Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/kwFJhE8jwEHJybQlTEKHmXErsEs.roa
File: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (raw, json)
Hash identifier: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=
Subject key identifier: 93:01:49:84:4F:23:C0:41:C9:C9:B4:25:4C:42:87:99:71:2B:B0:4B
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 0198E0870EA2A448B4CF7F932CC235F4D08C
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/kwFJhE8jwEHJybQlTEKHmXErsEs.roa
Signing time: Mon 25 Aug 2025 09:20:04 +0000
ROA not before: Mon 25 Aug 2025 09:20:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200651
IP address blocks: 37.156.68.0/24 maxlen: 24
37.228.128.0/24 maxlen: 24
37.228.129.0/24 maxlen: 24
185.10.68.0/24 maxlen: 24
185.100.84.0/23 maxlen: 23
185.100.86.0/24 maxlen: 24
185.100.87.0/24 maxlen: 24
185.146.232.0/24 maxlen: 24
185.146.233.0/24 maxlen: 24
185.146.234.0/24 maxlen: 24
185.165.168.0/24 maxlen: 24
185.165.169.0/24 maxlen: 24
185.165.170.0/24 maxlen: 24
185.165.171.0/24 maxlen: 24
185.246.188.0/24 maxlen: 24
185.246.189.0/24 maxlen: 24
185.246.190.0/24 maxlen: 24
185.246.191.0/24 maxlen: 24
185.247.224.0/24 maxlen: 24
185.247.225.0/24 maxlen: 24
185.247.226.0/24 maxlen: 24
2a06:1700::/48 maxlen: 48
2a06:1700:1::/48 maxlen: 48
2a06:1700:2::/48 maxlen: 48
2a06:1700:3::/48 maxlen: 48
2a06:1700:4::/48 maxlen: 48
2a06:1700:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:87:0e:a2:a4:48:b4:cf:7f:93:2c:c2:35:f4:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Aug 25 09:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=930149844f23c041c9c9b4254c428799712bb04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:44:f1:ef:77:9e:2e:98:f7:db:ca:42:47:
3d:ae:c2:89:2f:cf:75:b2:6d:11:49:0b:8a:d3:8c:
1f:01:b7:30:35:eb:04:26:0f:a6:aa:1a:08:4f:0e:
f6:3d:8e:34:bf:24:cd:dd:56:3b:86:80:62:0d:60:
af:cc:c8:e9:4e:44:20:f5:09:96:fa:ba:ef:9a:e2:
3f:8d:27:ac:ea:f6:22:90:12:5d:32:4b:69:d4:12:
db:6c:e9:60:01:14:a2:99:4f:94:65:f4:c0:75:f1:
0f:12:a9:32:e2:64:e6:99:97:83:2d:ac:2a:6f:11:
d7:33:19:c1:0f:a8:69:bf:69:00:30:41:de:47:dc:
0e:f8:dd:df:3a:6a:13:6d:76:15:1b:e9:48:a6:1a:
7c:df:fc:c0:61:5b:3e:0c:c4:47:c5:74:2c:21:31:
5d:97:d1:8f:8a:b1:ee:43:60:04:f8:37:79:e2:fb:
58:66:f8:20:1a:0f:d4:0a:43:19:4d:92:b4:33:b1:
a5:ea:df:7e:3a:40:69:9b:9a:49:f9:78:68:9a:b2:
97:e9:a1:3e:d8:cd:98:0a:f0:aa:a8:29:19:a1:51:
f6:bc:4c:71:a1:b3:66:6c:ce:f3:1e:1f:21:d7:aa:
bc:35:bf:ee:76:f9:65:7f:08:df:51:29:dd:cc:61:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:49:84:4F:23:C0:41:C9:C9:B4:25:4C:42:87:99:71:2B:B0:4B
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/kwFJhE8jwEHJybQlTEKHmXErsEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.68.0/24
37.228.128.0/23
185.10.68.0/24
185.100.84.0/22
185.146.232.0-185.146.234.255
185.165.168.0/22
185.246.188.0/22
185.247.224.0-185.247.226.255
IPv6:
2a06:1700::-2a06:1700:4:ffff:ffff:ffff:ffff:ffff
2a06:1700:100::/48
Signature Algorithm: sha256WithRSAEncryption
61:d8:e2:01:ca:a7:89:11:44:aa:f2:e9:61:bb:8a:95:83:71:
e3:ba:48:97:42:d6:6c:12:d1:a5:9d:0e:8b:76:8c:1c:e5:0e:
06:2f:ac:26:8d:12:1b:b9:24:78:69:ff:9e:6a:0c:79:b4:78:
03:b6:72:72:3f:bd:62:c5:f6:8d:08:db:ad:49:45:d7:3a:68:
bb:eb:86:31:eb:44:2d:2d:41:1c:b2:9a:bb:7c:ed:81:30:63:
ad:ab:8e:75:d4:33:6b:ca:c2:64:a8:95:1f:31:87:f5:37:d3:
31:fc:d9:71:17:a2:76:99:75:14:f6:75:15:b3:af:d1:67:14:
18:73:43:6d:88:c8:a8:95:8e:8e:8d:ab:ff:0d:31:fe:0f:0d:
83:8a:99:9b:ec:c0:05:95:a4:a4:cf:80:04:13:29:60:21:f0:
20:88:08:07:01:cc:42:3a:b5:61:11:d2:b3:4e:21:63:75:34:
7c:13:5c:19:6e:0c:7b:f1:1a:9d:1c:61:c0:c4:59:38:47:92:
8d:92:8e:d3:c5:5f:1c:24:c7:42:67:b6:64:c4:ce:89:ef:23:
e0:80:84:b5:05:43:2d:94:6b:ab:4f:08:98:69:42:4f:b1:aa:
42:5c:ba:e4:94:b5:67:a4:a6:4f:c8:e5:4b:35:30:55:01:c8:
c1:b0:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:28:24 2025 by rpki-client