Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/q70xUyJyO86_dFKbEt4wRcJKBfU.roa
File: q70xUyJyO86_dFKbEt4wRcJKBfU.roa (raw, json)
Hash identifier: rV3HqxKoVEj+m2llDc/l4f7eo3ChhCaX2qhADzWsY0s=
Subject key identifier: AB:BD:31:53:22:72:3B:CE:BF:74:52:9B:12:DE:30:45:C2:4A:05:F5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019875A04652C9A470CE42E3E84DE07075C2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/q70xUyJyO86_dFKbEt4wRcJKBfU.roa
Signing time: Mon 04 Aug 2025 15:08:14 +0000
ROA not before: Mon 04 Aug 2025 15:08:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:a0:46:52:c9:a4:70:ce:42:e3:e8:4d:e0:70:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 4 15:08:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbd315322723bcebf74529b12de3045c24a05f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:56:38:cd:9a:05:59:92:df:59:4c:15:99:
5c:d1:c7:25:24:fc:e6:39:cb:b1:6e:4d:06:00:8c:
ec:7b:1a:1f:fb:cc:c6:ae:c5:77:9f:a0:67:bd:12:
2a:27:f0:76:cf:16:cd:7f:8b:df:47:f2:b8:ce:38:
08:c1:bb:8c:6f:49:e4:db:3b:42:c3:04:79:4c:5c:
fd:4f:b3:de:f8:8c:bc:f9:b7:dd:f8:3b:ff:8f:e0:
3a:84:f3:a2:c2:42:d1:af:aa:58:f4:b3:21:25:5d:
08:b8:27:ca:db:a3:58:36:6e:22:7e:03:0e:d1:28:
b8:01:51:23:85:a0:20:08:0f:d1:fc:ab:bc:c4:fd:
e2:e0:d6:fe:18:f0:25:07:c1:0b:a2:93:c2:f3:b2:
50:61:35:be:da:07:5e:85:56:66:ee:cc:5f:36:f9:
b0:23:bd:3f:38:0c:68:10:0e:e0:cb:e3:f9:b4:c4:
95:64:15:9b:47:08:48:a0:59:f9:02:e6:b2:53:82:
5f:55:de:48:05:26:43:7f:9d:ce:05:12:e1:46:49:
e3:40:c8:5a:f7:fc:34:e9:b6:f8:2d:9a:b1:7e:55:
ed:68:bd:2f:b9:4a:2d:e4:62:18:c6:db:f0:a7:87:
0b:e4:cf:92:d2:7a:a4:89:2d:9e:13:0d:fc:b0:21:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:31:53:22:72:3B:CE:BF:74:52:9B:12:DE:30:45:C2:4A:05:F5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/q70xUyJyO86_dFKbEt4wRcJKBfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.72.0/24
78.135.81.0/24
78.135.92.0/23
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.153.0/24
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.212.0/24
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
37:59:aa:af:41:ed:ec:00:4d:1a:a4:d8:66:07:76:dd:23:06:
dd:f5:91:0a:3a:ea:bd:07:0c:e9:89:a0:3e:ef:0d:c0:a2:43:
d8:9a:d2:3a:49:59:4f:bc:25:be:a1:13:32:ca:54:18:f5:b4:
c6:79:57:1c:df:f9:b0:0a:b3:a3:e3:f7:aa:6a:df:89:98:95:
75:f4:4d:53:2b:6f:7a:ff:96:07:d1:46:b1:ee:f4:b2:29:66:
69:2a:bd:fb:26:b3:04:3f:4d:8f:6e:24:76:b4:b5:50:97:83:
38:c7:05:f8:f0:15:0c:f0:b7:76:0f:b9:69:28:88:e7:9c:e8:
37:82:cc:41:13:d5:f8:c6:04:be:aa:a6:10:d8:08:b1:0e:0e:
48:38:d9:c3:82:88:8e:8b:ee:c2:b8:82:ca:93:e5:a3:c8:62:
96:ac:82:7a:5d:43:a3:b5:96:a4:c0:8a:1d:8c:91:d7:00:51:
d0:28:54:93:3b:00:a0:66:be:a3:48:3d:ec:c8:e5:b3:84:df:
9c:4f:4d:e3:d1:fa:53:6f:7b:85:9f:1e:25:db:b7:1e:af:8c:
78:83:b6:aa:41:da:79:02:61:82:d4:84:ee:8a:00:6f:fa:ec:
23:69:c9:cf:58:1b:d5:54:78:41:da:ff:10:db:85:b1:ec:35:
90:86:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:00 2025 by rpki-client