
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/paVOpGcb1H0GxwnvFjCm56xxVdc.roa
File: paVOpGcb1H0GxwnvFjCm56xxVdc.roa (raw, json)
Hash identifier: 9QOqOZ/+HYoyFH3uyR9vue8YKnF7n4M307q1TSOtzck=
Subject key identifier: A5:A5:4E:A4:67:1B:D4:7D:06:C7:09:EF:16:30:A6:E7:AC:71:55:D7
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0199B997D955E771AC7CA514A5E64ED96073
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/paVOpGcb1H0GxwnvFjCm56xxVdc.roa
Signing time: Mon 06 Oct 2025 12:56:00 +0000
ROA not before: Mon 06 Oct 2025 12:56:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 31.7.16.0/20 maxlen: 20
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
62.148.192.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
77.109.192.0/18 maxlen: 18
80.81.160.0/19 maxlen: 19
80.88.176.0/20 maxlen: 20
80.186.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
81.197.0.0/16 maxlen: 16
81.209.0.0/17 maxlen: 17
82.103.192.0/18 maxlen: 18
82.118.192.0/19 maxlen: 19
82.141.64.0/18 maxlen: 18
82.215.192.0/18 maxlen: 18
83.245.128.0/17 maxlen: 17
84.230.0.0/15 maxlen: 15
85.76.0.0/14 maxlen: 14
85.156.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
88.112.0.0/14 maxlen: 14
91.152.0.0/13 maxlen: 13
94.22.0.0/16 maxlen: 16
109.232.80.0/21 maxlen: 21
139.97.0.0/16 maxlen: 16
178.251.56.0/21 maxlen: 21
192.77.120.0/22 maxlen: 22
192.102.32.0/24 maxlen: 24
192.102.36.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.38.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.42.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.35.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.163.32.0/19 maxlen: 19
192.163.64.0/18 maxlen: 18
192.163.128.0/19 maxlen: 19
192.175.45.0/24 maxlen: 24
193.64.0.0/15 maxlen: 15
193.66.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
193.184.0.0/15 maxlen: 15
193.199.0.0/16 maxlen: 16
193.229.0.0/16 maxlen: 16
194.86.0.0/16 maxlen: 16
194.136.0.0/16 maxlen: 16
194.157.0.0/16 maxlen: 16
194.188.0.0/16 maxlen: 16
194.211.0.0/16 maxlen: 16
194.240.0.0/15 maxlen: 15
195.16.192.0/19 maxlen: 19
195.74.0.0/19 maxlen: 19
195.170.128.0/19 maxlen: 19
195.197.0.0/16 maxlen: 16
195.218.64.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
195.238.192.0/19 maxlen: 19
195.255.0.0/16 maxlen: 16
212.38.224.0/20 maxlen: 20
212.38.240.0/24 maxlen: 24
212.38.241.0/24 maxlen: 24
212.38.242.0/24 maxlen: 24
212.38.243.0/24 maxlen: 24
212.38.244.0/24 maxlen: 24
212.50.192.0/19 maxlen: 19
212.54.0.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
212.226.0.0/16 maxlen: 16
212.246.0.0/16 maxlen: 16
213.130.224.0/19 maxlen: 19
213.161.32.0/19 maxlen: 19
213.169.0.0/19 maxlen: 19
213.192.128.0/18 maxlen: 18
213.250.64.0/18 maxlen: 18
217.24.96.0/20 maxlen: 20
217.25.96.0/20 maxlen: 20
