Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/VgW1BmhPN6q8YDg0CbVYbZdTXBs.roa
File: VgW1BmhPN6q8YDg0CbVYbZdTXBs.roa (raw, json)
Hash identifier: q0o81O+BFE34r4ncnfWUxED1euZdJ1UoYvA1fBXhbL8=
Subject key identifier: 56:05:B5:06:68:4F:37:AA:BC:60:38:34:09:B5:58:6D:97:53:5C:1B
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0198D0B2EE989FE4A025CD0E54431F51BA1B
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/VgW1BmhPN6q8YDg0CbVYbZdTXBs.roa
Signing time: Fri 22 Aug 2025 07:34:04 +0000
ROA not before: Fri 22 Aug 2025 07:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
72.60.0.0/20 maxlen: 24
72.60.16.0/22 maxlen: 24
72.60.20.0/22 maxlen: 24
72.60.24.0/21 maxlen: 24
72.60.32.0/21 maxlen: 24
72.60.40.0/22 maxlen: 24
72.60.44.0/22 maxlen: 24
72.60.48.0/20 maxlen: 24
72.60.64.0/21 maxlen: 24
72.60.72.0/21 maxlen: 24
72.60.80.0/21 maxlen: 24
72.60.88.0/21 maxlen: 24
72.60.96.0/21 maxlen: 24
72.60.104.0/21 maxlen: 24
72.60.112.0/20 maxlen: 24
72.60.128.0/24 maxlen: 24
72.60.144.0/20 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/23 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
148.230.70.0/23 maxlen: 24
148.230.72.0/21 maxlen: 24
148.230.80.0/20 maxlen: 24
148.230.96.0/22 maxlen: 24
148.230.100.0/22 maxlen: 24
148.230.104.0/21 maxlen: 24
148.230.112.0/21 maxlen: 24
148.230.120.0/22 maxlen: 24
148.230.124.0/22 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:b2:ee:98:9f:e4:a0:25:cd:0e:54:43:1f:51:ba:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Aug 22 07:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5605b506684f37aabc60383409b5586d97535c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:aa:b8:60:b5:13:53:5d:26:f4:9c:cb:c1:
f7:f5:83:bf:87:46:b1:f9:77:f9:b3:c5:c1:22:f8:
45:6c:d7:42:dc:f6:a3:a8:05:4b:76:0c:de:ab:8a:
0e:34:97:d4:6c:7c:6c:96:20:ef:08:3f:89:94:de:
df:0c:88:10:78:82:ba:4e:2c:4a:08:b0:13:f8:c0:
74:d3:a1:a4:61:fb:32:c0:17:18:15:d2:16:2d:17:
3f:0b:f0:76:7b:5e:09:ae:ae:11:78:33:cc:ba:8e:
90:33:2c:65:b1:ce:b0:16:bc:60:81:c5:cc:1b:8d:
6b:55:d3:1b:ee:a1:ce:d4:6b:c9:e9:fe:29:14:b0:
4e:e9:f6:f1:3b:3e:bd:b3:d6:a6:80:0e:38:48:c1:
95:82:16:08:06:73:0f:39:c5:a4:d6:69:df:db:0d:
e5:b5:be:f4:c6:e8:17:7d:83:50:28:03:bf:2e:c1:
91:7c:77:8c:6b:6d:41:bd:e3:3f:79:90:6d:aa:ea:
ac:85:01:00:34:da:f2:49:82:a2:ba:53:12:d9:f4:
5c:00:92:b2:bc:77:9b:8e:c7:2b:0b:7b:89:34:12:
ce:88:29:56:87:84:ed:1b:42:90:3c:78:ad:0a:21:
94:0f:ca:1b:17:fa:03:64:d0:45:a8:e3:bc:48:f0:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:B5:06:68:4F:37:AA:BC:60:38:34:09:B5:58:6D:97:53:5C:1B
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/VgW1BmhPN6q8YDg0CbVYbZdTXBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.255.255
69.62.64.0/18
72.60.0.0-72.60.128.255
72.60.144.0/20
103.199.184.0/22
148.222.52.0/22
148.230.64.0/18
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
54:9c:72:f1:d3:a8:92:d5:41:1b:a2:ed:72:05:d0:3d:5d:74:
e1:e1:13:9e:4d:a0:3c:65:7e:85:90:b9:59:b6:91:d4:60:27:
d2:30:48:cf:32:f2:f0:b9:6b:12:d4:0a:26:db:4a:6a:d5:23:
e4:5d:f8:bc:ef:ff:f1:51:71:43:14:97:06:8c:1e:fe:7e:b6:
f4:c6:c8:71:b1:14:93:97:a7:bb:49:5a:c9:f0:d5:25:69:0f:
b8:0f:a7:9d:90:8b:07:89:9e:bd:5c:1f:14:bf:40:ac:12:f9:
5e:b5:b1:e9:f8:00:dc:71:50:6b:40:37:40:09:23:a3:38:26:
fe:26:25:c7:61:4d:d0:80:e8:00:7e:57:1f:17:f5:40:69:c5:
42:65:ea:e9:07:a8:52:a6:01:28:1c:ff:fd:1a:e8:d7:40:e2:
48:7a:73:f3:c4:3e:e2:30:80:1c:79:3f:59:2f:c3:c0:c7:d4:
b0:9c:e0:d0:72:c5:c7:4c:15:ba:f8:71:93:66:6f:fa:eb:01:
9c:06:8b:c4:ad:ca:d1:03:4e:aa:24:74:b7:5c:c7:78:df:0b:
3e:41:8c:14:ab:34:21:f4:ff:a1:d4:2a:ea:8d:a0:1d:f1:45:
85:23:fd:09:61:4e:9b:4d:9c:21:d8:cd:31:f3:99:3d:f2:b8:
e0:73:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:02 2025 by rpki-client