Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/p7AuxpNcn7wn5h3gdKCqnR5ghnQ.roa
File: p7AuxpNcn7wn5h3gdKCqnR5ghnQ.roa (raw, json)
Hash identifier: c8QwTpmvD8IxxPsM25zVX7iEAieasv29+qOVB/sHVN4=
Subject key identifier: A7:B0:2E:C6:93:5C:9F:BC:27:E6:1D:E0:74:A0:AA:9D:1E:60:86:74
Certificate issuer: /CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Certificate serial: 0199E7C432C2E5268227AFCD67784F89A4D5
Authority key identifier: 1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/p7AuxpNcn7wn5h3gdKCqnR5ghnQ.roa
Signing time: Wed 15 Oct 2025 12:06:58 +0000
ROA not before: Wed 15 Oct 2025 12:06:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15805
IP address blocks: 31.216.64.0/18 maxlen: 18
31.216.64.0/19 maxlen: 19
31.216.64.0/20 maxlen: 20
31.216.64.0/21 maxlen: 21
31.216.64.0/22 maxlen: 22
31.216.68.0/22 maxlen: 22
31.216.72.0/21 maxlen: 21
31.216.76.0/24 maxlen: 24
31.216.80.0/20 maxlen: 20
31.216.80.0/21 maxlen: 21
31.216.80.0/24 maxlen: 24
31.216.83.0/24 maxlen: 24
31.216.86.0/24 maxlen: 24
31.216.88.0/21 maxlen: 21
31.216.96.0/19 maxlen: 19
31.216.96.0/20 maxlen: 20
31.216.96.0/21 maxlen: 21
31.216.104.0/21 maxlen: 21
31.216.112.0/20 maxlen: 20
31.216.117.0/24 maxlen: 24
82.102.32.0/19 maxlen: 19
82.102.32.0/20 maxlen: 20
82.102.32.0/21 maxlen: 21
82.102.32.0/22 maxlen: 22
82.102.32.0/23 maxlen: 23
82.102.34.0/23 maxlen: 23
82.102.36.0/22 maxlen: 22
82.102.36.0/23 maxlen: 23
82.102.38.0/23 maxlen: 23
82.102.38.0/24 maxlen: 24
82.102.40.0/21 maxlen: 21
82.102.40.0/22 maxlen: 22
82.102.42.0/24 maxlen: 24
82.102.44.0/22 maxlen: 22
82.102.45.0/24 maxlen: 24
82.102.48.0/20 maxlen: 20
82.102.48.0/21 maxlen: 21
82.102.48.0/22 maxlen: 22
82.102.48.0/23 maxlen: 23
82.102.48.0/24 maxlen: 24
82.102.49.0/24 maxlen: 24
82.102.50.0/23 maxlen: 23
82.102.50.0/24 maxlen: 24
82.102.51.0/24 maxlen: 24
82.102.52.0/22 maxlen: 22
82.102.52.0/23 maxlen: 23
82.102.56.0/21 maxlen: 21
82.102.56.0/22 maxlen: 22
82.102.60.0/22 maxlen: 22
82.102.62.0/24 maxlen: 24
94.46.196.0/22 maxlen: 22
94.46.196.0/23 maxlen: 23
94.46.198.0/23 maxlen: 23
94.46.200.0/22 maxlen: 22
94.46.200.0/23 maxlen: 23
94.46.202.0/23 maxlen: 23
94.46.208.0/21 maxlen: 21
94.46.208.0/22 maxlen: 22
94.46.212.0/22 maxlen: 22
94.46.214.0/24 maxlen: 24
94.46.224.0/20 maxlen: 20
94.46.224.0/21 maxlen: 21
94.46.224.0/22 maxlen: 22
94.46.228.0/22 maxlen: 22
94.46.228.0/24 maxlen: 24
94.46.232.0/21 maxlen: 21
94.46.237.0/24 maxlen: 24
185.52.88.0/22 maxlen: 22
185.52.88.0/23 maxlen: 23
185.52.90.0/23 maxlen: 23
213.207.128.0/18 maxlen: 18
213.207.128.0/19 maxlen: 19
213.207.128.0/20 maxlen: 20
213.207.128.0/23 maxlen: 23
213.207.129.0/24 maxlen: 24
213.207.130.0/23 maxlen: 23
213.207.134.0/23 maxlen: 23
213.207.135.0/24 maxlen: 24
213.207.137.0/24 maxlen: 24
213.207.139.0/24 maxlen: 24
213.207.140.0/24 maxlen: 24
213.207.141.0/24 maxlen: 24
213.207.142.0/24 maxlen: 24
213.207.143.0/24 maxlen: 24
213.207.144.0/20 maxlen: 20
213.207.144.0/24 maxlen: 24
213.207.145.0/24 maxlen: 24
213.207.150.0/24 maxlen: 24
213.207.152.0/23 maxlen: 23