217.77.192.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
2001:671::/48 maxlen: 48
2001:671:fc00::/40 maxlen: 40
2001:671:fd00::/40 maxlen: 40
2001:671:fe00::/40 maxlen: 40
2001:671:ff00::/40 maxlen: 40
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 29
2001:1658::/29 maxlen: 29
2a00:1dd0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:97:d9:55:e7:71:ac:7c:a5:14:a5:e6:4e:d9:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Oct 6 12:56:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5a54ea4671bd47d06c709ef1630a6e7ac7155d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:79:b6:99:04:cf:1e:69:44:13:19:78:39:
94:74:64:0f:be:06:a4:04:ba:26:33:39:72:4a:ca:
43:2e:06:39:2b:d4:f6:6e:49:12:5b:b1:51:2e:78:
a4:63:aa:24:64:2d:89:fd:80:93:f8:c2:fc:a9:ac:
72:39:fc:b6:e0:d6:d4:83:f4:36:8e:19:89:2f:d6:
50:2e:a2:3f:d9:c1:61:97:78:28:93:18:8b:3d:46:
84:bd:f6:41:9f:c5:b7:e8:4f:41:a8:96:01:87:0b:
71:f5:2e:6c:c0:cb:98:b0:28:d1:b6:4b:44:b5:c1:
1b:bd:87:54:08:b0:15:63:de:d8:20:d4:ac:98:7d:
53:ee:8d:c8:18:2d:6a:f3:91:a6:38:02:34:79:6d:
37:ec:35:92:97:cb:62:0d:fa:80:40:17:80:9e:83:
5f:8e:04:e0:d9:7b:d0:b1:64:b6:7b:cb:79:f8:f5:
f7:3e:83:79:1b:74:0a:a5:e9:50:c3:b6:5b:0c:df:
2b:30:dd:1e:62:e9:79:89:66:a5:e3:1b:4e:71:f4:
d7:40:32:cc:bf:b2:2d:1d:19:11:48:9d:b1:60:a9:
2b:ac:65:27:44:07:19:c6:67:ad:0f:91:0d:3e:1e:
27:c3:64:89:c3:bc:fa:8e:b4:d9:01:a1:73:7b:69:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:4E:A4:67:1B:D4:7D:06:C7:09:EF:16:30:A6:E7:AC:71:55:D7
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/paVOpGcb1H0GxwnvFjCm56xxVdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.32.0/24
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
192.175.45.0/24
193.64.0.0-193.66.255.255
193.94.0.0/16
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0-212.38.244.255
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:671::/48
2001:671:fc00::/38
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:ce:24:12:e5:b7:b6:c8:95:99:0d:95:b5:94:a7:ae:7c:40:
45:23:4d:a5:19:36:c9:19:d3:e4:e6:0f:85:39:59:0e:15:0a:
a9:ee:df:2a:e2:84:91:f9:b1:37:c4:c4:5a:f3:be:d0:82:a1:
05:64:10:7a:2e:3e:d2:fe:43:f9:75:55:6f:62:92:7e:d6:6a:
de:80:bc:e4:7c:1a:bd:37:ae:26:24:6e:c5:19:eb:52:c3:a3:
f3:1f:7c:b6:3a:ab:c5:f8:7f:ba:86:80:6a:88:d2:6f:cd:83:
e9:ce:95:ae:16:39:86:f6:7b:92:c5:35:86:f1:f2:8e:b6:5c:
29:9f:b8:e3:10:1d:57:f0:cb:dd:2b:68:71:57:b4:07:d9:8a:
29:59:df:f8:ca:79:d0:be:25:eb:f4:2c:89:85:30:31:7e:a4:
17:34:be:8e:c5:03:4e:60:5c:97:84:49:9c:c7:29:b2:bb:2e:
2b:4d:11:0b:d0:ad:04:ce:55:a0:3a:fe:09:31:76:3c:52:e7:
ff:2c:88:e9:93:fa:50:b3:7a:2d:69:8f:87:23:6e:4a:a1:76:
e6:a0:54:7e:49:cb:11:02:e3:38:38:ab:01:13:6b:72:df:59:
81:4c:62:e5:a4:bc:22:6d:b5:6b:77:1a:88:f4:cc:17:02:ca:
2a:6d:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:48 2025 by rpki-client