Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa
File: B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa (raw, json)
Hash identifier: +Ea3Kfr/iO3BP5K4xdtqsmPvqCeKY8rlPBoMN9gFO2k=
Subject key identifier: 07:A5:6A:51:C4:51:B5:BD:8C:1B:89:10:A9:B6:19:F3:A9:EC:DA:D3
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0198E2347158F7AE030C135C707892C1B7C8
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa
Signing time: Mon 25 Aug 2025 17:09:04 +0000
ROA not before: Mon 25 Aug 2025 17:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 62.164.224.0/19 maxlen: 20
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
84.247.59.0/24 maxlen: 24
86.104.8.0/24 maxlen: 24
88.135.96.0/20 maxlen: 24
89.34.171.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.48.0/20 maxlen: 24
121.127.56.0/21 maxlen: 24
168.75.224.0/20 maxlen: 24
176.222.48.0/22 maxlen: 24
192.200.192.0/19 maxlen: 23
194.149.76.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
212.32.96.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:34:71:58:f7:ae:03:0c:13:5c:70:78:92:c1:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 25 17:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a56a51c451b5bd8c1b8910a9b619f3a9ecdad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:22:af:68:a8:b7:50:43:5b:18:16:33:25:
e9:73:aa:9b:c8:e6:5d:bb:c5:52:06:41:d3:9c:41:
3a:7e:a9:97:24:29:04:ab:b0:ca:ef:1e:46:ae:f0:
40:2c:b7:ef:9b:6a:db:54:2b:4c:d8:69:9c:8b:47:
4f:99:fe:61:1b:c0:90:d5:34:8d:90:cc:d4:9a:cb:
bb:ce:e3:f2:6f:ea:8d:ee:bc:fd:be:a0:f6:b0:d6:
85:c9:9b:80:b6:28:a2:4d:02:26:9d:ce:32:c2:e9:
6d:04:ff:50:32:3b:5b:1d:bd:45:75:2d:93:41:c6:
fb:b9:1c:11:79:2f:20:af:ea:83:f8:af:ac:7b:18:
32:55:ec:8a:c0:57:bc:8c:a6:35:a4:77:d1:4e:30:
35:bd:34:14:1a:73:ad:a3:2b:02:97:0a:4d:84:d5:
60:b9:53:ae:0e:83:ab:8c:56:98:28:6c:22:fe:5b:
1e:0e:57:99:36:86:fc:dc:e5:8b:6f:ad:03:f8:c9:
f8:5d:ca:5d:1b:6a:04:09:d1:ed:f9:a3:d5:ce:95:
0a:b3:3c:b5:b4:71:d6:13:f9:63:f3:64:a7:14:f5:
53:1b:8b:88:f8:9a:13:68:8f:41:fa:30:5f:dc:28:
73:8d:f4:70:a2:5f:45:d8:77:d9:cc:8a:3a:08:61:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:6A:51:C4:51:B5:BD:8C:1B:89:10:A9:B6:19:F3:A9:EC:DA:D3
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/B6VqUcRRtb2MG4kQqbYZ86ns2tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.224.0/19
66.9.96.0/20
66.117.8.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
84.247.59.0/24
86.104.8.0/24
88.135.96.0/20
89.34.171.0/24
89.42.40.0/24
93.119.184.0/21
94.26.110.0/23
94.101.103.0/24
95.178.8.0/21
116.50.16.0/21
121.127.48.0/20
168.75.224.0/20
176.222.48.0/22
192.200.192.0/19
194.149.76.0/22
195.133.202.0/23
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
64:bb:4d:08:ec:86:b3:76:26:25:8c:ec:58:c7:96:c4:80:2f:
be:02:f0:92:25:cc:f1:09:d1:61:aa:ea:e6:3d:c4:8f:67:b8:
44:2e:37:c9:a6:47:1c:96:74:d0:6c:3d:07:ea:b5:d3:35:7b:
1b:bd:a5:a8:4a:d2:29:d2:8e:b1:5d:75:0c:57:93:e2:36:02:
82:71:43:28:8f:86:1b:42:ad:ed:9c:d1:ab:73:69:12:5c:25:
80:b8:f9:01:2f:62:59:bd:6d:b1:8f:71:c4:3a:98:85:38:d6:
f8:2b:7b:d2:25:8f:cb:6c:00:ec:99:bb:93:f3:fb:f0:85:90:
11:f9:29:c7:81:a2:e6:ea:e5:13:bc:5b:92:97:b5:1a:3f:db:
17:3d:0f:94:c1:fa:ff:df:e3:bc:6a:29:89:92:f1:19:6b:9d:
09:3f:bf:cc:b8:28:4c:85:f3:db:4f:92:66:88:d3:a7:df:c1:
54:ee:bf:b6:2d:9a:25:f1:db:d3:7e:56:27:96:3f:09:1e:ff:
39:fd:a5:32:71:01:75:cf:dc:8b:07:d2:66:0d:36:ba:87:3a:
f2:0d:60:b8:79:38:44:80:f1:4f:fa:10:ce:be:fd:f3:f6:87:
b2:f1:2f:2d:47:37:4e:59:ff:2c:de:4f:c4:36:d5:16:09:48:
5a:4e:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:02:09 2025 by rpki-client