Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/ldtWGxU-O2Rfvie7nwtO2g9Sp6E.roa
File: ldtWGxU-O2Rfvie7nwtO2g9Sp6E.roa (raw, json)
Hash identifier: vc9M4tK1GqFHynfjIue1sg41vUFcpQIb4zs037N28x4=
Subject key identifier: 95:DB:56:1B:15:3E:3B:64:5F:BE:27:BB:9F:0B:4E:DA:0F:52:A7:A1
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0198798A029246D63ACCABAE434E07629369
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/ldtWGxU-O2Rfvie7nwtO2g9Sp6E.roa
Signing time: Tue 05 Aug 2025 09:22:24 +0000
ROA not before: Tue 05 Aug 2025 09:22:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6700
IP address blocks: 62.108.96.0/19 maxlen: 24
62.193.128.0/19 maxlen: 24
91.148.64.0/18 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
185.47.210.0/24 maxlen: 24
194.106.160.0/19 maxlen: 24
195.252.64.0/18 maxlen: 24
213.244.228.0/22 maxlen: 24
213.244.232.0/21 maxlen: 24
217.26.64.0/20 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:8a:02:92:46:d6:3a:cc:ab:ae:43:4e:07:62:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Aug 5 09:22:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95db561b153e3b645fbe27bb9f0b4eda0f52a7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:50:74:99:a1:b6:ca:e4:49:64:2a:02:9a:
be:2e:59:91:4d:a4:55:94:c7:0b:f5:3a:d7:d5:b6:
96:fe:a0:ac:f1:9a:b6:ac:d7:33:f9:57:c4:71:96:
2e:f9:78:05:00:e3:ae:41:df:5b:80:4a:f3:6f:2b:
7f:5e:e9:88:ff:a6:30:18:dc:f2:8a:7c:9a:a8:f3:
9d:1d:4c:5d:d6:32:3b:b0:7a:9c:d6:3d:83:ec:6b:
6d:34:2c:17:bc:ba:da:96:6c:07:8e:99:95:0f:8b:
05:5e:0d:f3:a2:c1:5e:07:dd:24:45:d1:55:c2:f4:
a3:5a:ff:2c:c3:18:fe:38:5a:87:30:d9:d8:4d:cc:
75:59:af:9a:20:ae:1f:e8:d2:29:33:35:28:4a:eb:
af:41:56:52:78:51:14:d0:46:c5:88:a3:e1:e3:da:
72:b6:f2:4c:d9:ee:a4:23:c9:fd:6f:b0:ae:ea:f8:
3d:9a:5e:fb:61:7d:8c:a5:b4:56:e8:66:5f:93:eb:
cc:8a:8c:6c:69:cc:ae:76:78:aa:f6:3e:0a:a2:4d:
18:17:ac:e9:bb:73:32:7e:89:c9:6f:ed:1c:fc:91:
22:71:44:4f:35:54:71:72:57:f1:c6:02:a7:9e:57:
5d:d4:26:a3:87:dc:40:7f:2a:88:56:03:cd:4e:40:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:56:1B:15:3E:3B:64:5F:BE:27:BB:9F:0B:4E:DA:0F:52:A7:A1
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/ldtWGxU-O2Rfvie7nwtO2g9Sp6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
185.47.210.0/24
194.106.160.0/19
195.252.64.0/18
213.244.228.0-213.244.239.255
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
25:ec:79:d7:55:07:94:4a:2a:fb:1b:6b:0d:24:84:d7:6b:39:
33:7d:4a:0f:8f:42:0f:7f:5a:0f:60:2f:94:7e:6d:03:b8:18:
1b:f3:7d:fd:48:b9:ad:5a:7f:e7:28:0e:cd:96:d7:d8:c1:51:
27:e0:14:e1:1b:a1:62:13:4b:08:46:2d:65:3b:2f:c7:83:f0:
64:0d:45:a7:26:36:9a:28:9d:4f:c7:47:1c:f9:95:ae:36:04:
92:42:90:c8:71:e3:1e:93:0b:e0:b2:68:2b:11:7f:9f:1e:8a:
93:e1:6c:a8:ca:90:62:c2:b9:11:e3:8b:5c:e8:a8:de:3c:c0:
73:26:bc:af:30:d8:03:e8:58:7c:a4:f4:8b:47:54:e0:ec:1e:
ef:7c:78:e2:30:ca:b3:39:3c:4f:97:a6:bd:1a:e8:a8:5e:34:
0c:14:ac:0f:b4:ee:74:26:09:97:7e:42:91:9d:26:f6:4a:dc:
5a:39:a7:80:b2:6d:a3:10:76:cc:0b:40:04:a0:ea:d8:f0:68:
87:74:e9:e7:4f:ea:ac:b0:89:46:be:10:9c:af:bd:e9:d7:fa:
6a:a9:5e:8b:b9:c5:00:c7:1c:a8:ff:fe:ef:5a:a7:06:df:71:
bf:3f:49:50:94:50:4d:03:1e:b7:40:3c:bd:c4:7e:0f:72:d1:
b9:04:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:59 2025 by rpki-client