Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QKNCa2mPcI3G9qc-YgRmKbcllGI.roa
File: QKNCa2mPcI3G9qc-YgRmKbcllGI.roa (raw, json)
Hash identifier: EHExG0fGZpihmHYYFZkUJDxPLKJAU35XA9252d7By3E=
Subject key identifier: 40:A3:42:6B:69:8F:70:8D:C6:F6:A7:3E:62:04:66:29:B7:25:94:62
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01990416A2B31EC8BC29579D5A4DA3FE66EB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QKNCa2mPcI3G9qc-YgRmKbcllGI.roa
Signing time: Mon 01 Sep 2025 07:03:36 +0000
ROA not before: Mon 01 Sep 2025 07:03:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.105.61.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
178.253.221.0/24 maxlen: 24
188.255.148.0/24 maxlen: 24
188.255.222.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:16:a2:b3:1e:c8:bc:29:57:9d:5a:4d:a3:fe:66:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 07:03:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a3426b698f708dc6f6a73e62046629b7259462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:28:cd:a1:97:49:83:c1:91:98:c3:68:0a:
06:37:b4:1d:cf:c4:d5:1c:ae:6f:53:be:30:c2:4f:
40:84:a3:cb:e1:c9:c0:17:f5:a9:09:09:b3:4c:a2:
fb:1f:b3:91:0b:e2:c9:ad:a9:b4:99:50:08:e0:75:
89:c8:76:7f:71:8c:85:fa:fa:01:c9:85:e4:db:d6:
41:20:1f:d6:9a:64:35:92:61:32:48:87:67:11:ad:
f8:a1:77:2f:fe:bf:99:69:74:9a:02:e9:fc:e8:08:
de:68:a3:38:a5:c0:41:5b:9a:a1:e3:bb:03:b5:a2:
dd:21:71:b5:86:a6:8a:e9:b2:e8:ca:4e:65:ef:67:
4b:2e:86:85:31:46:a0:f8:9f:2a:16:e0:b8:38:4c:
d6:c4:7d:e4:82:47:4b:4c:8d:99:37:38:b5:e1:29:
a2:39:35:39:54:d7:b7:f0:1d:54:f7:6e:89:f2:62:
cf:f7:93:61:17:09:bd:e2:a2:ce:3d:42:0b:d0:87:
7d:c9:a6:b9:9c:d7:3f:03:ce:f0:78:35:6e:1c:39:
be:b2:66:18:f7:f7:5b:1f:21:cc:67:39:03:53:1a:
c5:cd:94:93:87:66:57:db:bc:4f:f8:ec:8f:c6:11:
65:3b:91:27:c2:af:36:f0:e5:44:a5:9a:aa:0c:df:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:42:6B:69:8F:70:8D:C6:F6:A7:3E:62:04:66:29:B7:25:94:62
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QKNCa2mPcI3G9qc-YgRmKbcllGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.61.0/24
79.175.93.0/24
81.18.48.0/24
109.121.33.0/24
109.121.37.0/24
109.121.39.0/24
109.121.42.0/24
109.121.45.0/24
109.121.47.0/24
178.253.221.0/24
188.255.148.0/24
188.255.222.0/24
188.255.236.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:83:0b:de:83:36:9d:be:ca:28:19:a5:e7:18:9b:48:e9:19:
a7:45:c6:b2:7a:8a:00:29:9a:96:79:9f:56:a7:b8:a6:03:13:
3e:3d:a4:8c:3e:49:63:fb:5c:6a:62:8f:07:f3:06:99:a5:ba:
4b:ca:49:5e:21:f7:5c:15:42:57:f4:7f:ba:51:1d:49:11:c9:
0d:c1:45:bc:9b:60:e0:99:b6:94:b9:1f:50:d1:2a:f7:99:53:
f1:83:cb:2f:03:92:69:76:c4:22:5c:43:cf:8f:2f:e5:48:ed:
0f:fc:17:6a:54:c9:4e:ef:8f:32:d8:16:0c:8b:ba:e9:95:55:
92:17:45:3b:f4:38:60:93:8b:02:a9:c8:8c:06:42:69:8e:bf:
94:c2:11:70:18:67:aa:26:11:69:0c:a0:51:59:72:92:b1:07:
94:47:62:d3:8f:79:b5:c8:aa:1a:b1:56:ef:17:0c:98:c7:58:
03:c2:4a:eb:3e:bb:f5:d8:9d:78:41:f7:f9:a0:27:4e:25:2e:
d3:70:e7:14:20:ee:6f:11:0b:9d:35:8f:4f:cc:69:28:00:2d:
e2:a2:bf:30:e1:38:74:0d:44:8f:55:35:4a:7b:3f:65:88:11:
1b:3f:9c:79:c8:4a:6d:a9:1c:ff:71:a3:05:00:7c:c1:12:d8:
f5:b4:31:ab
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZkEFqKzHsi8KVedWk2j/mbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwOTAxMDcwMzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGEzNDI2YjY5OGY3MDhkYzZmNmE3M2U2MjA0NjYyOWI3MjU5NDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XUozaGXSYPBkZjDaAoGN7Qdz8TV
HK5vU74wwk9AhKPL4cnAF/WpCQmzTKL7H7ORC+LJram0mVAI4HWJyHZ/cYyF+voB
yYXk29ZBIB/WmmQ1kmEySIdnEa34oXcv/r+ZaXSaAun86AjeaKM4pcBBW5qh47sD
taLdIXG1hqaK6bLoyk5l72dLLoaFMUag+J8qFuC4OEzWxH3kgkdLTI2ZNzi14Smi
OTU5VNe38B1U926J8mLP95NhFwm94qLOPUIL0Id9yaa5nNc/A87weDVuHDm+smYY
9/dbHyHMZzkDUxrFzZSTh2ZX27xP+OyPxhFlO5Enwq828OVEpZqqDN9ZdwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFECjQmtpj3CNxvanPmIEZim3JZRiMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvUUtOQ2EybVBjSTNHOXFjLVlnUm1LYmNsbEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQATWk9AwQA
T69dAwQAURIwAwQAbXkhAwQAbXklAwQAbXknAwQAbXkqAwQAbXktAwQAbXkvAwQA
sv3dAwQAvP+UAwQAvP/eAwQAvP/sAwQA1EULMA0GCSqGSIb3DQEBCwUAA4IBAQCn
gwvegzadvsooGaXnGJtI6RmnRcayeooAKZqWeZ9Wp7imAxM+PaSMPklj+1xqYo8H
8waZpbpLykleIfdcFUJX9H+6UR1JEckNwUW8m2DgmbaUuR9Q0Sr3mVPxg8svA5Jp
dsQiXEPPjy/lSO0P/BdqVMlO748y2BYMi7rplVWSF0U79Dhgk4sCqciMBkJpjr+U
whFwGGeqJhFpDKBRWXKSsQeUR2LTj3m1yKoasVbvFwyYx1gDwkrrPrv12J14Qff5
oCdOJS7TcOcUIO5vEQudNY9PzGkoAC3ior8w4Th0DUSPVTVKez9liBEbP5x5yEpt
qRz/caMFAHzBEtj1tDGr
-----END CERTIFICATE-----
Generated at Fri Sep 5 12:00:05 2025 by rpki-client