Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r62DUxOfitrB2BO55R21QBT_MFw.roa
File: r62DUxOfitrB2BO55R21QBT_MFw.roa (raw, json)
Hash identifier: vkNj4ikofvGC4Qs7GUjz6FTww/If1bx+f4ShGx0u4EU=
Subject key identifier: AF:AD:83:53:13:9F:8A:DA:C1:D8:13:B9:E5:1D:B5:40:14:FF:30:5C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197E95321E6E13E5B8D4E8E35775BF2977B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r62DUxOfitrB2BO55R21QBT_MFw.roa
Signing time: Tue 08 Jul 2025 09:17:08 +0000
ROA not before: Tue 08 Jul 2025 09:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.152.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.27.0/24 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.235.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:53:21:e6:e1:3e:5b:8d:4e:8e:35:77:5b:f2:97:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 8 09:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afad8353139f8adac1d813b9e51db54014ff305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:b7:f9:07:32:fb:b2:aa:82:4e:36:bc:71:
5e:29:7e:bc:03:6c:0c:4d:7e:8d:5d:97:42:ca:19:
04:1b:e7:d2:86:58:17:4d:3a:95:cf:34:b8:2a:d3:
5c:9f:ab:6a:2b:d6:1c:d2:27:4c:9e:3b:d9:63:f6:
c4:9a:61:63:d4:28:b3:04:30:37:e3:cb:32:27:bf:
9d:3d:3f:ce:85:c0:0a:ad:83:00:5a:91:e1:14:94:
9e:8e:da:50:c3:e7:f3:20:c4:08:78:29:ae:86:72:
6d:39:b7:8d:5b:da:22:64:92:3b:de:ee:0a:b2:bb:
67:7d:38:55:af:1a:b6:16:d2:c5:e8:61:b4:ae:5c:
df:7b:f6:1a:84:a8:43:09:6e:a2:cc:16:70:40:6b:
72:96:62:ed:00:69:e4:97:d5:ba:a3:0f:de:8e:56:
a6:09:43:e2:38:52:db:ef:1b:6e:00:a2:9b:c2:e1:
bb:21:b5:d3:b4:f8:28:47:ad:50:4f:29:74:3b:d5:
85:a9:5b:5f:d6:3e:89:05:9b:96:ef:30:60:a7:10:
c8:bb:a3:94:2e:e7:21:97:69:12:b3:4f:77:ba:ae:
98:41:96:07:ee:c0:0a:fd:92:0e:03:51:6f:1e:65:
17:ba:5e:8b:25:7b:4c:07:31:a4:68:60:50:ac:6a:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:83:53:13:9F:8A:DA:C1:D8:13:B9:E5:1D:B5:40:14:FF:30:5C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r62DUxOfitrB2BO55R21QBT_MFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.83.0-82.153.84.255
82.153.152.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.43.0/24
89.213.54.0/24
89.213.98.0/24
89.213.159.0/24
89.213.161.0/24
89.213.232.0-89.213.237.255
109.176.14.0/24
109.176.27.0/24
109.176.32.0/19
109.176.201.0/24
109.176.235.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
46:70:f6:3c:a2:47:46:0a:08:e1:e7:38:84:1c:15:bb:57:89:
02:66:07:0a:67:94:48:3c:a2:5e:ec:c4:81:2a:67:57:80:ef:
0c:ad:e1:05:dd:3d:a5:ad:b9:ee:48:10:cb:3e:36:06:9e:14:
de:7e:41:80:cd:3f:47:e8:96:17:70:60:88:5b:eb:cb:f3:07:
b4:57:1e:c8:95:a0:a9:bb:f6:49:c5:7f:f5:43:57:9d:61:9c:
81:7b:9e:4c:5d:33:e1:e7:57:2f:42:19:7c:42:e2:52:86:79:
94:3f:d8:1c:06:fd:cb:65:ca:c0:3c:0e:0b:1c:66:b6:ee:2b:
1f:cf:58:9d:05:7b:96:65:39:ce:61:be:f6:fa:eb:05:8c:1c:
b9:2e:bd:46:29:e2:a9:78:36:ac:0f:b5:ef:bb:99:b5:e5:90:
be:fe:15:04:c6:3e:68:9b:24:4b:4f:3c:0a:90:6a:0c:e9:40:
5f:bb:14:de:65:af:dd:77:a1:c1:32:c9:75:86:97:de:fe:21:
7a:4d:16:5b:f9:9f:65:e6:c4:5d:80:63:d1:03:e4:77:4d:f1:
83:7c:0c:eb:ed:b9:32:7f:89:3c:dc:7b:fb:89:95:61:13:e8:
98:d9:e0:77:b0:55:33:45:2d:51:6e:9c:1a:cc:4e:67:2c:6b:
37:a8:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:55:11 2025 by rpki-client