Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/qKFWe9Dc9VXd-E9itFNBr6DQEUs.roa
File: qKFWe9Dc9VXd-E9itFNBr6DQEUs.roa (raw, json)
Hash identifier: y5dptfGZPYO1h43chWxX74P05NldZYlQNc516YN4G9M=
Subject key identifier: A8:A1:56:7B:D0:DC:F5:55:DD:F8:4F:62:B4:53:41:AF:A0:D0:11:4B
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0197839AEC28A220BE14E6478A9B085B4BD9
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/qKFWe9Dc9VXd-E9itFNBr6DQEUs.roa
Signing time: Wed 18 Jun 2025 15:14:17 +0000
ROA not before: Wed 18 Jun 2025 15:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 45.157.158.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.130.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.132.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.135.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.138.0/24 maxlen: 24
95.155.139.0/24 maxlen: 24
95.155.140.0/24 maxlen: 24
95.155.141.0/24 maxlen: 24
95.155.142.0/24 maxlen: 24
95.155.143.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.150.0/24 maxlen: 24
95.155.151.0/24 maxlen: 24
95.155.152.0/24 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.154.0/24 maxlen: 24
95.155.155.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.157.0/24 maxlen: 24
95.155.158.0/24 maxlen: 24
95.155.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:9a:ec:28:a2:20:be:14:e6:47:8a:9b:08:5b:4b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 18 15:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8a1567bd0dcf555ddf84f62b45341afa0d0114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:12:77:cf:f1:6d:9c:aa:00:24:c8:fa:29:
7e:7f:91:03:c6:72:26:27:ef:da:69:59:0e:05:1f:
73:ed:6b:de:54:49:d7:89:74:91:2f:16:c4:be:43:
23:a3:95:85:25:74:64:c3:95:37:6e:1f:35:9c:56:
90:84:69:5e:9c:bd:cd:7f:79:f4:7f:26:aa:c5:38:
41:cf:4c:5b:9b:46:b2:8e:bd:dc:b9:0f:de:a3:8d:
55:f2:9c:67:4b:8e:02:d1:3d:e3:c7:76:02:98:d4:
b4:06:e1:2c:15:cb:c4:85:43:8d:9d:f1:97:af:73:
cb:f7:b9:30:f8:83:6a:db:dd:c2:60:6e:83:6a:ba:
03:bc:2d:a7:95:01:fb:56:79:b1:f3:be:61:2f:f2:
11:10:db:60:f0:00:54:30:db:48:92:9e:81:a9:9c:
01:72:bc:23:64:00:6d:28:bd:7d:13:a6:b3:f7:01:
58:9f:23:b1:f5:25:9a:a9:e1:a9:cf:4b:30:bd:fb:
7c:6e:f1:97:f5:aa:a4:97:65:57:d8:36:38:8b:fd:
5e:e2:cb:f1:92:23:bc:7f:5f:a6:4d:e6:d8:0e:8c:
17:87:8c:c7:6c:95:6e:39:0f:9e:d5:ab:4b:a3:04:
71:69:95:ae:4f:84:f6:41:d8:27:ff:91:45:a5:e3:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:56:7B:D0:DC:F5:55:DD:F8:4F:62:B4:53:41:AF:A0:D0:11:4B
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/qKFWe9Dc9VXd-E9itFNBr6DQEUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.158.0/23
95.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:09:cb:ad:02:89:44:c3:a6:da:3d:80:d1:77:a0:c9:19:2e:
49:75:73:5f:2a:0d:76:93:71:c4:df:6b:95:d8:16:c3:bf:07:
0b:3a:65:18:5b:8a:75:b6:62:c7:a9:86:96:e6:65:d8:f7:4e:
3f:15:fd:8d:ee:a3:7e:89:20:86:b0:cb:5b:f8:7f:a5:51:86:
c5:64:f2:61:9f:4e:b4:ce:14:89:8e:ba:9c:1e:13:2a:41:cb:
91:a4:ac:ce:d4:c0:49:5a:ef:03:77:2a:60:a5:fa:71:5c:5d:
e3:4b:1d:f5:4f:f7:b4:68:64:e2:d1:a8:9e:47:88:67:e8:b5:
89:5a:62:71:50:e2:f7:b2:43:0c:c7:37:33:28:04:61:92:55:
30:77:2a:24:93:21:bd:3f:72:f8:af:6c:9b:da:b3:e6:b8:54:
03:01:18:07:3d:27:d0:a2:4a:e9:e8:de:5e:46:fa:75:87:8d:
5d:53:ad:fc:b4:1e:47:bb:bb:79:f2:77:6e:f5:d5:86:66:a1:
ca:ff:b5:ad:3a:0a:28:0d:49:d6:21:7a:59:fb:be:17:af:e5:
23:cc:82:af:5e:ef:8b:f1:89:f9:4a:40:f2:17:ff:d9:ad:8f:
8c:bd:8b:7a:87:be:b9:64:3c:f5:bf:11:1a:3b:ae:95:3e:56:
3f:f8:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:15:43 2025 by rpki-client