Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/sdX-WW-SMZsUKhNLOInTQr1OQH0.roa
File: sdX-WW-SMZsUKhNLOInTQr1OQH0.roa (raw, json)
Hash identifier: GFGmOnjKHWP8QsStSQSTkPSRBhfE3uiPkW6QrApP5Xk=
Subject key identifier: B1:D5:FE:59:6F:92:31:9B:14:2A:13:4B:38:89:D3:42:BD:4E:40:7D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0197354C89BC4AC3D29BD0EF25D95FD41B4C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/sdX-WW-SMZsUKhNLOInTQr1OQH0.roa
Signing time: Tue 03 Jun 2025 10:18:17 +0000
ROA not before: Tue 03 Jun 2025 10:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 62.84.16.0/20 maxlen: 20
79.135.141.0/24 maxlen: 24
80.81.47.0/24 maxlen: 24
83.223.131.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
83.223.140.0/24 maxlen: 24
83.223.152.0/24 maxlen: 24
83.223.156.0/24 maxlen: 24
83.223.158.0/24 maxlen: 24
85.254.8.0/24 maxlen: 24
85.254.9.0/24 maxlen: 24
85.254.11.0/24 maxlen: 24
85.254.12.0/24 maxlen: 24
85.254.13.0/24 maxlen: 24
85.254.14.0/24 maxlen: 24
85.254.15.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
85.254.63.0/24 maxlen: 24
85.254.117.0/24 maxlen: 24
85.254.118.0/23 maxlen: 23
91.190.37.0/24 maxlen: 24
159.148.143.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
217.24.64.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:4c:89:bc:4a:c3:d2:9b:d0:ef:25:d9:5f:d4:1b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 3 10:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d5fe596f92319b142a134b3889d342bd4e407d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:91:56:da:77:c1:a4:3c:13:ca:52:e0:c6:
f8:10:36:5a:0c:b6:ac:1a:93:47:ca:06:4d:72:2a:
49:4b:12:66:cb:61:fd:1e:74:bd:a1:ea:72:e0:d6:
98:8b:6b:6c:8c:92:3b:f9:b5:99:76:ce:d0:4a:11:
96:d6:d6:68:96:72:52:4a:bd:7d:16:42:d0:6a:5c:
51:f5:43:df:8a:1c:84:b8:fb:71:c7:5e:5c:94:57:
ec:15:f7:20:ee:af:81:88:e2:ca:f9:c7:4f:e5:aa:
66:42:af:06:8d:7e:9f:da:54:a3:d3:3e:f9:21:ec:
be:57:a2:e5:d0:6e:e1:f5:4b:07:3b:86:10:97:66:
af:bc:1f:ea:55:5f:96:b2:06:52:9f:f5:e7:15:b5:
94:e7:c2:c8:50:c8:2f:1b:46:70:c4:af:b6:a1:5a:
5a:e0:4f:a4:87:b6:02:05:56:85:f7:30:65:c3:81:
23:95:ee:35:83:9c:ca:ac:cb:56:48:b8:90:7f:b4:
3d:98:a8:94:b0:7c:54:3b:02:ed:0a:f0:c2:a0:19:
5b:9a:b6:53:9b:a6:66:fa:d7:9a:bc:8f:6b:95:36:
51:24:99:a9:2f:c3:32:05:5c:3c:40:37:96:6f:fc:
5c:d5:6f:fb:44:b7:f1:a6:93:9f:c1:95:c8:7b:9a:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:FE:59:6F:92:31:9B:14:2A:13:4B:38:89:D3:42:BD:4E:40:7D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/sdX-WW-SMZsUKhNLOInTQr1OQH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.16.0/20
79.135.141.0/24
80.81.47.0/24
83.223.131.0/24
83.223.138.0/24
83.223.140.0/24
83.223.152.0/24
83.223.156.0/24
83.223.158.0/24
85.254.8.0/23
85.254.11.0-85.254.15.255
85.254.41.0/24
85.254.46.0/24
85.254.63.0/24
85.254.117.0-85.254.119.255
91.190.37.0/24
159.148.143.0/24
185.176.116.0/24
185.176.119.0/24
217.24.64.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:43:01:27:92:fb:fe:e4:0e:ce:e0:d7:0a:80:20:d0:ec:b4:
73:41:88:58:48:46:9a:aa:0d:e0:97:e6:3a:ba:9d:b7:51:2c:
a1:2f:1b:05:2b:70:82:d5:2e:9d:2f:0b:e8:95:5a:d4:4c:64:
cb:8d:b8:15:80:53:de:1e:92:fd:bc:87:87:39:fb:9b:1e:17:
34:86:f8:2f:da:ef:49:9c:fe:0d:07:cf:73:7f:0c:1f:0e:6a:
44:a4:0d:53:7f:70:e2:e9:0d:ac:0a:c0:e9:ea:3e:7d:05:48:
b1:88:73:ec:e4:7c:20:62:ad:e3:e7:63:15:8d:71:73:66:c3:
f4:d0:b3:76:63:86:8c:4f:1f:7e:c5:d1:35:b9:07:4f:ca:14:
4d:5b:e3:3d:5c:e0:62:b0:09:cb:a3:c6:d1:ce:4c:60:93:f4:
b1:60:5b:7f:f3:b1:37:eb:fe:8b:3a:65:36:68:c2:3d:9e:bd:
f4:84:90:a0:e6:23:8c:b5:58:2b:87:71:74:dc:d5:03:69:03:
7d:cb:df:da:ff:f2:09:ad:58:c0:35:d9:24:ea:a9:eb:b7:a8:
f5:d4:18:79:0d:ec:b4:8b:ac:ec:59:75:e2:e3:31:9c:53:b2:
56:11:8d:0c:f5:55:a3:5c:48:53:b0:85:6b:ee:0b:a6:fb:44:
da:bf:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:04 2025 by rpki-client