Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qi47v3pLKVPIynq0N78MktODjgo.roa
File: qi47v3pLKVPIynq0N78MktODjgo.roa (raw, json)
Hash identifier: u7+YezHaKvr/deNsFe7ts98M7NzmcLOJfN7BnGrbRr4=
Subject key identifier: AA:2E:3B:BF:7A:4B:29:53:C8:CA:7A:B4:37:BF:0C:92:D3:83:8E:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198D0DA53BAE60BBFD96205A2C069D1F185
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qi47v3pLKVPIynq0N78MktODjgo.roa
Signing time: Fri 22 Aug 2025 08:17:05 +0000
ROA not before: Fri 22 Aug 2025 08:17:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34224
IP address blocks: 31.13.195.0/24 maxlen: 32
31.13.197.0/24 maxlen: 32
31.13.216.0/21 maxlen: 32
31.13.217.0/24 maxlen: 32
31.13.221.0/24 maxlen: 32
31.13.223.0/24 maxlen: 32
31.13.230.0/24 maxlen: 32
31.13.236.0/22 maxlen: 32
31.13.241.0/24 maxlen: 32
31.13.245.0/24 maxlen: 32
37.60.138.0/24 maxlen: 32
37.60.139.0/24 maxlen: 32
45.81.38.0/24 maxlen: 32
45.139.123.0/24 maxlen: 24
82.115.210.0/24 maxlen: 32
83.143.115.0/24 maxlen: 32
85.217.140.0/24 maxlen: 32
87.120.6.0/23 maxlen: 32
87.120.6.0/24 maxlen: 32
87.120.8.0/24 maxlen: 32
87.120.13.0/24 maxlen: 32
87.120.37.0/24 maxlen: 32
87.120.39.0/24 maxlen: 32
87.120.43.0/24 maxlen: 32
87.120.61.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.104.0/24 maxlen: 32
87.120.109.0/24 maxlen: 32
87.120.128.0/23 maxlen: 32
87.120.133.0/24 maxlen: 32
87.120.134.0/24 maxlen: 32
87.120.135.0/24 maxlen: 32
87.120.176.0/24 maxlen: 32
87.120.195.0/24 maxlen: 32
87.120.199.0/24 maxlen: 32
87.120.200.0/24 maxlen: 32
87.120.201.0/24 maxlen: 32
87.120.206.0/23 maxlen: 32
87.120.206.0/24 maxlen: 32
87.120.207.0/24 maxlen: 32
87.120.217.0/24 maxlen: 32
87.120.223.0/24 maxlen: 32
87.120.253.0/24 maxlen: 32
87.120.254.0/24 maxlen: 32
87.120.255.0/24 maxlen: 32
87.121.0.0/23 maxlen: 32
87.121.0.0/24 maxlen: 32
87.121.1.0/24 maxlen: 32
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 32
87.121.32.0/24 maxlen: 24
87.121.42.0/24 maxlen: 32
87.121.52.0/24 maxlen: 32
87.121.64.0/24 maxlen: 32
87.121.83.0/24 maxlen: 32
87.121.90.0/23 maxlen: 32
87.121.110.0/24 maxlen: 32
87.121.111.0/24 maxlen: 32
87.121.112.0/24 maxlen: 32
87.121.113.0/24 maxlen: 32
87.121.118.0/24 maxlen: 32
87.121.150.0/23 maxlen: 32
87.121.150.0/24 maxlen: 32
87.121.151.0/24 maxlen: 32
87.121.161.0/24 maxlen: 32
91.92.0.0/24 maxlen: 32
91.92.1.0/24 maxlen: 32
91.92.2.0/24 maxlen: 32
91.92.65.0/24 maxlen: 32
91.92.66.0/24 maxlen: 32
91.92.105.0/24 maxlen: 32
91.92.109.0/24 maxlen: 32
91.92.139.0/24 maxlen: 32
91.92.197.0/24 maxlen: 32
91.92.198.0/23 maxlen: 32
91.92.219.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
91.212.233.0/24 maxlen: 32
92.249.49.0/24 maxlen: 32
93.123.8.0/24 maxlen: 32
93.123.12.0/24 maxlen: 32
93.123.18.0/24 maxlen: 32
93.123.28.0/23 maxlen: 32
93.123.32.0/22 maxlen: 32
93.123.36.0/24 maxlen: 32
94.156.15.0/24 maxlen: 32
94.156.24.0/24 maxlen: 32
94.156.25.0/24 maxlen: 32
94.156.42.0/24 maxlen: 32
94.156.44.0/24 maxlen: 32
94.156.77.0/24 maxlen: 32
94.156.94.0/24 maxlen: 32
94.156.98.0/24 maxlen: 32
94.156.100.0/24 maxlen: 32
94.156.129.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.153.0/24 maxlen: 32
94.156.158.0/24 maxlen: 32
94.156.172.0/23 maxlen: 32
94.156.185.0/24 maxlen: 32
94.156.188.0/24 maxlen: 32
94.156.216.0/21 maxlen: 32
94.156.249.0/24 maxlen: 32
94.156.251.0/24 maxlen: 32
94.156.252.0/24 maxlen: 32
185.254.36.0/24 maxlen: 32
194.55.184.0/23 maxlen: 32
194.169.173.0/24 maxlen: 32
212.73.128.0/23 maxlen: 32
