Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6QWXdHQvQn1Pn_4cUVTDDBBR2r4.roa
File: 6QWXdHQvQn1Pn_4cUVTDDBBR2r4.roa (raw, json)
Hash identifier: ZL9GObV9hrwBClwFt+UafYMHO/pB7xpnA0PCtinyb3A=
Subject key identifier: E9:05:97:74:74:2F:42:7D:4F:9F:FE:1C:51:54:C3:0C:10:51:DA:BE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198611D08157B7A9E79F80F8A956F37884D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6QWXdHQvQn1Pn_4cUVTDDBBR2r4.roa
Signing time: Thu 31 Jul 2025 15:32:29 +0000
ROA not before: Thu 31 Jul 2025 15:32:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 93.190.244.0/24 maxlen: 24
2a09:4900::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0f:140::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a11:5200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:1d:08:15:7b:7a:9e:79:f8:0f:8a:95:6f:37:88:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 15:32:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9059774742f427d4f9ffe1c5154c30c1051dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:e9:de:bb:c3:00:c1:73:74:83:f2:7b:97:
d1:f5:9d:1a:13:94:f3:5a:34:31:5e:22:e2:65:83:
31:c5:1a:5f:c3:14:f7:a5:23:76:08:37:b3:80:6f:
68:c9:f3:03:6f:cc:3a:b6:7b:26:d4:12:ce:88:e5:
07:16:b1:c9:68:0c:62:a9:28:a5:42:8d:43:e0:dd:
34:e5:3c:e0:f4:4e:75:d3:ad:5f:ab:92:0f:a3:4b:
d8:2d:5a:86:03:c6:c6:83:9a:6d:c2:c0:33:95:f5:
32:ec:16:00:d6:41:f4:9f:f2:27:d3:f3:44:53:39:
55:78:3a:d8:4e:2f:59:e6:a9:9c:b4:78:4f:6f:31:
a0:2d:c4:87:c0:f7:06:ce:ff:67:34:ac:11:c8:64:
7e:af:18:b2:0a:f3:8d:92:b2:c8:c5:e7:d2:a7:f8:
d6:08:99:00:59:0d:98:ed:79:3d:c4:f3:62:c7:a8:
f5:05:68:4c:db:ed:cd:6a:14:7e:3a:fe:a6:2e:73:
ad:fa:f5:ac:41:46:de:0b:60:be:7e:06:61:6a:3c:
1d:32:9f:92:9f:c0:2f:c6:c4:41:e7:bc:b2:1b:cf:
ef:74:79:21:c2:c7:0a:e4:4b:b4:73:a1:cd:17:33:
59:fd:57:a5:a2:32:cb:05:6f:d7:ad:15:fc:99:b8:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:97:74:74:2F:42:7D:4F:9F:FE:1C:51:54:C3:0C:10:51:DA:BE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6QWXdHQvQn1Pn_4cUVTDDBBR2r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.244.0/24
IPv6:
2a09:4900::/29
2a0e:2440::/29
2a0f:140::/29
2a0f:2100::/29
2a0f:2f80::/29
2a0f:3940::/29
2a0f:3f80::/29
2a0f:8300::/29
2a0f:b400::/29
2a0f:c400::/29
2a0f:e4c0::/29
2a0f:e640::/29
2a0f:fc00::/29
2a11:5200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
82:64:c0:bc:9b:ca:8c:04:ee:2d:6b:16:08:8d:c7:f9:4e:5b:
4c:67:17:8f:be:55:8a:7c:88:d0:d1:e3:c9:f2:01:d9:c9:85:
eb:15:a2:1b:20:f2:db:a3:80:1b:70:62:e7:87:31:c4:40:dd:
8c:83:3e:33:bb:64:0c:9c:f5:6e:63:df:e3:67:b6:f2:cd:81:
ed:06:ee:c4:d2:90:c4:39:c6:03:95:0d:56:93:eb:4f:5e:4c:
66:bf:df:46:f3:ff:54:e3:41:7d:0a:5f:2e:c9:8f:bc:58:6d:
ea:cf:9f:eb:2a:d7:99:3f:cc:73:66:3a:eb:91:92:35:6c:96:
c5:fe:d6:10:dd:32:37:7d:17:40:c1:4b:13:3e:a2:0c:d3:5e:
f2:07:ba:b9:9a:f8:55:04:3b:e9:c0:f6:88:25:fa:b4:f5:2d:
f5:e8:26:f8:9c:56:2d:c8:d3:0b:fe:8b:12:e9:68:69:ed:12:
13:8e:69:62:a8:fd:88:66:22:03:d9:f5:61:ea:1b:93:b1:06:
88:51:7a:18:47:35:7a:ab:1f:a0:52:d9:4e:aa:9c:40:fc:db:
29:53:b1:48:98:25:e5:54:4d:c2:ee:cc:d0:c4:a4:a3:a7:2d:
8b:d9:db:c1:aa:4a:22:83:a3:54:a5:c0:7c:39:7c:a5:4c:f5:
5c:23:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:20:35 2025 by rpki-client