Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DdlfXH1rZ05kZIn5TJUMT5_Sk2E.roa
File: DdlfXH1rZ05kZIn5TJUMT5_Sk2E.roa (raw, json)
Hash identifier: dZTbIEz3JXjyNXuQDwLHckcy9gnzNG2cVF3bQHd3E+c=
Subject key identifier: 0D:D9:5F:5C:7D:6B:67:4E:64:64:89:F9:4C:95:0C:4F:9F:D2:93:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019888349C503DC14FE1D1C6F1AE61DA68B5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DdlfXH1rZ05kZIn5TJUMT5_Sk2E.roa
Signing time: Fri 08 Aug 2025 05:43:25 +0000
ROA not before: Fri 08 Aug 2025 05:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.82.0/24 maxlen: 32
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.159.0/24 maxlen: 32
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:34:9c:50:3d:c1:4f:e1:d1:c6:f1:ae:61:da:68:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 8 05:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dd95f5c7d6b674e646489f94c950c4f9fd29361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:f2:14:29:72:81:f7:98:8b:38:e8:69:2a:
15:6a:4b:0d:89:3e:ed:cf:b5:8b:4b:a1:dc:94:94:
16:aa:9e:92:d9:3e:84:80:26:8e:87:f2:69:91:fc:
61:a6:94:51:b2:f8:57:c2:5e:d3:bb:98:fa:70:71:
9f:7f:69:bb:65:c3:a6:7a:6e:66:00:1a:a3:a8:c8:
38:5c:74:40:43:fb:0d:eb:0d:02:da:25:73:82:e2:
5e:74:5e:14:9c:02:d7:f9:27:31:f6:dc:78:8d:9b:
cb:11:6c:3b:30:f9:90:3d:b4:b5:ff:5e:c5:92:7c:
99:a2:3f:71:82:a5:a0:6f:ae:cb:9d:15:9f:cd:05:
3d:ca:5b:78:95:9c:c7:d4:10:ed:c6:5d:b0:cb:3c:
89:9a:35:26:6c:91:30:b1:2b:76:15:26:e5:fa:b6:
40:75:c4:1f:60:d4:f5:16:9d:40:3f:ec:5a:d7:27:
38:d1:47:69:2f:97:7e:4d:03:7a:8b:81:7a:a4:2a:
fd:66:3c:30:3b:d7:f2:17:be:ec:ca:84:03:24:c9:
17:94:13:bb:c9:9d:f8:13:ea:75:ff:7c:4c:7c:5d:
3a:3e:a2:9d:9d:d9:a6:de:36:bb:a1:9d:04:d8:a4:
f0:5c:9c:67:87:9f:d3:20:5e:b7:5e:2d:38:f6:32:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:5F:5C:7D:6B:67:4E:64:64:89:F9:4C:95:0C:4F:9F:D2:93:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DdlfXH1rZ05kZIn5TJUMT5_Sk2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.8.93.0/24
45.66.228.0/24
45.84.222.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.82.0/24
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.159.0/24
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ef:3c:68:22:21:ca:95:4e:d7:46:1b:35:e7:f4:48:ca:eb:
55:f7:4e:02:e8:79:d8:15:ad:3d:7e:3f:5c:b8:b6:d8:c7:87:
ba:8d:d7:2a:d6:9b:cc:6b:44:41:d0:52:5f:bf:a1:0f:4e:3d:
e8:cf:42:8f:1d:b4:2d:fb:4a:ce:85:31:8b:3b:c2:03:ef:8d:
ca:a3:a8:83:45:93:3f:21:69:30:d0:cd:37:31:74:2d:f3:e8:
66:d7:fc:92:9c:54:aa:1e:50:23:ba:bc:3f:e3:e6:c7:88:4a:
19:77:57:aa:69:c9:cb:c6:71:3c:dc:b6:f8:d6:05:ae:d9:b3:
fa:19:6c:a6:a3:cd:81:4b:2f:e9:62:ff:42:d5:58:38:b3:aa:
e3:4d:03:a7:de:1d:ce:9e:fe:39:c6:11:10:a8:2c:99:26:79:
76:62:cb:dd:3a:ee:9a:c2:fc:2a:8d:24:b3:94:5d:68:72:db:
15:d7:0f:40:55:b5:4d:ab:c0:14:39:52:f3:f3:a4:68:4e:36:
64:81:d7:bd:10:c8:52:1b:1b:15:73:f6:f3:22:74:b6:36:91:
4d:d4:44:67:7b:ad:e5:84:f5:60:8b:de:06:dd:c8:f1:e8:a7:
b4:41:34:3f:8f:9d:28:2e:87:89:5f:07:4d:3d:1e:a1:d3:d9:
b1:70:e6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:16 2025 by rpki-client