Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/QMsKchkAHrhAjGfXgVHY7uMhnP8.roa
File: QMsKchkAHrhAjGfXgVHY7uMhnP8.roa (raw, json)
Hash identifier: iWsn0qu5e5f866h4f3+LyASdbvsI5hSaPueavAEMsuw=
Subject key identifier: 40:CB:0A:72:19:00:1E:B8:40:8C:67:D7:81:51:D8:EE:E3:21:9C:FF
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019754967D9AFECA85E18362BCBAE44D1A33
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/QMsKchkAHrhAjGfXgVHY7uMhnP8.roa
Signing time: Mon 09 Jun 2025 12:07:18 +0000
ROA not before: Mon 09 Jun 2025 12:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42548
IP address blocks: 62.183.76.0/22 maxlen: 22
83.239.112.0/20 maxlen: 20
83.239.123.0/24 maxlen: 24
85.172.182.0/24 maxlen: 24
85.172.184.0/21 maxlen: 21
85.173.160.0/22 maxlen: 22
85.173.165.0/24 maxlen: 24
85.173.166.0/24 maxlen: 24
85.173.169.0/24 maxlen: 24
85.173.170.0/23 maxlen: 23
85.173.172.0/23 maxlen: 23
85.173.174.0/24 maxlen: 24
85.173.177.0/24 maxlen: 24
85.173.180.0/22 maxlen: 22
85.173.188.0/23 maxlen: 23
178.34.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:96:7d:9a:fe:ca:85:e1:83:62:bc:ba:e4:4d:1a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 9 12:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40cb0a7219001eb8408c67d78151d8eee3219cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:a8:51:52:b6:1f:a9:da:5c:08:26:ed:e6:
34:b2:a7:d3:df:0d:88:cb:3b:97:3c:77:65:73:35:
ae:14:bb:18:f4:42:78:70:04:c3:d5:46:64:ce:77:
98:de:19:70:f4:53:58:57:10:82:fc:4d:40:99:e9:
da:b1:91:21:4c:a2:13:24:b8:83:d8:d8:2a:43:73:
c2:2c:1d:3b:cb:8d:6a:1f:83:83:cf:c9:ee:7d:16:
bb:bf:eb:c4:ef:f0:5f:e1:6f:08:02:ba:55:95:49:
df:27:1d:72:c9:99:93:aa:3c:f6:17:45:87:24:13:
22:b5:20:86:bb:af:2f:a9:90:c7:53:2b:00:22:9a:
24:8b:c1:62:f2:5f:22:d4:1f:1a:20:46:49:d2:df:
05:e5:d9:b1:b4:be:09:a2:7f:70:0f:fb:16:da:1a:
3e:b0:0b:7c:28:21:e2:3f:9a:84:92:15:c4:c1:17:
d4:de:f7:d7:92:79:5e:54:27:fa:3d:8f:d8:dc:2c:
d0:c2:82:8a:fc:91:d0:ab:eb:1e:d2:3b:f3:79:53:
e3:b8:d8:bc:6d:a2:ab:d3:f1:e1:d8:80:ff:84:04:
d2:16:18:e5:71:08:57:86:45:f7:63:cd:12:98:1c:
50:a7:00:1a:f4:a5:cc:e9:f7:1d:f5:15:f7:d5:38:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:0A:72:19:00:1E:B8:40:8C:67:D7:81:51:D8:EE:E3:21:9C:FF
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/QMsKchkAHrhAjGfXgVHY7uMhnP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.76.0/22
83.239.112.0/20
85.172.182.0/24
85.172.184.0/21
85.173.160.0/22
85.173.165.0-85.173.166.255
85.173.169.0-85.173.174.255
85.173.177.0/24
85.173.180.0/22
85.173.188.0/23
178.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:83:c6:74:5a:56:be:cc:97:e7:69:1f:2a:8d:db:e0:20:92:
a3:44:c6:d1:2c:c4:e9:45:a1:c8:07:3a:79:50:21:3a:c7:e9:
0b:38:b6:d7:ac:60:76:4e:16:b3:9b:30:e1:00:61:f0:a7:e4:
64:0a:1a:1b:06:2a:67:e6:b0:57:29:d8:33:92:e3:d9:d5:3d:
17:08:b6:b5:5f:de:66:3f:f9:70:42:29:4b:6a:d5:7f:7e:40:
45:1c:c4:c2:ee:be:eb:53:5d:9a:01:50:4f:03:66:52:17:7d:
20:c9:59:71:56:48:82:86:1d:f4:9a:fd:fa:af:1a:8f:d0:e4:
a0:8b:c0:e4:24:f3:5b:bc:63:44:36:b4:08:e8:02:b9:5f:ba:
90:49:b7:9c:b5:67:65:93:35:17:49:f5:ba:a4:e2:cc:a1:ba:
c8:ab:b5:cc:3b:67:d4:b0:45:db:0d:a9:c7:80:09:db:58:6a:
6b:da:91:83:95:7f:42:2e:89:c6:5d:a0:fb:b5:85:84:54:09:
6f:b1:b4:c9:60:1a:be:a7:85:8b:13:cd:5f:7a:20:13:16:bd:
66:03:ba:3c:8d:19:01:28:c1:28:4f:f1:41:03:35:3d:ae:cd:
6a:35:59:2a:e9:91:16:9a:30:fd:49:77:5e:a6:75:25:4e:b6:
08:03:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:48:53 2025 by rpki-client