Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/u-QSBIP26L_6zzGimICOXvuuFkU.roa
File: u-QSBIP26L_6zzGimICOXvuuFkU.roa (raw, json)
Hash identifier: cIkfS2UmsC6xwCNzKAL9mhcz+II9l4ahNb2oG/ckg0A=
Subject key identifier: BB:E4:12:04:83:F6:E8:BF:FA:CF:31:A2:98:80:8E:5E:FB:AE:16:45
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0197C09C5E423E39C71DA97FC9873B720289
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/u-QSBIP26L_6zzGimICOXvuuFkU.roa
Signing time: Mon 30 Jun 2025 11:32:42 +0000
ROA not before: Mon 30 Jun 2025 11:32:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.24.150.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:9c:5e:42:3e:39:c7:1d:a9:7f:c9:87:3b:72:02:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 30 11:32:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe4120483f6e8bffacf31a298808e5efbae1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:6d:24:59:0c:1a:70:ce:56:fa:49:0f:ff:
0b:e0:5a:bc:a5:0b:78:32:43:75:42:d7:78:21:dd:
72:f1:f9:66:80:e4:ce:1c:0f:71:ef:e9:a8:12:37:
93:c2:18:ce:e4:28:3c:59:09:f9:92:12:81:2d:78:
d1:96:b2:c9:f0:d8:d4:5a:1e:6c:70:08:88:7d:ec:
ea:c5:44:d8:c6:fb:b5:0f:b7:49:3f:e2:fd:d3:54:
ab:7e:a7:b9:7b:74:b6:4e:42:07:70:12:7e:eb:e1:
a7:5d:2e:4f:1b:72:cf:ca:53:21:29:86:f9:c5:1c:
63:00:b9:36:42:9d:2d:50:81:59:12:5c:39:d6:1f:
17:45:5f:5a:e6:0d:85:c6:d3:98:00:12:50:8e:6d:
53:30:bc:a4:4f:bb:f1:af:b1:d1:4e:e3:80:8b:61:
6b:69:7e:c1:de:ef:47:a0:31:b1:3f:e4:5c:69:ee:
fc:69:13:7f:f8:5c:e3:28:d8:f5:e1:70:ba:90:04:
53:bb:7a:0b:57:f6:2c:7e:5f:13:8a:b7:83:73:bb:
41:c6:cd:9d:1f:67:4f:e2:ac:22:4a:70:aa:52:a7:
93:45:f2:6a:ce:2b:b7:bd:d8:95:fa:53:87:e6:67:
d9:97:13:8c:b8:58:6c:da:f4:c1:91:86:51:48:cf:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:12:04:83:F6:E8:BF:FA:CF:31:A2:98:80:8E:5E:FB:AE:16:45
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/u-QSBIP26L_6zzGimICOXvuuFkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.150.0/24
212.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8a:9f:f1:3f:cb:b5:78:c9:04:3d:0b:57:2c:ed:90:f5:96:
ab:6d:b9:de:68:21:53:cb:fd:ef:5b:b8:91:a8:e6:96:8b:15:
1c:b1:11:45:a2:cc:a6:1d:01:96:97:78:b8:30:40:bd:6d:cc:
b7:c8:7e:a7:73:6b:e1:fd:c2:dd:ba:2c:f2:b8:e6:46:86:eb:
87:09:9f:53:67:5e:36:14:60:8e:15:7c:af:e5:30:8d:dc:d6:
76:c4:b6:ca:cd:1c:c0:75:72:f5:5b:7c:a9:f6:2a:c0:99:22:
a9:e6:fb:df:85:ef:ab:6e:3d:74:ec:79:83:ff:4e:01:40:76:
b6:ff:42:db:64:0f:a1:b7:23:a8:64:98:8a:dd:86:f0:f3:72:
aa:8d:7b:67:9d:22:86:e4:56:55:3d:b3:55:1c:e4:62:30:4b:
e4:eb:e6:dc:18:f7:a7:97:71:82:77:04:7e:4c:96:c1:7e:df:
f5:ed:31:1a:3f:a4:d8:4e:cf:a4:19:a5:7f:9b:dd:f4:6e:a1:
3e:86:b5:22:ac:9f:84:2c:70:6e:c8:31:61:9d:71:cf:d1:ea:
fe:b2:b6:7b:5e:81:79:82:b9:45:db:fc:7a:e6:6b:54:a8:d4:
b6:f1:a2:98:78:10:f2:b3:5f:8b:38:a5:8d:2b:dc:2a:2c:5c:
46:08:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 08:34:45 2025 by rpki-client