213.207.153.0/24 maxlen: 24
213.207.154.0/23 maxlen: 23
213.207.155.0/24 maxlen: 24
213.207.156.0/24 maxlen: 24
213.207.159.0/24 maxlen: 24
213.207.160.0/19 maxlen: 19
213.207.160.0/20 maxlen: 20
213.207.168.0/21 maxlen: 21
213.207.168.0/22 maxlen: 22
213.207.172.0/22 maxlen: 22
213.207.174.0/23 maxlen: 23
213.207.174.0/24 maxlen: 24
213.207.175.0/24 maxlen: 24
213.207.176.0/21 maxlen: 21
213.207.176.0/22 maxlen: 22
213.207.178.0/23 maxlen: 23
213.207.180.0/22 maxlen: 22
213.207.180.0/23 maxlen: 23
213.207.182.0/23 maxlen: 23
213.207.184.0/21 maxlen: 21
213.207.184.0/24 maxlen: 24
213.207.186.0/24 maxlen: 24
213.207.188.0/23 maxlen: 23
213.207.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:c4:32:c2:e5:26:82:27:af:cd:67:78:4f:89:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Validity
Not Before: Oct 15 12:06:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b02ec6935c9fbc27e61de074a0aa9d1e608674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:39:48:39:ea:c4:97:fc:db:b0:bf:5f:fd:
3d:5c:16:76:b2:57:dc:7b:27:32:13:68:a8:9a:04:
72:e5:52:84:2f:c3:62:42:b3:57:e3:83:5e:f0:0f:
00:73:05:31:ea:b0:59:ce:85:93:24:54:af:d4:48:
f6:35:ec:4e:a5:04:88:74:49:3f:27:0f:6c:d8:61:
f4:6a:8e:5d:d8:78:9b:88:1c:db:b3:e3:8d:9c:f4:
0d:d9:79:72:2f:6c:8a:3c:90:6c:53:06:8a:32:26:
6c:7a:99:32:5d:51:1d:57:f6:0c:f4:c0:d2:20:8d:
0b:11:e8:ca:87:96:08:d4:8b:53:21:00:34:ba:e4:
f9:91:67:7d:3c:c4:03:93:7a:51:39:f4:ab:32:34:
d7:01:c5:d9:9f:77:45:d9:cc:59:f0:83:7b:97:0e:
e8:ce:ae:7b:df:1b:4d:09:0d:77:a0:d9:db:b9:a0:
bb:e1:42:fc:a3:70:f4:21:e7:db:98:cc:5c:ed:cc:
29:ab:06:62:2f:26:09:c3:20:65:ce:19:cf:55:7e:
03:42:49:9c:12:ed:d6:7c:ea:42:9a:47:7a:76:c0:
01:4f:59:85:5f:58:6d:53:4b:d0:27:3d:1a:a0:f4:
23:a3:f9:16:7c:2b:0d:6f:a8:d8:59:85:05:41:4b:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:2E:C6:93:5C:9F:BC:27:E6:1D:E0:74:A0:AA:9D:1E:60:86:74
X509v3 Authority Key Identifier:
keyid:1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/p7AuxpNcn7wn5h3gdKCqnR5ghnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.64.0/18
82.102.32.0/19
94.46.196.0-94.46.203.255
94.46.208.0/21
94.46.224.0/20
185.52.88.0/22
213.207.128.0/18
Signature Algorithm: sha256WithRSAEncryption
62:da:25:35:e1:9b:58:92:17:53:e2:86:73:93:a1:27:75:b3:
df:f2:b8:d7:6e:77:3b:f7:21:23:73:f1:51:cd:a9:cf:e9:06:
6f:82:08:ab:fc:a8:20:98:62:63:12:3a:e1:83:a4:aa:d4:0d:
71:fd:cf:15:0d:d3:a7:13:77:e0:b8:82:e3:15:ae:bb:fe:00:
93:5b:ec:d5:0f:3c:6d:4c:b1:a8:09:54:36:a3:f9:8d:47:d9:
c5:cd:55:c5:cc:ac:91:9d:f5:bd:98:b3:08:55:ce:b3:66:7e:
41:57:ed:1e:50:fe:7b:2e:58:6e:08:6e:7d:1a:3d:d9:12:c0:
d0:19:2b:1e:95:ba:d5:8e:eb:3a:1e:4b:74:e2:a0:77:85:60:
c0:3c:92:19:bc:9c:32:ea:a6:89:58:0c:88:a5:9d:27:97:23:
ad:a0:12:5e:22:b4:5d:39:30:07:83:e9:65:3e:79:12:76:55:
f3:fd:16:34:50:a9:a6:ad:ae:0b:13:cd:c3:83:16:a5:58:ac:
d9:ba:62:d3:d5:34:ea:e2:72:bd:06:4f:2f:de:df:e7:41:3c:
9c:cb:0c:d2:15:36:9f:f5:51:10:a8:de:ce:02:1f:24:fb:bf:
cb:d8:5f:42:7a:7a:84:72:92:d9:ef:72:92:7e:b8:61:31:b2:
b1:24:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:19 2025 by rpki-client