Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/eKxKng3YrXa1al_k_FMxk62FFXk.roa
File: eKxKng3YrXa1al_k_FMxk62FFXk.roa (raw, json)
Hash identifier: qjVORuy1yxJ7dvxNyktASCo2Y9i5FPpM1t2EcBY82MM=
Subject key identifier: 78:AC:4A:9E:0D:D8:AD:76:B5:6A:5F:E4:FC:53:31:93:AD:85:15:79
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0199E6BE09DAE49E492D1939FB8A24E3D69A
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/eKxKng3YrXa1al_k_FMxk62FFXk.roa
Signing time: Wed 15 Oct 2025 07:20:38 +0000
ROA not before: Wed 15 Oct 2025 07:20:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
72.60.0.0/20 maxlen: 24
72.60.16.0/22 maxlen: 24
72.60.20.0/22 maxlen: 24
72.60.24.0/21 maxlen: 24
72.60.32.0/21 maxlen: 24
72.60.40.0/22 maxlen: 24
72.60.44.0/22 maxlen: 24
72.60.48.0/20 maxlen: 24
72.60.64.0/21 maxlen: 24
72.60.72.0/21 maxlen: 24
72.60.80.0/21 maxlen: 24
72.60.88.0/21 maxlen: 24
72.60.96.0/21 maxlen: 24
72.60.104.0/21 maxlen: 24
72.60.112.0/20 maxlen: 24
72.60.128.0/24 maxlen: 24
72.60.129.0/24 maxlen: 24
72.60.130.0/23 maxlen: 24
72.60.132.0/23 maxlen: 24
72.60.134.0/23 maxlen: 24
72.60.136.0/21 maxlen: 24
72.60.144.0/20 maxlen: 24
72.60.160.0/20 maxlen: 24
72.60.176.0/21 maxlen: 24
72.60.184.0/21 maxlen: 24
72.60.192.0/21 maxlen: 24
72.60.200.0/21 maxlen: 24
72.60.208.0/22 maxlen: 24
72.60.212.0/22 maxlen: 24
72.60.216.0/21 maxlen: 24
72.60.224.0/21 maxlen: 24
72.60.232.0/21 maxlen: 24
72.60.240.0/20 maxlen: 24
72.61.0.0/20 maxlen: 24
72.61.16.0/22 maxlen: 24
72.61.20.0/22 maxlen: 24
72.61.24.0/21 maxlen: 24
72.61.32.0/19 maxlen: 24
72.61.64.0/20 maxlen: 24
72.61.80.0/20 maxlen: 24
72.61.96.0/20 maxlen: 24
72.61.112.0/20 maxlen: 24
72.61.128.0/21 maxlen: 24
72.61.136.0/22 maxlen: 24
72.61.140.0/22 maxlen: 24
72.61.144.0/22 maxlen: 24
72.61.148.0/22 maxlen: 24
72.61.152.0/21 maxlen: 24
72.61.160.0/21 maxlen: 24
72.61.168.0/21 maxlen: 24
72.61.176.0/20 maxlen: 24
72.61.192.0/21 maxlen: 24
72.61.200.0/21 maxlen: 24
72.61.208.0/21 maxlen: 24
72.61.216.0/21 maxlen: 24
72.61.224.0/19 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/23 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
148.230.70.0/23 maxlen: 24
148.230.72.0/21 maxlen: 24
148.230.80.0/20 maxlen: 24
148.230.96.0/22 maxlen: 24
148.230.100.0/22 maxlen: 24
148.230.104.0/21 maxlen: 24
148.230.112.0/21 maxlen: 24
148.230.120.0/22 maxlen: 24
148.230.124.0/22 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:be:09:da:e4:9e:49:2d:19:39:fb:8a:24:e3:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Oct 15 07:20:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78ac4a9e0dd8ad76b56a5fe4fc533193ad851579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:ee:ed:7a:8b:24:2f:55:06:71:dd:34:5e:
34:77:ff:7c:3d:a6:49:28:ee:41:2e:5f:21:3a:fb:
08:fe:7d:c6:2d:c8:79:cb:d7:a9:f6:4e:b7:fa:8f:
2c:43:f1:46:77:3e:42:1d:90:6d:32:5c:b1:5d:33:
b1:69:f1:1b:3b:31:e5:6b:4b:e8:d1:c6:da:1d:0e:
d6:68:50:bf:7d:2a:a0:fe:75:8f:3c:9a:43:41:56:
d4:72:e4:20:6d:67:ba:6e:78:9a:38:c1:6c:c6:40:
a5:89:88:69:ae:a1:8c:61:0d:7c:5f:b5:1b:39:01:
68:03:4e:b9:8f:9d:23:0e:45:67:2e:48:c4:cf:97:
13:44:ae:8c:79:07:77:f8:99:1e:dc:cf:28:77:06:
d4:2c:3d:58:a3:16:a0:b8:70:21:ab:6f:65:e4:c8:
2c:1b:00:1e:cb:57:62:59:fb:9c:d0:51:64:c7:c7:
d1:15:2e:d3:d2:99:8d:e4:2e:0c:c6:e0:ef:c8:92:
e5:64:ac:80:0c:61:e2:b6:ef:95:7d:ff:cf:19:cb:
fc:8a:93:eb:87:76:c0:b0:54:ca:67:81:8e:fc:5f:
78:96:86:61:58:01:f6:c8:51:4d:28:7b:75:df:da:
3a:60:09:54:c6:5a:69:88:30:9c:c2:9e:88:27:8d:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:4A:9E:0D:D8:AD:76:B5:6A:5F:E4:FC:53:31:93:AD:85:15:79
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/eKxKng3YrXa1al_k_FMxk62FFXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.255.255
69.62.64.0/18
72.60.0.0/15
103.199.184.0/22
148.222.52.0/22
148.230.64.0/18
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:ae:25:82:dd:f0:b2:a5:3f:f0:72:19:2d:39:2b:f1:d4:49:
01:80:0c:6e:76:43:5d:53:38:5f:f7:ab:03:61:36:f1:fa:e4:
d6:a5:71:75:e9:7c:3d:e0:a1:d8:e6:5a:1d:d1:92:14:90:62:
14:21:e4:61:88:b4:52:e9:d8:01:a5:be:68:43:1c:25:3b:aa:
05:d7:6f:6e:1f:27:b5:07:e4:31:3e:3d:15:32:9b:2a:6c:8c:
51:b2:92:a0:e3:61:f8:e8:5e:c1:af:bd:80:a9:2f:23:1b:a5:
a4:d0:11:00:d9:3b:19:05:6f:7d:77:7c:37:c8:80:e7:d4:a9:
7c:4e:71:db:ee:2d:12:52:96:88:5d:d9:5d:56:51:95:3e:19:
97:d9:91:67:02:3b:6e:94:53:8a:66:4b:b4:22:06:2b:73:6a:
16:39:5c:dc:22:0d:34:93:fc:0d:ac:ca:bb:ea:0a:d1:ac:2d:
bc:2b:ae:0f:f8:c5:4f:75:d7:60:67:29:31:b9:8e:1e:fe:62:
d3:ac:d9:fe:e7:f2:82:e8:ad:5d:f1:71:f4:11:c1:43:98:37:
40:f3:39:0c:3f:ae:1a:fd:09:84:3f:ef:ea:0a:82:25:ec:42:
60:2a:7d:a6:8d:fb:86:d7:6b:77:6b:dc:55:64:15:fd:87:73:
7d:20:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:57 2025 by rpki-client