Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/quzeBvB4K-uCJUdGNl5lumOg01g.roa
File: quzeBvB4K-uCJUdGNl5lumOg01g.roa (raw, json)
Hash identifier: NUc87tmJZd1YHslvV2s3oIDhhEPpWQvZDbTgS+MJ6oE=
Subject key identifier: AA:EC:DE:06:F0:78:2B:EB:82:25:47:46:36:5E:65:BA:63:A0:D3:58
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 019A574DBA48A84463BD3B4EFC5C8E775B4D
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/quzeBvB4K-uCJUdGNl5lumOg01g.roa
Signing time: Thu 06 Nov 2025 03:55:03 +0000
ROA not before: Thu 06 Nov 2025 03:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47569
IP address blocks: 79.110.240.0/24 maxlen: 24
79.110.241.0/24 maxlen: 24
79.110.242.0/24 maxlen: 24
79.110.243.0/24 maxlen: 24
79.110.244.0/24 maxlen: 24
79.110.245.0/24 maxlen: 24
79.110.246.0/24 maxlen: 24
79.110.247.0/24 maxlen: 24
79.110.248.0/24 maxlen: 24
79.110.249.0/24 maxlen: 24
79.110.250.0/24 maxlen: 24
79.110.251.0/24 maxlen: 24
79.110.252.0/24 maxlen: 24
79.110.253.0/24 maxlen: 24
79.110.254.0/24 maxlen: 24
79.110.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:4d:ba:48:a8:44:63:bd:3b:4e:fc:5c:8e:77:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Nov 6 03:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaecde06f0782beb82254746365e65ba63a0d358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:92:cf:75:55:e0:81:5d:f0:3b:59:dd:42:
7c:2b:73:b9:ae:3d:7c:e7:dc:7d:78:9c:9e:be:97:
c4:ec:ed:ea:45:53:61:0d:ff:a0:13:26:24:aa:76:
29:2a:f9:bc:ab:e8:ad:fa:7c:fe:26:51:da:7f:b2:
88:60:72:a3:97:8c:22:85:38:56:bb:3c:63:a0:2a:
69:4f:61:6a:f1:28:ac:2d:5e:db:17:fd:58:73:83:
8d:42:38:bf:30:ed:de:a9:aa:5f:cc:62:88:7c:b4:
7a:51:07:69:4b:fc:ee:5a:cc:2d:d0:f4:40:ba:bc:
e8:23:1c:2d:8d:e8:e4:c9:f0:d0:1c:6b:f0:8a:81:
30:cb:53:17:40:16:37:f7:92:13:b8:eb:3d:2a:b4:
44:ed:3f:f0:25:26:ff:b8:e7:d7:b4:d2:a1:8e:e2:
0d:87:94:dd:5f:7e:ec:03:8a:b0:78:55:38:c5:ac:
ef:3b:03:20:e0:82:1d:6b:73:7a:ce:0c:5e:56:5b:
05:5f:7c:59:aa:1c:94:19:8d:fc:67:45:35:75:c9:
73:68:36:c6:57:4d:43:81:b3:e3:7c:55:43:b3:dd:
19:ea:66:05:05:61:20:44:80:1b:2a:34:de:a4:3d:
f4:1a:a6:1e:6f:1a:47:5c:c3:b6:c2:12:ea:26:48:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EC:DE:06:F0:78:2B:EB:82:25:47:46:36:5E:65:BA:63:A0:D3:58
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/quzeBvB4K-uCJUdGNl5lumOg01g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.240.0/20
