Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v_7pSAuGUV1pB-zUIJ7X74RF6Oo.roa
File: v_7pSAuGUV1pB-zUIJ7X74RF6Oo.roa (raw, json)
Hash identifier: oIYQixIKIaltMFyKZCc69BpvF3XzhLBQatf6iJR27RY=
Subject key identifier: BF:FE:E9:48:0B:86:51:5D:69:07:EC:D4:20:9E:D7:EF:84:45:E8:EA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0198885EB69D16D6B39483D05514EFB7C8F7
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v_7pSAuGUV1pB-zUIJ7X74RF6Oo.roa
Signing time: Fri 08 Aug 2025 06:29:24 +0000
ROA not before: Fri 08 Aug 2025 06:29:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:5e:b6:9d:16:d6:b3:94:83:d0:55:14:ef:b7:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 8 06:29:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bffee9480b86515d6907ecd4209ed7ef8445e8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:d6:ac:fb:05:96:c6:eb:07:d0:2d:fc:39:
2c:c8:51:36:4f:a2:df:dd:11:4a:a5:bb:51:75:d8:
79:82:76:49:37:de:1a:b4:4d:e0:c7:ff:a5:f6:f1:
65:9d:72:59:f0:36:34:4a:68:08:7e:dd:57:a8:2a:
93:72:52:cd:37:76:cb:8b:9c:09:cf:d6:78:52:91:
ff:68:cb:24:e8:e0:1d:d1:9f:b5:89:43:39:13:d5:
e3:bd:9c:9e:da:b3:80:43:97:3c:5a:d1:1f:dd:c7:
11:55:bd:70:49:dc:55:5f:3b:9b:b7:68:ba:2c:e9:
47:cf:b8:2c:d7:a7:8e:c6:6f:ba:af:a0:06:09:e3:
6e:f7:03:0c:37:17:d4:8e:b4:99:12:a3:4e:1b:07:
8f:8a:9c:87:b4:1a:1f:a5:74:83:c5:37:58:8a:88:
2a:d0:52:9a:db:fa:8b:96:3a:4d:a8:d3:a3:ef:78:
d0:fe:50:ee:cd:c8:a2:c4:3a:7d:83:82:e2:d9:b6:
14:66:06:cd:94:9b:23:31:2a:3d:3d:3e:59:72:fd:
71:88:52:e6:3f:e8:68:fe:09:b1:81:6a:27:f0:fa:
89:81:51:61:09:5c:c8:b6:4e:c9:54:6f:d0:cb:d0:
14:6f:a1:18:1b:13:88:12:5f:e9:96:9c:d9:37:09:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:E9:48:0B:86:51:5D:69:07:EC:D4:20:9E:D7:EF:84:45:E8:EA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v_7pSAuGUV1pB-zUIJ7X74RF6Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.72.0/24
78.135.81.0/24
78.135.92.0/23
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.152.0/23
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.212.0/23
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
23:39:c1:52:62:0f:1a:b0:f7:06:47:ba:49:d1:3c:73:02:60:
57:a8:f0:86:cd:c7:d8:5a:e0:8b:41:0e:a8:b3:7e:01:ba:7c:
1f:9a:e0:5e:09:e7:c6:dd:36:68:b0:2f:d0:ed:7e:a3:94:1b:
7a:9b:a3:f9:8d:47:47:fc:d5:18:85:8b:5f:de:8c:53:31:37:
1e:63:92:ef:bd:73:91:b3:81:cf:ed:11:95:6e:be:47:3c:d4:
3e:18:fe:42:72:9e:27:25:57:2c:cc:1b:b7:1a:2f:02:41:9b:
f0:b4:5c:61:84:db:02:14:23:f2:8b:82:b3:1c:1a:ad:06:97:
58:88:69:a0:a3:b2:08:4f:6d:98:b9:0f:ad:d5:15:a9:ae:ce:
65:b7:f7:47:14:13:6b:0b:5b:9e:b2:3c:ce:a7:43:58:50:7a:
8f:22:26:74:45:68:6c:92:b0:58:9a:e1:0f:36:4a:fe:d2:66:
1f:e8:a8:05:d9:8a:25:c5:21:bc:92:4c:89:5f:90:66:84:2e:
1e:0e:3c:b8:45:8f:4d:14:77:de:5e:c7:f8:7b:8f:28:9e:68:
33:b6:40:7f:31:64:ef:08:10:fc:f5:06:96:00:17:ce:93:e0:
3a:d6:f5:73:2d:3c:0a:9b:d5:24:6f:78:b0:d9:12:50:fc:15:
72:6c:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:52:08 2025 by rpki-client