Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/qzQ58HKI-mgBoaOFTgfx4_Ity54.roa
File: qzQ58HKI-mgBoaOFTgfx4_Ity54.roa (raw, json)
Hash identifier: uVfHYpeJ9lif56v5ovpl9hgZmP0798jrrH58ViAFwNI=
Subject key identifier: AB:34:39:F0:72:88:FA:68:01:A1:A3:85:4E:07:F1:E3:F2:2D:CB:9E
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01985A41F654A32DA3B17A14CF141E785812
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/qzQ58HKI-mgBoaOFTgfx4_Ity54.roa
Signing time: Wed 30 Jul 2025 07:35:28 +0000
ROA not before: Wed 30 Jul 2025 07:35:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.246.207.0/24 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/19 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/17 maxlen: 24
85.10.160.0/19 maxlen: 24
85.10.172.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
91.142.240.0/20 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
91.216.162.0/24 maxlen: 24
94.142.208.0/21 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
171.33.128.0/24 maxlen: 24
176.74.224.0/19 maxlen: 24
185.3.208.0/22 maxlen: 24
185.15.248.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.173.0/24 maxlen: 24
185.110.200.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2001:4cb8:e::/48 maxlen: 48
2001:4cb8:40b::/48 maxlen: 48
2a00:c080::/32 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:41:f6:54:a3:2d:a3:b1:7a:14:cf:14:1e:78:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 30 07:35:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab3439f07288fa6801a1a3854e07f1e3f22dcb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:81:de:fc:71:1b:8b:a3:d7:70:de:14:c5:
62:4c:20:cf:c7:11:a6:33:6f:7f:4d:b6:72:8b:61:
24:86:9b:44:dc:c1:49:ae:f7:21:a3:11:36:17:eb:
6d:a6:95:33:9e:38:68:69:b3:db:57:db:51:77:1e:
e1:46:0d:df:ae:e9:9a:e1:7f:01:40:1b:18:e6:d9:
e2:a6:57:d4:03:dc:63:5e:52:02:50:f3:d2:4b:a6:
93:10:5e:59:c0:e7:d0:7a:98:a9:8e:8d:ea:10:36:
c1:48:04:2a:ec:1d:91:4f:53:29:83:dc:b9:26:cd:
12:51:ec:43:8e:e9:40:ef:10:a1:28:0f:a7:73:b6:
06:18:9c:aa:16:f0:77:0d:03:a7:e1:56:bb:b9:86:
36:e9:14:34:5f:db:d6:10:f5:87:1d:82:9a:99:35:
6e:e0:8e:50:54:78:4b:f0:77:00:f0:e8:1e:7d:ac:
04:03:0d:5a:d4:ca:61:79:eb:3d:89:58:bd:63:db:
87:b2:64:d2:eb:95:a1:b2:d7:18:fe:ae:40:0a:d8:
7a:e7:72:27:9a:7f:43:01:0e:c1:f0:58:07:d3:8a:
c3:3e:07:8f:ec:20:b5:ce:e3:cc:c3:32:18:85:b8:
4e:53:14:a9:94:42:1c:e2:21:c8:46:c6:fa:76:16:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:39:F0:72:88:FA:68:01:A1:A3:85:4E:07:F1:E3:F2:2D:CB:9E
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/qzQ58HKI-mgBoaOFTgfx4_Ity54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.223.160.0/20
37.17.208.0/20
46.226.56.0/21
78.108.128.0/20
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
85.10.160.0/19
85.158.248.0-85.158.253.255
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
94.142.208.0/21
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
185.3.208.0/22
185.15.248.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
185.110.172.0/22
185.110.200.0/22
193.93.172.0/22
193.242.119.0/24
194.60.207.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7c:4b:84:9b:ae:6b:ae:56:f2:62:a9:27:2e:95:90:26:d2:
45:f4:c4:bb:91:b8:39:67:d5:8e:46:30:53:ff:c8:3b:c1:18:
dc:7f:0d:86:fc:22:b7:3c:09:82:99:71:d5:1c:c6:0f:3c:02:
62:0c:e9:67:95:ef:ca:2e:e8:c2:30:0f:6b:fb:bc:45:a8:11:
58:26:a4:e7:38:b0:dc:fc:ba:05:93:80:39:43:17:51:6c:64:
ec:ee:ce:a6:53:30:64:e9:53:40:db:ca:4a:78:61:7c:aa:92:
7d:2a:8e:80:1d:9c:cc:fd:e9:0c:06:0c:03:1e:21:2f:dd:0e:
47:c6:1b:2f:8f:22:f0:6f:21:d5:ae:58:a7:00:ec:60:04:74:
68:e1:98:56:3b:d7:33:a1:2a:d3:ff:49:10:59:76:07:fe:1d:
8b:d0:25:11:8a:48:d1:9e:a0:ca:df:29:26:1d:bb:0f:a7:35:
b1:ad:40:40:f8:81:16:93:20:0b:19:3f:e5:df:76:0c:17:2b:
47:1e:c7:53:15:f5:5a:83:4a:5c:8c:ff:e4:27:9b:55:d9:86:
d1:cf:0c:2b:ca:9e:5c:0b:4a:f0:f4:ea:6c:8b:cd:c7:8e:a7:
25:6d:09:41:fd:8b:d4:7d:da:87:e4:cc:16:a5:5b:6f:8a:74:
5d:a6:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:24 2025 by rpki-client