Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/P-_Wbi1I2gi8oHX9MAZe3PZXJDQ.roa
File: P-_Wbi1I2gi8oHX9MAZe3PZXJDQ.roa (raw, json)
Hash identifier: SUeXUBRK111gneMQBTIiq0/M2TNceWYd9pFG3OARHRg=
Subject key identifier: 3F:EF:D6:6E:2D:48:DA:08:BC:A0:75:FD:30:06:5E:DC:F6:57:24:34
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 01995D079B1A2A1E53431CE7059395300206
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/P-_Wbi1I2gi8oHX9MAZe3PZXJDQ.roa
Signing time: Thu 18 Sep 2025 13:33:23 +0000
ROA not before: Thu 18 Sep 2025 13:33:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203489
IP address blocks: 31.24.136.0/21 maxlen: 21
69.172.112.0/20 maxlen: 20
82.145.160.0/19 maxlen: 19
178.20.72.0/21 maxlen: 21
185.3.36.0/22 maxlen: 22
213.137.32.0/19 maxlen: 21
2a00:fa80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:07:9b:1a:2a:1e:53:43:1c:e7:05:93:95:30:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Sep 18 13:33:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fefd66e2d48da08bca075fd30065edcf6572434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:54:98:2b:90:44:74:f1:f2:11:6d:08:6b:
f9:97:eb:f6:d9:3e:bf:ef:08:23:16:0a:3d:a4:eb:
8f:05:b2:a3:df:cc:4a:be:11:c4:a1:49:4a:ae:bc:
a8:8e:8e:6e:0c:b4:6f:2d:04:f7:9b:68:89:49:2a:
42:78:db:21:43:a5:74:f6:4f:a4:03:3c:ca:36:a2:
8a:3b:94:ed:2c:74:63:12:da:ba:60:27:06:48:b4:
f9:72:52:eb:37:52:1e:8d:69:12:4d:1b:0a:de:79:
ac:98:29:0b:fa:25:b1:9f:a5:49:a3:0f:8d:cb:24:
3e:d2:ea:5e:1b:09:ac:e5:79:98:ea:2c:1b:16:fb:
f3:5e:58:1c:e1:c1:a9:a6:0f:7c:54:6c:90:47:c4:
c0:b3:80:57:bb:b0:22:40:b1:22:e0:77:df:86:72:
c2:9a:f5:d1:62:7c:8d:31:8a:35:69:f2:52:ff:14:
21:7c:7b:f0:3c:c5:bf:e1:9f:7c:61:c0:2a:70:a2:
df:e3:84:c0:3a:1d:8a:0e:57:cf:00:01:75:fa:2e:
8f:7e:38:dc:91:08:15:fe:81:46:db:f4:d4:40:2f:
dd:a4:55:36:71:d0:58:88:03:2b:b8:33:27:d5:25:
3a:9e:42:02:6a:f7:3c:5e:90:c8:3f:23:e0:4f:53:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:D6:6E:2D:48:DA:08:BC:A0:75:FD:30:06:5E:DC:F6:57:24:34
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/P-_Wbi1I2gi8oHX9MAZe3PZXJDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.136.0/21
69.172.112.0/20
82.145.160.0/19
178.20.72.0/21
185.3.36.0/22
213.137.32.0/19
IPv6:
2a00:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
80:19:1f:a2:be:b3:23:37:6c:df:a5:4c:ac:bb:41:74:a6:e3:
ad:35:84:8d:68:24:ed:6f:37:67:19:cb:84:8a:34:8c:77:7e:
69:8f:b5:f2:97:a3:fe:60:6f:ab:8e:05:38:4f:83:79:0c:c4:
78:e9:af:97:b0:3a:16:3f:a1:ae:00:1e:d2:13:3e:4d:ca:e7:
0f:81:83:da:69:02:5b:25:da:01:fe:48:0f:75:9d:48:a4:f0:
39:8b:0d:e5:1f:e9:66:f2:71:96:2d:c9:35:d9:ef:27:83:de:
77:cc:53:92:fa:d6:a4:79:b1:df:7e:af:60:46:9a:3f:16:40:
f1:3f:de:97:80:00:ef:33:6b:06:cb:c1:a0:35:41:f8:17:7f:
3e:f0:ba:cd:a6:5a:9b:b0:16:97:91:f0:8b:20:70:cd:a9:4b:
0b:c3:73:da:5a:8a:96:1a:bb:bb:41:29:9c:8c:f4:60:c0:17:
96:ff:61:bb:af:2b:ce:3c:59:b0:95:41:e2:89:59:aa:a6:35:
99:05:aa:8c:61:78:6a:5d:b4:8a:bc:dc:f2:77:70:f9:c2:af:
d3:a7:f0:9a:05:cc:94:96:15:95:ca:6a:bc:17:27:62:b1:e7:
52:07:7b:1a:08:c4:af:de:1e:c0:c5:1e:f8:21:14:ef:d8:8d:
93:59:91:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:28 2025 by rpki-client