Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/63L7NXlhLUEKsMWDsI9QqTsSSOk.roa
File: 63L7NXlhLUEKsMWDsI9QqTsSSOk.roa (raw, json)
Hash identifier: Hht6QuQ7E30AyisXVASO258qO5oiAT6wocq+1VFasaI=
Subject key identifier: EB:72:FB:35:79:61:2D:41:0A:B0:C5:83:B0:8F:50:A9:3B:12:48:E9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01988600A0FB844191D191FCB034C13381AB
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/63L7NXlhLUEKsMWDsI9QqTsSSOk.roa
Signing time: Thu 07 Aug 2025 19:27:24 +0000
ROA not before: Thu 07 Aug 2025 19:27:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 31.40.195.0/24 maxlen: 24
37.72.141.0/24 maxlen: 24
45.141.128.0/24 maxlen: 24
45.159.21.0/24 maxlen: 24
45.159.22.0/24 maxlen: 24
46.253.131.0/24 maxlen: 24
62.204.49.0/24 maxlen: 24
77.83.24.0/22 maxlen: 24
83.97.116.0/22 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
91.246.51.0/24 maxlen: 24
91.247.163.0/24 maxlen: 24
94.154.113.0/24 maxlen: 24
146.19.39.0/24 maxlen: 24
146.19.44.0/24 maxlen: 24
176.126.104.0/24 maxlen: 24
178.20.28.0/22 maxlen: 24
185.202.108.0/24 maxlen: 24
185.212.115.0/24 maxlen: 24
193.31.126.0/24 maxlen: 24
193.42.245.0/24 maxlen: 24
193.151.189.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
193.151.191.0/24 maxlen: 24
193.163.89.0/24 maxlen: 24
193.163.92.0/24 maxlen: 24
193.163.207.0/24 maxlen: 24
194.70.234.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
194.99.26.0/24 maxlen: 24
212.18.113.0/24 maxlen: 24
212.18.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:00:a0:fb:84:41:91:d1:91:fc:b0:34:c1:33:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 7 19:27:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb72fb3579612d410ab0c583b08f50a93b1248e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:c1:02:46:c2:9a:27:c5:79:a8:90:29:4f:
e6:0e:27:a9:6d:b8:27:17:30:bc:5e:48:24:25:21:
70:06:3d:e9:54:f2:8e:cf:41:af:ba:70:93:ba:12:
63:31:c8:cb:d3:01:7b:fc:4c:11:cf:85:b0:b7:89:
62:1a:63:a7:0b:49:6e:1e:e1:cc:fc:45:e1:e6:eb:
1e:c0:a5:55:23:d1:c4:2f:ae:18:d4:7c:66:fd:9d:
da:5b:da:2d:99:c2:67:b1:c9:c4:24:0c:33:8e:89:
91:a3:38:92:14:54:c7:8c:8a:fa:b5:7f:43:f8:8e:
4d:c7:e4:7a:5d:fa:b1:42:43:a3:4d:7c:41:11:f0:
50:d4:77:6b:65:40:a8:a9:6b:d8:bd:da:7f:b6:a1:
80:26:cc:49:b6:01:07:0b:19:90:54:33:49:98:d5:
09:59:79:0f:00:4c:bd:87:e2:dc:a6:05:7d:5e:be:
35:7e:eb:f6:d6:c6:22:67:68:2e:6e:bb:1b:bd:66:
6e:73:e4:6a:3a:94:56:ab:e2:e8:68:7f:26:39:41:
2e:dd:d7:4f:bb:eb:bd:1b:f5:35:ec:91:de:61:89:
52:8a:08:62:86:ed:91:bf:8b:f6:77:82:fb:63:b5:
3e:91:db:00:97:08:fb:d7:09:bf:82:c3:48:b6:99:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:FB:35:79:61:2D:41:0A:B0:C5:83:B0:8F:50:A9:3B:12:48:E9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/63L7NXlhLUEKsMWDsI9QqTsSSOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.195.0/24
37.72.141.0/24
45.141.128.0/24
45.159.21.0-45.159.22.255
46.253.131.0/24
62.204.49.0/24
77.83.24.0/22
83.97.116.0/22
88.218.45.0/24
88.218.47.0/24
91.246.51.0/24
91.247.163.0/24
94.154.113.0/24
146.19.39.0/24
146.19.44.0/24
176.126.104.0/24
178.20.28.0/22
185.202.108.0/24
185.212.115.0/24
193.31.126.0/24
193.42.245.0/24
193.151.189.0-193.151.191.255
193.163.89.0/24
193.163.92.0/24
193.163.207.0/24
194.70.234.0/24
194.99.24.0/24
194.99.26.0/24
212.18.113.0/24
212.18.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:05:62:d2:ff:22:3f:3f:bc:fd:9b:3b:b7:b5:be:96:61:7f:
0e:e6:71:c3:0d:66:d9:48:4a:8d:08:5f:c5:2d:3e:f5:f5:1f:
c2:8f:08:7a:9a:fc:00:25:a8:62:9d:0f:08:d6:37:7c:68:01:
e4:fa:76:3a:54:41:b4:32:88:0b:63:35:29:00:9f:a0:08:eb:
70:5f:c7:e0:13:c1:ca:62:ec:0d:60:6b:4f:cd:4b:a1:b5:60:
3c:73:f9:59:af:f2:5b:3c:6f:85:37:c7:14:2c:a2:3f:4e:bc:
1e:5b:36:20:64:e9:07:99:e9:a6:50:29:d7:03:46:56:56:a7:
ea:f6:01:b5:9b:14:b3:87:1b:b4:a5:0c:c1:5c:0a:25:b6:06:
ce:63:4e:e3:df:19:f0:09:77:95:d1:59:f7:4a:4a:9a:e4:ea:
50:11:02:c0:07:18:9c:3f:11:51:38:83:2a:56:85:66:83:0b:
49:c5:53:7c:1b:dc:71:4d:3d:d3:bd:6f:6d:66:0c:1e:7d:ec:
de:ca:3b:60:f2:b2:2d:b9:31:e3:a0:33:f5:91:c0:48:6a:15:
b7:aa:31:da:03:05:92:1a:3b:c5:54:2d:05:ca:6a:bf:44:bd:
de:09:f9:ba:e7:bb:84:67:dd:ff:83:91:06:6c:20:6b:85:fd:
d8:4b:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:00 2025 by rpki-client