
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/guLTM5a0sG8d8PuqoNee-jjL86Y.roa
File: guLTM5a0sG8d8PuqoNee-jjL86Y.roa (raw, json)
Hash identifier: foLzuPt71A9R7m4Zr/AiIAiz2ulaqdDrSGiOeT2DEkU=
Subject key identifier: 82:E2:D3:33:96:B4:B0:6F:1D:F0:FB:AA:A0:D7:9E:FA:38:CB:F3:A6
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0199E43E16DECB4FC4C494C599A71BACCA19
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/guLTM5a0sG8d8PuqoNee-jjL86Y.roa
Signing time: Tue 14 Oct 2025 19:41:38 +0000
ROA not before: Tue 14 Oct 2025 19:41:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:3e:16:de:cb:4f:c4:c4:94:c5:99:a7:1b:ac:ca:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 14 19:41:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e2d33396b4b06f1df0fbaaa0d79efa38cbf3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:6a:93:20:c3:04:20:38:46:b2:ac:d8:8d:
d3:c5:c7:d6:7c:48:be:a7:c5:31:fb:59:47:b9:12:
db:2b:c3:b5:8c:7e:a1:f5:0d:be:8a:79:9d:2c:fc:
eb:c1:8e:49:66:36:ac:a7:c8:ce:86:85:3d:c7:cd:
c1:81:6c:70:2d:da:95:a8:c8:0d:f2:45:ac:d4:b3:
4c:65:0d:ed:82:4b:43:48:f5:bb:ab:4c:27:2d:a3:
e0:e1:d8:85:40:79:ca:9d:00:af:08:32:2d:3a:f2:
e2:cb:7c:85:69:d3:61:c0:7e:eb:71:27:eb:36:56:
d9:2a:c8:14:d1:37:90:fa:81:a1:32:c8:e5:b2:5f:
9c:7c:cc:05:bd:49:7c:54:bb:4b:7d:cf:78:d7:8d:
2f:3e:6d:d7:09:f1:38:4e:89:ce:4f:bb:6d:9a:97:
07:1b:4f:c5:30:f2:db:bb:bf:de:45:72:0f:14:ae:
02:99:a3:a7:81:71:28:09:f1:d8:fd:1c:b5:0e:10:
2a:2b:36:f9:69:23:c3:3b:7b:be:2c:65:fc:35:43:
3a:ee:14:6a:d0:aa:49:c6:7a:db:a4:53:a4:a0:d9:
2c:ff:58:a6:00:be:d7:a0:ac:e9:0d:7f:b4:d9:48:
43:40:58:38:44:19:e3:8c:2e:08:15:bb:89:c3:d9:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:D3:33:96:B4:B0:6F:1D:F0:FB:AA:A0:D7:9E:FA:38:CB:F3:A6
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/guLTM5a0sG8d8PuqoNee-jjL86Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
56:fe:f2:09:22:7d:32:a4:ef:28:59:28:30:46:1b:9b:67:da:
02:05:6c:0e:15:e8:d2:9e:4b:96:20:de:59:d7:05:ac:c2:50:
1b:46:3f:1b:b7:41:cc:33:a8:8c:8a:9f:cd:6b:7e:e0:35:40:
8b:ad:38:0a:70:59:7c:6e:12:66:0c:5e:77:2c:b6:bc:d8:8b:
c5:8d:7b:13:32:45:76:07:ab:45:92:0d:aa:2d:6a:0c:90:5e:
83:f3:94:f8:eb:36:cc:f7:dd:a3:5e:72:fa:27:6f:b7:48:66:
20:d3:d6:bc:b4:26:34:66:71:37:82:6b:65:37:d8:fc:51:5c:
82:f2:5e:6b:12:cf:e3:ba:ed:76:cd:38:7c:60:51:48:fb:2d:
22:6b:39:9f:89:2c:41:97:d2:c8:ba:a6:75:73:8e:91:02:7c:
69:6c:86:e5:9e:36:29:cd:bc:6f:47:c0:42:82:31:4d:f6:7f:
09:19:58:29:fb:f4:91:64:55:72:eb:a3:04:7b:49:48:ab:55:
d1:2b:63:5e:49:11:09:f2:38:4f:44:1c:50:3c:8a:4a:2f:3e:
47:48:5d:8a:b8:1c:67:d7:cf:12:36:c9:7c:4e:ae:cd:89:09:
f6:a2:4d:d3:dc:01:61:d0:bf:ac:4b:f5:11:d4:d0:d6:8f:3c:
0b:6e:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:17 2025 by rpki-client