212.73.130.0/23 maxlen: 32
212.73.131.0/24 maxlen: 32
212.73.132.0/24 maxlen: 32
212.73.133.0/24 maxlen: 32
212.73.134.0/24 maxlen: 32
212.73.136.0/24 maxlen: 32
212.73.138.0/23 maxlen: 32
212.73.138.0/24 maxlen: 32
212.73.140.0/24 maxlen: 32
212.73.141.0/24 maxlen: 32
212.73.142.0/24 maxlen: 32
212.73.143.0/24 maxlen: 32
212.73.144.0/24 maxlen: 32
212.73.145.0/24 maxlen: 32
212.73.146.0/24 maxlen: 32
212.73.147.0/24 maxlen: 32
212.73.148.0/24 maxlen: 32
212.73.155.0/24 maxlen: 32
212.73.157.0/24 maxlen: 32
212.87.207.0/24 maxlen: 32
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
2a00:1728:41::/48 maxlen: 48
2a00:1728:42::/48 maxlen: 48
2a00:1728:43::/48 maxlen: 48
2a00:1728:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:da:53:ba:e6:0b:bf:d9:62:05:a2:c0:69:d1:f1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 08:17:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2e3bbf7a4b2953c8ca7ab437bf0c92d3838e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:7d:99:14:d8:48:5b:1c:90:d3:67:a5:bc:
b1:37:8f:50:b0:5b:bf:c4:7b:7a:f6:ba:e8:1c:e3:
74:7d:69:a2:89:69:45:bd:c1:0c:90:35:32:03:aa:
6a:fe:67:3c:cc:16:52:6e:7a:65:e6:e8:35:7e:16:
fe:45:7e:b4:05:25:ca:e0:91:fa:bc:1a:2a:e2:fb:
a7:9c:8b:0a:61:37:a0:b3:8f:23:46:d9:2d:aa:69:
08:4c:8f:5d:9b:d6:ba:31:04:73:6b:7a:f9:d2:e6:
18:4a:0e:ae:2b:b2:a3:00:7d:eb:4e:21:ed:53:e7:
b9:32:c6:b7:84:d9:7d:b2:50:b5:05:c3:95:0a:23:
14:34:6a:fb:35:c5:82:e9:58:99:d6:c9:52:2e:b3:
5b:a2:7a:1c:58:17:b0:9f:5a:d9:9f:1f:df:ec:8e:
5b:cb:b7:c0:f4:1f:a5:4a:c1:01:cf:f5:89:7a:14:
e7:b5:ad:c8:88:f2:3c:31:25:c5:ea:31:0f:2d:7f:
f3:96:e0:0e:cf:20:1f:42:ea:34:8b:6a:47:50:fd:
db:05:7b:66:68:ef:29:85:4d:e2:ce:ff:c6:83:04:
f5:ac:1f:88:8a:70:3c:bf:3b:2a:05:20:b9:e6:62:
d1:65:0c:a2:e1:c4:d4:e9:8b:e5:6b:e8:e0:c3:7e:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:3B:BF:7A:4B:29:53:C8:CA:7A:B4:37:BF:0C:92:D3:83:8E:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qi47v3pLKVPIynq0N78MktODjgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.195.0/24
31.13.197.0/24
31.13.216.0/21
31.13.230.0/24
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
45.139.123.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.98.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.133.0-87.120.135.255
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.32.0/24
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.83.0/24
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.36.255
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/24
94.156.172.0/23
94.156.185.0/24
94.156.188.0/24
94.156.216.0/21
94.156.249.0/24
94.156.251.0-94.156.252.255
185.254.36.0/24
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
64:e1:31:8d:64:38:1e:c6:23:47:77:0d:0d:48:83:e7:ae:f8:
51:86:cc:c1:0e:8b:9e:65:41:90:8e:68:4c:79:ce:da:62:fa:
ca:d6:fc:9a:e1:3c:37:43:87:63:e4:ed:2e:06:89:d1:73:2c:
40:af:51:ed:a0:8f:7c:88:d7:6c:eb:c0:96:e7:07:6a:3f:ff:
1d:4f:b0:d0:be:ce:b8:72:37:65:25:e5:08:41:b7:7d:b8:6e:
17:91:05:be:91:c5:52:d4:a0:73:5d:94:f6:94:87:dc:a5:2c:
eb:63:89:dc:7b:49:a3:78:88:35:ea:59:c5:41:c3:38:26:c4:
e5:bd:b5:93:cb:fb:ab:41:7b:f7:3c:10:fa:2e:02:62:91:e1:
08:78:f2:f0:f9:14:20:6e:13:89:a2:4c:2f:b0:13:56:ad:d2:
ce:16:f9:d5:3d:45:33:53:ac:b7:41:a1:ce:95:73:76:19:7e:
7d:8f:05:8b:5f:ca:64:01:f4:bb:89:29:70:8d:c9:cc:24:8b:
d3:e0:2b:0f:0f:74:dd:48:e8:a3:aa:82:55:b5:06:39:50:ee:
72:38:58:ea:a5:18:3b:1a:52:8e:f8:09:97:cd:a0:69:5f:7f:
1d:f5:46:65:1f:eb:0b:24:24:7f:4f:4e:f9:18:37:92:b9:6b:
46:97:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:11 2025 by rpki-client