Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nQzfhkK0L8K8VGMXs_pIgBcKa-8.roa
File: nQzfhkK0L8K8VGMXs_pIgBcKa-8.roa (raw, json)
Hash identifier: 2JOr2Q6s/2fFgYLPZiWXmQsfUISg4nyXJUmxnphc+Ec=
Subject key identifier: 9D:0C:DF:86:42:B4:2F:C2:BC:54:63:17:B3:FA:48:80:17:0A:6B:EF
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 019929051FA62840EF0E69A054E1CCC4363F
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nQzfhkK0L8K8VGMXs_pIgBcKa-8.roa
Signing time: Mon 08 Sep 2025 11:10:25 +0000
ROA not before: Mon 08 Sep 2025 11:10:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198193
IP address blocks: 5.181.96.0/23 maxlen: 23
5.187.36.0/23 maxlen: 23
31.214.155.0/24 maxlen: 24
37.252.98.0/24 maxlen: 24
37.252.100.0/24 maxlen: 24
37.252.101.0/24 maxlen: 24
46.251.250.0/24 maxlen: 24
46.253.139.0/24 maxlen: 24
89.32.64.0/24 maxlen: 24
89.32.65.0/24 maxlen: 24
89.32.66.0/24 maxlen: 24
89.32.67.0/24 maxlen: 24
158.255.239.0/24 maxlen: 24
162.33.200.0/22 maxlen: 22
162.33.204.0/22 maxlen: 22
162.33.204.0/24 maxlen: 24
162.33.205.0/24 maxlen: 24
162.33.206.0/24 maxlen: 24
162.33.207.0/24 maxlen: 24
185.66.172.0/24 maxlen: 24
185.66.174.0/24 maxlen: 24
185.75.22.0/23 maxlen: 23
185.86.208.0/23 maxlen: 23
185.88.202.0/23 maxlen: 23
185.206.121.0/24 maxlen: 24
185.212.114.0/24 maxlen: 24
185.225.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:05:1f:a6:28:40:ef:0e:69:a0:54:e1:cc:c4:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Sep 8 11:10:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d0cdf8642b42fc2bc546317b3fa4880170a6bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:0e:ca:86:53:35:d6:a1:82:84:35:ff:5b:
ec:22:da:35:5f:9f:8a:2b:11:24:98:61:58:52:43:
4c:ea:b1:5d:1a:35:27:4c:18:7d:68:e0:26:d9:dd:
5a:3a:79:06:5d:3e:a1:1a:b4:d5:a0:1f:12:e6:59:
98:f2:df:be:72:6f:ec:56:29:5b:a9:23:88:de:02:
54:b6:40:d9:37:b0:9f:f7:d1:d3:b7:ac:87:e1:0e:
f5:b5:40:c7:4f:00:23:8b:55:9d:ee:6b:77:09:af:
de:67:40:72:1c:b4:ce:06:0e:95:97:cf:e4:b0:8e:
fe:91:c1:f2:64:f4:33:df:f7:3a:6a:a7:3f:67:c4:
4f:3d:da:de:50:4b:65:e9:95:66:46:72:f1:77:d2:
be:a5:78:de:2a:7e:c8:69:13:ac:96:29:7e:7f:72:
90:80:58:70:76:52:b7:9f:bd:13:72:e8:5b:ce:fb:
6b:f1:c9:47:b0:33:4e:5f:5b:d9:a3:ad:6b:74:c8:
19:58:60:b0:26:07:78:34:df:a6:1c:7f:aa:cd:ea:
ee:d6:c3:13:53:7c:57:7a:0a:d0:e5:e9:86:99:b1:
67:8e:f1:27:83:9e:f0:6a:75:e2:f8:a9:db:fb:4d:
66:69:d0:87:f9:e4:0e:db:fb:3a:9b:49:ad:79:64:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0C:DF:86:42:B4:2F:C2:BC:54:63:17:B3:FA:48:80:17:0A:6B:EF
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nQzfhkK0L8K8VGMXs_pIgBcKa-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.96.0/23
5.187.36.0/23
31.214.155.0/24
37.252.98.0/24
37.252.100.0/23
46.251.250.0/24
46.253.139.0/24
89.32.64.0/22
158.255.239.0/24
162.33.200.0/21
185.66.172.0/24
185.66.174.0/24
185.75.22.0/23
185.86.208.0/23
185.88.202.0/23
185.206.121.0/24
185.212.114.0/24
185.225.8.0/24
Signature Algorithm: sha256WithRSAEncryption
89:dc:c3:e7:35:d9:3b:2f:a3:33:f7:3b:3a:b0:b3:08:06:83:
48:f8:34:ac:40:8d:f6:fd:93:05:eb:51:e4:92:6b:41:f1:9a:
68:60:33:53:bc:15:d8:5f:cd:a1:aa:af:01:df:c8:5d:ea:9f:
ca:71:d6:76:32:0f:77:35:08:2f:73:02:dd:ea:c0:79:fe:ab:
70:ee:50:2d:d5:e3:c1:71:f0:2d:aa:ba:08:86:7f:8c:de:37:
56:e5:34:86:8b:df:b5:a6:85:83:54:f5:2d:8b:e9:a2:f0:ce:
4f:ad:43:05:67:aa:e2:b5:c7:f0:a5:fa:3b:cc:74:26:11:38:
29:5d:56:0d:34:19:87:d9:42:69:c5:68:81:5b:8c:f7:9d:04:
9e:1d:e1:1c:2f:d4:c1:15:d7:cf:20:06:3e:a3:e2:0c:02:fe:
2a:77:d3:f0:3c:fb:77:5c:b0:14:80:24:dc:5d:2e:75:d1:91:
0a:b4:66:16:52:cc:13:27:06:2c:60:d4:b2:57:39:b8:b1:ad:
5d:21:65:63:76:bb:6b:85:d2:9e:f4:7c:70:d2:94:6e:7c:27:
50:05:8b:ed:92:6c:b7:f9:e1:64:ed:06:45:db:e0:3a:7f:80:
f9:6e:86:bd:c6:c7:e5:2f:b7:41:21:b1:58:2f:b8:d0:db:20:
59:6a:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:55:13 2025 by rpki-client