Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/VfzEwRQVZtV5XJdR5BQm0Mx_06w.roa
File: VfzEwRQVZtV5XJdR5BQm0Mx_06w.roa (raw, json)
Hash identifier: J4RpGCk/pFMPyatYJ7oSnAdqs8qESqmsUK/cBo3w5Mk=
Subject key identifier: 55:FC:C4:C1:14:15:66:D5:79:5C:97:51:E4:14:26:D0:CC:7F:D3:AC
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019787AD7D9348179606741843A79F53D413
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/VfzEwRQVZtV5XJdR5BQm0Mx_06w.roa
Signing time: Thu 19 Jun 2025 10:13:03 +0000
ROA not before: Thu 19 Jun 2025 10:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.69.32.0/24 maxlen: 24
103.69.33.0/24 maxlen: 24
103.69.34.0/24 maxlen: 24
103.69.35.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.124.164.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.166.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
103.204.120.0/24 maxlen: 24
103.204.121.0/24 maxlen: 24
103.204.122.0/24 maxlen: 24
103.254.240.0/24 maxlen: 24
103.254.241.0/24 maxlen: 24
103.254.242.0/24 maxlen: 24
103.254.243.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.53.102.0/24 maxlen: 24
185.53.103.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
199.168.120.0/24 maxlen: 24
199.168.121.0/24 maxlen: 24
199.168.122.0/24 maxlen: 24
199.168.123.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:ad:7d:93:48:17:96:06:74:18:43:a7:9f:53:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 19 10:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55fcc4c1141566d5795c9751e41426d0cc7fd3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:21:b5:8f:bb:de:94:29:46:d5:50:c2:f3:
dd:58:aa:71:a0:68:94:58:a7:fa:3f:e8:77:b6:1c:
a9:7e:2b:db:23:e8:e7:5a:79:71:ae:dc:01:cf:fe:
0c:dd:bb:04:ab:70:62:aa:75:f5:78:02:95:51:ec:
aa:a5:b4:f6:50:7c:2e:48:0a:15:c5:08:52:01:db:
87:73:a9:5f:12:8e:87:31:51:cf:96:5a:4d:2f:53:
c0:3c:4c:bb:9e:85:31:c0:d7:ab:92:0a:22:68:e2:
a8:39:aa:cc:a1:01:7e:f6:86:45:61:cd:32:df:f4:
00:5e:d7:28:9a:f4:ad:8d:d7:53:4d:cc:3e:ec:58:
38:92:17:2b:3c:2a:97:b7:a3:96:eb:07:9c:48:a1:
4d:6c:74:fa:90:24:ca:ef:2d:4b:fe:0d:a6:11:56:
f7:2f:22:55:cb:dd:3e:ac:9d:2b:14:fb:70:5b:aa:
5a:71:74:99:7c:08:41:6b:91:dd:c7:85:49:4b:9b:
70:a1:02:f2:c2:14:65:ea:14:61:b7:2c:8a:b5:21:
2a:b8:07:fb:9d:3a:14:8e:72:f9:e3:b8:1e:9a:0f:
17:ab:5a:a5:a1:f9:bc:81:9c:21:ad:8d:39:0c:32:
d0:15:43:92:32:23:b3:6f:39:2d:9b:2c:b4:f5:77:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:C4:C1:14:15:66:D5:79:5C:97:51:E4:14:26:D0:CC:7F:D3:AC
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/VfzEwRQVZtV5XJdR5BQm0Mx_06w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
31.171.159.0/24
45.142.25.0-45.142.27.255
103.69.32.0/22
103.93.40.0-103.93.42.255
103.124.164.0/22
103.204.120.0-103.204.122.255
103.254.240.0/22
109.104.132.0/24
109.104.138.0-109.104.143.255
109.104.156.0/23
109.104.159.0/24
144.48.52.0/22
185.53.100.0/22
185.153.125.0-185.153.127.255
199.168.120.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
44:03:85:2a:cc:bb:f2:3f:b5:d2:8c:7b:19:f8:06:f9:54:49:
b0:ed:15:03:e7:4c:91:d6:60:be:b8:28:a8:9e:8d:39:58:e8:
97:00:e6:a2:59:53:3b:9f:35:ac:b1:8b:e7:4d:30:31:38:1c:
ce:c8:0a:48:ed:a6:7a:f1:50:d7:86:8a:82:22:cc:ac:c3:46:
90:62:b8:d1:35:91:a2:8c:94:c9:ae:6f:b7:ec:c8:9c:f4:77:
b5:d7:e2:40:3b:52:3e:37:c8:e5:d7:f2:c8:54:5c:e8:e9:b6:
a5:97:ed:59:eb:4b:42:8e:b3:2a:45:50:f5:28:27:bc:5e:00:
75:70:ad:e4:06:54:8f:1c:5c:c0:ac:ba:3f:bd:be:12:a4:22:
13:e4:d9:e2:d6:dd:60:67:b4:8f:a0:2f:17:45:56:38:c0:a4:
f3:22:38:75:c3:88:0b:2a:30:8b:ed:19:af:e4:17:fc:e3:b0:
58:aa:be:60:73:a7:b8:99:a9:b0:4c:b4:73:06:52:a3:34:c4:
06:31:17:f5:a6:27:75:2e:63:f7:2a:fd:8b:46:55:ba:be:0a:
91:f6:cd:64:ec:ce:98:ac:dd:03:ef:4d:8a:51:4c:9f:6c:c4:
da:b0:14:4b:a5:fc:80:6c:a0:64:04:a3:c5:bf:b9:1e:87:06:
c5:e0:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:14:14 2025 by rpki-client