Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa
File: Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa (raw, json)
Hash identifier: S28QHIVwCTs2cZmHNwDOnovD8sAEfmTgDloHmODDCO4=
Subject key identifier: 43:78:7A:A8:04:20:F1:9E:DE:4C:4D:0F:6D:36:D7:43:C4:5E:FB:D0
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 0197396964CC91D79EB0C8DBEF07854C6159
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa
Signing time: Wed 04 Jun 2025 05:28:17 +0000
ROA not before: Wed 04 Jun 2025 05:28:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/19 maxlen: 24
31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.168.0/22 maxlen: 24
31.28.169.0/24 maxlen: 24
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.184.0/24 maxlen: 24
31.28.188.0/22 maxlen: 22
31.28.188.0/24 maxlen: 24
31.28.190.0/24 maxlen: 24
31.28.191.0/24 maxlen: 24
62.149.0.0/19 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
62.149.15.0/24 maxlen: 24
2a03:6300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:69:64:cc:91:d7:9e:b0:c8:db:ef:07:85:4c:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 4 05:28:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43787aa80420f19ede4c4d0f6d36d743c45efbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:0f:54:91:b8:5a:d7:ff:17:a1:08:a5:cc:
82:51:fa:3f:57:db:62:16:95:52:85:92:f9:64:ea:
9b:d7:98:3e:d1:fb:b5:dd:3d:8a:43:01:ad:a5:3d:
d0:63:bc:c8:68:2d:31:e0:84:b2:cc:2e:70:b8:c1:
a2:c8:5d:09:76:e0:c9:d0:71:8f:57:07:95:ef:28:
32:5c:0e:e1:d8:68:4c:f3:ae:b0:62:3c:24:6e:d7:
c3:77:67:ba:de:94:31:6c:42:73:57:11:0b:f6:1f:
da:52:74:cd:97:b0:68:b9:84:77:b6:d9:13:8c:a6:
01:4e:68:44:45:b2:8e:48:aa:f6:6c:b5:1e:b9:0d:
83:39:e4:ff:c4:04:01:d9:e9:5f:56:b1:74:d1:6c:
1a:12:1b:51:5f:5f:3b:13:53:f1:03:05:16:4f:b5:
dd:11:95:b5:ed:df:08:38:3c:da:63:a9:47:a5:fa:
3a:91:ae:e0:03:53:0f:aa:b9:35:04:60:e3:7d:7f:
4c:04:fc:c6:b8:d9:df:63:97:77:b8:2c:38:f8:64:
45:42:74:b0:35:4c:53:02:10:c5:af:95:05:bf:58:
f2:b3:a4:f5:5e:09:76:de:12:c1:b6:c0:75:e8:8f:
1a:dc:05:4c:74:44:b8:9c:9b:5b:b9:91:24:fb:da:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:7A:A8:04:20:F1:9E:DE:4C:4D:0F:6D:36:D7:43:C4:5E:FB:D0
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0/19
62.149.0.0/19
IPv6:
2a03:6300::/32
Signature Algorithm: sha256WithRSAEncryption
6d:c6:7d:0b:ef:5e:d7:73:b9:4a:c9:bd:1f:ec:92:c4:32:8a:
ed:1c:4f:9f:c3:2f:6f:01:14:ac:e2:53:56:f2:00:c7:0e:b3:
d9:7b:1b:d1:22:3d:7d:9c:d6:56:cf:8b:2a:34:94:c3:8b:97:
a8:12:42:af:be:12:1a:0b:50:99:16:b0:52:67:87:83:23:85:
6c:56:31:e8:15:0c:43:c7:f0:68:1c:1f:87:26:c8:49:7b:9a:
76:76:23:4f:aa:b7:c6:8c:97:13:e2:9e:9b:43:c4:36:60:74:
20:06:c7:53:2e:ca:48:d7:6c:80:55:7b:03:5d:8b:c9:3d:c6:
38:7e:4c:ff:b8:52:9d:8b:fa:fa:87:f6:3a:d7:81:fe:f6:e1:
ca:fb:ba:72:20:7b:f5:17:15:fd:d5:6f:37:0b:a2:88:f1:72:
e5:7d:97:bf:53:bd:99:9e:34:24:c5:51:74:f1:23:06:ea:78:
13:f4:9f:a0:26:74:04:33:d6:7a:f8:9e:35:92:7b:9f:b8:25:
05:da:b8:60:50:c0:66:0d:42:cd:f3:f3:7e:40:06:91:ce:cb:
1d:94:11:d5:2f:5c:5b:35:93:82:af:66:7b:dd:2f:43:0a:78:
69:68:0b:e7:bd:a0:57:db:4b:5d:7b:6f:33:5f:4a:e2:7d:18:
77:89:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:22:52 2025 by rpki-client