Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/M31i3b9seYt245ZCbC3atHdTC6U.roa
File: M31i3b9seYt245ZCbC3atHdTC6U.roa (raw, json)
Hash identifier: KuZrgbuQ5KB/Shruw2ejD9wG4ua1eFwSj+Zzc+UlpS8=
Subject key identifier: 33:7D:62:DD:BF:6C:79:8B:76:E3:96:42:6C:2D:DA:B4:77:53:0B:A5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019730155A86F5806E3940FAA23AF0F6A041
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/M31i3b9seYt245ZCbC3atHdTC6U.roa
Signing time: Mon 02 Jun 2025 09:59:55 +0000
ROA not before: Mon 02 Jun 2025 09:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:15:5a:86:f5:80:6e:39:40:fa:a2:3a:f0:f6:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 2 09:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=337d62ddbf6c798b76e396426c2ddab477530ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:2f:1c:1e:f6:2a:17:0c:45:66:01:e3:f6:
97:bb:e8:23:a0:d8:69:7e:76:1d:85:f7:f1:8d:7a:
5b:11:21:f7:8e:f2:4b:cb:4c:93:1e:a3:76:52:97:
b2:45:07:b5:01:a8:9e:d1:57:cf:0d:54:c0:00:31:
cb:0c:37:33:2f:d9:fe:81:15:d2:22:2a:54:2c:c6:
58:b5:ef:eb:6a:23:aa:dc:eb:8f:d3:5b:11:c8:6e:
2d:2b:57:cd:df:fe:28:63:c5:35:d6:29:1b:67:c2:
d9:e7:aa:bf:9a:1c:2c:b8:ce:b0:46:7f:40:ff:3e:
41:d2:21:84:5a:70:a9:bd:f4:5a:1a:22:88:d0:21:
8e:ac:16:6c:1e:3b:b0:15:7e:3c:0d:15:4c:52:c3:
ca:90:ed:94:40:5a:ea:99:7a:7e:b4:73:27:6c:6c:
73:17:18:dc:1e:8a:19:af:1f:cf:7f:ce:f3:e4:19:
d1:15:51:45:0c:81:09:e3:70:a0:27:13:e7:19:de:
df:8d:5b:ec:f4:33:cc:a2:8d:a6:1f:ad:2d:ba:d7:
f2:ba:ba:da:35:46:f6:bc:e1:4e:7e:fe:e7:20:11:
2a:85:43:e5:37:07:0f:cc:1c:33:c9:04:f5:c9:9e:
b7:f2:1d:80:91:55:0d:45:fc:f1:87:30:f4:01:75:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:62:DD:BF:6C:79:8B:76:E3:96:42:6C:2D:DA:B4:77:53:0B:A5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/M31i3b9seYt245ZCbC3atHdTC6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.108.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ea:6b:c9:70:19:b4:e2:2a:09:2f:74:ab:b1:38:fa:6b:66:
91:71:3f:f5:74:30:04:55:aa:a8:c2:c8:a0:ea:59:2f:5f:05:
aa:fd:18:01:f9:6c:c1:da:09:70:cf:41:53:d6:78:e9:43:e4:
3f:29:e2:de:d8:78:51:02:13:69:d4:a4:65:bf:17:94:af:9b:
ab:ac:82:f8:d8:45:d1:25:c5:b3:79:c7:09:95:07:00:5b:a4:
3d:e4:f7:c9:1b:ff:34:c0:f9:e1:2c:81:7e:53:d7:f9:9c:f8:
33:e6:87:d9:42:16:2d:1d:86:98:94:df:2f:f9:71:40:8c:3c:
ab:d6:85:a1:93:2f:7f:71:a1:dd:d1:3d:4b:8b:a1:1c:e9:bd:
08:9d:f7:47:33:cc:03:29:22:df:42:2f:ea:9e:4e:72:f5:b7:
a2:e3:59:08:79:7c:3d:f0:b6:3e:c8:0d:be:ec:cf:f8:62:14:
8d:d1:55:28:8c:2b:a2:a5:0b:3d:37:fa:d6:a6:73:c3:aa:4f:
7b:54:f9:2a:45:bf:30:eb:9e:19:2f:2c:50:2c:e2:70:d5:05:
14:e9:84:d3:b6:19:16:3a:25:c3:34:9c:01:89:41:17:d3:cc:
a8:81:00:b0:94:bf:e4:3b:93:a1:cc:ee:88:ce:33:57:37:ee:
32:ab:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:37 2025 by rpki-client