Signature Algorithm: sha256WithRSAEncryption
38:99:06:5a:08:3c:a6:7d:39:82:cf:60:90:30:40:e7:24:9d:
bf:eb:dd:23:4f:f2:3a:5c:ac:c8:bd:76:4a:23:0b:5b:ab:49:
70:80:56:29:bf:2d:a6:63:49:b3:dd:0f:8c:f2:71:d2:51:94:
d4:1e:7c:d2:6c:55:d6:c3:55:06:d1:a4:46:c3:68:98:e2:bb:
b0:d3:fa:d4:57:e5:02:d8:1e:d1:24:c4:b4:80:1b:b0:4e:e2:
91:64:5d:ba:67:e3:e9:2f:ef:27:9c:fe:b0:f0:96:f7:a9:b3:
58:8f:51:5d:31:a5:54:f8:68:ac:d4:bc:28:3e:68:ff:b9:3d:
93:e4:f4:e2:b7:f6:58:b7:99:47:93:3a:cf:ea:14:a9:18:db:
26:91:18:60:8d:33:ee:b4:1b:af:54:ab:be:f4:46:89:74:c0:
89:5c:68:c3:53:9b:a5:1e:76:62:0d:3b:2b:c4:89:1d:85:e2:
e3:8f:a3:c3:8b:be:c7:4f:0a:47:97:12:c4:f6:54:bf:f1:fd:
a1:07:fb:b1:9c:9d:ca:df:54:77:e8:14:9d:0f:c1:a5:b0:6b:
84:e4:b0:04:7b:f1:df:2a:89:a4:04:77:6c:f6:07:72:ea:95:
0c:97:3d:aa:3c:6b:63:b7:6c:7b:31:3a:aa:5f:6b:7f:11:e5:
40:0b:9d:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpXTbpIqERjvTtO/FyOd1tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjcxZWZkMTI4MTExNDI5NzU4OWU3NTkzYTdlMDUwNTRk
OTI1NWIwHhcNMjUxMTA2MDM1NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWVjZGUwNmYwNzgyYmViODIyNTQ3NDYzNjVlNjViYTYzYTBkMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ2Sz3VV4IFd8DtZ3UJ8K3O5rj18
59x9eJyevpfE7O3qRVNhDf+gEyYkqnYpKvm8q+it+nz+JlHaf7KIYHKjl4wihThW
uzxjoCppT2Fq8SisLV7bF/1Yc4ONQji/MO3eqapfzGKIfLR6UQdpS/zuWswt0PRA
urzoIxwtjejkyfDQHGvwioEwy1MXQBY395ITuOs9KrRE7T/wJSb/uOfXtNKhjuIN
h5TdX37sA4qweFU4xazvOwMg4IIda3N6zgxeVlsFX3xZqhyUGY38Z0U1dclzaDbG
V01DgbPjfFVDs90Z6mYFBWEgRIAbKjTepD30GqYebxpHXMO2whLqJki+6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKrs3gbweCvrgiVHRjZeZbpjoNNYMB8GA1UdIwQY
MBaAFBxnHv0SgRFCl1iedZOn4FBU2SVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mZGIwMDMtZmFlMy00YTY5LTljOTEt
ZTNkMmY2NGZkZGQ0LzEvcXV6ZUJ2QjRLLXVDSlVkR05sNWx1bU9nMDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mZGIwMDMtZmFlMy00YTY5LTljOTEtZTNkMmY2NGZkZGQ0
LzEvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQET27wMA0G
CSqGSIb3DQEBCwUAA4IBAQA4mQZaCDymfTmCz2CQMEDnJJ2/690jT/I6XKzIvXZK
Iwtbq0lwgFYpvy2mY0mz3Q+M8nHSUZTUHnzSbFXWw1UG0aRGw2iY4ruw0/rUV+UC
2B7RJMS0gBuwTuKRZF26Z+PpL+8nnP6w8Jb3qbNYj1FdMaVU+Gis1LwoPmj/uT2T
5PTit/ZYt5lHkzrP6hSpGNsmkRhgjTPutBuvVKu+9EaJdMCJXGjDU5ulHnZiDTsr
xIkdheLjj6PDi77HTwpHlxLE9lS/8f2hB/uxnJ3K31R36BSdD8GlsGuE5LAEe/Hf
KomkBHds9gdy6pUMlz2qPGtjt2x7MTqqX2t/EeVAC53g
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:52 2025 by rpki-client