Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QQvEaPopplfPsPY4AiD5m0mOIt4.roa
File: QQvEaPopplfPsPY4AiD5m0mOIt4.roa (raw, json)
Hash identifier: 80eElPiJKZyrud1lk3JZF3VP4GquaYx+Ck7vXzBFAZo=
Subject key identifier: 41:0B:C4:68:FA:29:A6:57:CF:B0:F6:38:02:20:F9:9B:49:8E:22:DE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01984FE63BA90CC49E2940C3E700D37A6707
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QQvEaPopplfPsPY4AiD5m0mOIt4.roa
Signing time: Mon 28 Jul 2025 07:19:05 +0000
ROA not before: Mon 28 Jul 2025 07:19:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 82.153.220.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:e6:3b:a9:0c:c4:9e:29:40:c3:e7:00:d3:7a:67:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 28 07:19:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410bc468fa29a657cfb0f6380220f99b498e22de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:5a:57:af:0a:88:ba:b3:c6:fe:c5:9e:1c:
ae:8d:d9:43:8f:54:fd:e3:7b:c6:dd:3e:2b:82:41:
01:83:63:df:ca:89:f0:3d:e3:4d:32:c4:bb:eb:91:
1d:30:10:aa:f1:19:09:e5:13:f6:5f:a0:a1:18:0b:
4a:9e:87:c2:23:c7:e8:19:89:af:7b:00:08:49:f3:
36:bc:9d:cf:06:f4:69:1f:f7:c4:fe:7f:e0:ee:39:
bd:f5:29:5a:e3:20:94:4f:53:eb:a7:b6:4e:5d:30:
46:42:1e:b9:4c:7c:ee:01:f1:dc:b8:2a:cd:75:4b:
c4:4e:45:d5:1d:b8:c1:98:f8:d6:99:7d:e2:91:ed:
b4:08:ae:49:22:33:ed:7f:a1:2c:14:af:95:7c:53:
e1:a6:d1:17:10:9d:13:32:73:c9:ce:19:b7:ba:a7:
ef:df:ac:06:dc:64:1f:1d:f4:1e:24:0e:fc:02:df:
c8:6e:04:e7:e8:a6:09:a1:f1:bc:9b:8f:5a:93:27:
82:b4:a9:27:04:14:79:17:3e:b5:3e:9c:80:20:3b:
ef:34:f9:ec:2d:75:1f:b4:76:48:c9:03:ba:ae:a8:
58:a1:88:f9:b6:7d:11:5e:99:3c:3e:e2:1f:39:1a:
8a:1b:27:dc:de:d9:cc:e8:88:ad:e9:3f:fc:55:18:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:C4:68:FA:29:A6:57:CF:B0:F6:38:02:20:F9:9B:49:8E:22:DE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QQvEaPopplfPsPY4AiD5m0mOIt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
82.153.255.0/24
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.155.0/24
89.213.162.0/24
89.213.167.0/24
89.213.181.0/24
89.213.191.0/24
89.213.212.0/24
89.213.224.0/24
213.210.11.0/24
Signature Algorithm: sha256WithRSAEncryption
32:74:8f:64:3e:e8:00:4b:fe:ed:71:83:0c:77:5e:11:a0:af:
d6:d5:06:5f:99:7f:3d:30:15:09:09:cf:49:16:c7:c5:28:5d:
64:af:f4:3c:32:fd:a0:ee:26:b9:a5:91:ea:a3:2d:b3:b4:ab:
62:b7:bc:e2:cb:62:83:bf:45:b9:5d:6e:e0:16:f6:f5:bd:82:
fc:6f:78:ba:f1:65:49:ca:92:12:e5:14:87:ca:20:81:1a:48:
36:1a:7b:5f:cd:35:f4:51:e7:ff:d2:dd:ee:0c:23:f5:3f:ed:
28:d0:14:05:0c:d8:c5:27:8d:60:f3:c0:5f:b9:bb:da:13:42:
d1:9b:1c:ad:5f:f1:e2:d9:dd:a6:fa:7b:e9:fe:71:a0:79:97:
94:6a:f4:0d:72:f2:7f:08:8e:59:2d:42:f0:f8:e1:8f:e5:da:
b4:49:54:a4:79:ca:5e:b0:ac:94:07:7a:3a:5e:18:43:9a:0e:
f9:5f:a1:d6:17:4c:db:b8:d1:8d:b3:98:cb:cd:6c:1d:42:26:
99:0e:e1:de:b6:79:c7:82:39:5d:01:a6:c4:c2:ac:ed:23:87:
23:8c:1a:ac:8f:b7:3b:79:bc:72:04:b1:c2:4e:50:2f:dc:47:
44:ee:a9:92:ef:ec:11:55:76:af:0d:ff:31:9e:87:0a:62:db:
37:32:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:26 2025 by rpki-client