfa0a94973af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:22:c6:86:af:37:a9:82:2e:99:47:fd:bb:
fb:99:45:de:eb:0d:df:23:c7:00:86:1f:28:17:5f:
6d:58:ed:b8:aa:95:ea:f0:ee:a2:bb:3a:17:f3:31:
c9:53:93:89:80:80:4e:2c:fd:46:1d:1a:23:b8:16:
cb:ad:06:13:c3:c7:76:39:62:83:12:2f:f9:96:dd:
4e:25:44:e4:d2:10:ad:35:30:5c:3f:f5:6f:1d:ce:
10:c4:80:d3:b3:34:a7:11:19:7d:e3:5b:68:66:2c:
f3:0b:19:c2:17:eb:1f:5a:5b:d5:c5:bd:5c:7b:e9:
1e:ac:05:01:2e:b2:96:c4:c7:a9:e0:a7:e0:a2:a3:
d4:9e:77:6c:b6:26:45:76:01:30:38:c3:b8:08:96:
24:69:82:aa:a5:1c:97:e7:c0:73:3a:0d:e2:d2:0a:
59:47:45:6a:d3:4a:9c:b1:25:18:99:7e:73:2f:96:
0c:18:ac:9a:22:d0:b4:d5:cd:4f:b4:da:b0:fb:d7:
43:bc:35:68:aa:07:5d:89:fe:ca:a7:fb:5a:e8:31:
15:73:2b:b0:92:8f:38:bd:a1:89:fe:8d:cd:e2:d6:
42:ce:e4:34:91:6f:67:73:7e:01:f0:eb:05:b3:b4:
9b:0b:bb:0f:af:e4:01:87:21:d5:ce:69:62:8f:e0:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:AA:85:ED:6E:41:55:B0:EF:E7:33:CA:2C:FA:0A:94:97:3A:F0
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a8Cqhe1uQVWw7-czyiz6CpSXOvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.63.144.0/20
2.63.176.0/20
2.63.224.0/20
46.61.150.0/24
46.61.245.0/24
84.42.92.0/22
85.174.144.0/20
92.50.204.0/23
176.119.169.0-176.119.172.255
176.208.74.0/24
176.211.120.0/22
188.128.76.0/23
188.254.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:f0:42:b1:00:dc:f0:7a:d3:0e:9c:ba:1d:22:03:65:33:45:
bb:20:e5:c9:a9:7b:5e:42:a2:4c:48:7a:53:ff:43:ab:76:6d:
1b:b9:f1:21:0a:7b:ab:ff:d1:b8:f2:a2:39:0c:35:e3:cf:4d:
52:d8:0f:02:5f:e9:9c:ec:aa:1b:3a:b5:0b:ef:24:74:67:cf:
0e:85:a5:31:ee:7c:3a:60:fd:06:a8:cb:96:aa:f5:cc:c5:c0:
d4:3b:34:19:3d:df:92:36:d3:8e:70:f7:83:2e:83:77:7b:b4:
a1:b0:43:83:cf:28:06:8b:9e:a6:3e:9e:b2:70:0b:06:a0:13:
c6:c6:62:66:71:47:90:c9:3f:c1:1a:5b:78:bd:85:95:74:ff:
d4:fd:be:67:86:16:86:9b:98:9f:5c:ab:a5:c2:8f:02:82:6a:
a1:9d:d4:59:0d:73:40:47:cc:c5:0e:ac:bb:6d:04:05:dc:92:
b3:88:ab:e7:ab:af:28:59:b0:49:fe:30:1b:68:26:63:2a:c3:
21:77:5f:52:55:d4:65:86:13:4a:8f:ae:97:6f:de:91:65:f7:
ca:e5:7c:94:7f:5b:93:8c:40:31:d1:0d:8e:b3:3b:49:37:c5:
5c:07:89:14:8f:3a:c1:6c:97:6a:cd:0f:2f:18:7a:60:1d:c1:
a9:77:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:09:30 2025 by rpki-client