Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ZmYRAbce4_b3Y3MTGH_-5YNd44M.roa
File: ZmYRAbce4_b3Y3MTGH_-5YNd44M.roa (raw, json)
Hash identifier: gg6NDZsFuQEdCclcvQPF1go9hrM2TiRZm2hNjCEJSm8=
Subject key identifier: 66:66:11:01:B7:1E:E3:F6:F7:63:73:13:18:7F:FE:E5:83:5D:E3:83
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0197B1678AE9B6A019010D7D2880C16AF8E4
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ZmYRAbce4_b3Y3MTGH_-5YNd44M.roa
Signing time: Fri 27 Jun 2025 12:40:42 +0000
ROA not before: Fri 27 Jun 2025 12:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:67:8a:e9:b6:a0:19:01:0d:7d:28:80:c1:6a:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 27 12:40:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66661101b71ee3f6f7637313187ffee5835de383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:2d:7c:90:43:a1:a8:9b:6f:d3:d4:20:dd:
76:e9:69:e0:75:3d:48:05:00:c2:c6:48:a7:62:bd:
a8:af:a8:bb:23:f7:f0:dd:fc:33:2b:fa:1e:d5:d4:
a1:9c:b8:98:ac:35:5e:22:61:5b:95:e1:73:9a:f3:
4c:1a:26:88:21:a6:a4:63:fb:f5:9d:be:d2:7e:2f:
63:9f:72:09:f3:51:a6:2e:70:3a:83:e2:4d:8c:4c:
62:4e:21:12:d7:ff:49:8f:1e:65:4c:fa:54:2d:4a:
aa:e9:8a:1f:21:86:e5:8a:6e:b4:58:c4:8f:5d:09:
ce:47:59:b3:82:27:44:d5:f8:44:e8:f7:96:87:1d:
6d:0f:89:fd:17:09:dd:4e:4f:12:0d:56:e7:91:d6:
ca:fd:47:17:65:72:ed:d0:97:b9:fc:36:44:31:37:
b9:a3:2d:bb:9a:89:a9:3e:b2:d1:7c:a3:c3:7c:8b:
e8:85:7f:7c:c7:03:19:45:9d:79:eb:c8:89:b5:2e:
fd:75:0a:6b:0e:25:2a:cb:d3:79:8e:fb:5c:cf:19:
77:cf:c3:31:59:2b:ac:2f:29:64:3f:cb:bf:c7:69:
bc:69:64:df:38:49:e9:f9:06:52:f6:a7:0f:d7:8c:
ec:ab:42:42:5b:c9:d4:3e:19:b3:21:5a:0c:17:00:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:66:11:01:B7:1E:E3:F6:F7:63:73:13:18:7F:FE:E5:83:5D:E3:83
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ZmYRAbce4_b3Y3MTGH_-5YNd44M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/23
31.97.3.0/24
31.97.8.0-31.97.255.255
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ec:b4:8d:10:ed:57:a3:f7:e7:c2:0e:88:bd:b3:16:03:47:
9b:0a:c2:9a:ba:e8:bf:0f:81:13:88:0a:2b:6d:8b:f0:78:06:
1e:c1:9c:35:14:c0:be:28:b9:db:71:97:9f:e0:23:51:84:3b:
42:2b:6c:2d:46:d3:ab:e4:15:4a:9d:9b:82:b5:1f:c5:f4:9d:
9d:3d:aa:4f:86:c5:96:49:0c:cf:d6:3d:40:ca:c7:9e:f5:1e:
7f:42:fa:da:ab:36:5a:cd:6e:7b:41:7c:7d:e3:70:2d:b0:4b:
c3:82:c7:0b:b0:f9:e3:8d:76:81:3c:d5:fa:ae:fd:6f:d3:46:
d1:a1:61:95:a7:14:6d:32:d0:b0:ea:f9:19:b8:ec:8c:a5:65:
dc:39:89:7e:2f:04:f8:5b:2a:44:ce:60:63:02:3c:31:a0:6c:
a5:29:8e:5e:6d:2e:dc:b9:ee:55:b7:4c:74:36:57:ab:c8:fd:
fe:f3:b4:7f:ed:4b:c8:22:bd:44:ad:e0:d5:8c:13:d8:66:8d:
37:9e:1a:24:19:17:ae:5a:d0:5f:c5:47:c6:f7:60:25:fa:3f:
84:96:5b:77:41:d9:ac:c4:87:a3:8d:c7:ec:20:8c:11:4f:d2:
d0:50:d6:37:b9:0a:f7:70:60:4c:e0:39:3d:16:0d:12:54:a1:
2f:fe:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:57:09 2025 by rpki-client