Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/q-dwejGkQXDMbD7q4mP3oo-ZowQ.roa
File: q-dwejGkQXDMbD7q4mP3oo-ZowQ.roa (raw, json)
Hash identifier: SyMRcGxa30Xi241IBU1XDFGXjy3/q5lxdk8BxSVjqQg=
Subject key identifier: AB:E7:70:7A:31:A4:41:70:CC:6C:3E:EA:E2:63:F7:A2:8F:99:A3:04
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0198B67A4A2C95FEDEB7FBEF7276A1EA4B06
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/q-dwejGkQXDMbD7q4mP3oo-ZowQ.roa
Signing time: Sun 17 Aug 2025 05:22:04 +0000
ROA not before: Sun 17 Aug 2025 05:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2.57.76.0/22 maxlen: 32
14.102.20.0/24 maxlen: 32
14.102.21.0/24 maxlen: 32
14.102.28.0/22 maxlen: 32
14.102.39.0/24 maxlen: 32
14.102.49.0/24 maxlen: 32
14.102.51.0/24 maxlen: 32
14.102.58.0/24 maxlen: 32
14.102.124.0/24 maxlen: 32
31.14.26.0/24 maxlen: 32
45.78.84.0/22 maxlen: 32
45.78.88.0/23 maxlen: 32
45.120.188.0/24 maxlen: 32
45.120.189.0/24 maxlen: 32
45.120.190.0/24 maxlen: 32
45.120.191.0/24 maxlen: 32
77.81.92.0/22 maxlen: 32
85.217.190.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
86.104.76.0/22 maxlen: 32
86.104.192.0/24 maxlen: 32
86.104.195.0/24 maxlen: 32
86.106.176.0/23 maxlen: 32
89.32.132.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
89.40.81.0/24 maxlen: 32
89.46.242.0/24 maxlen: 32
89.104.122.0/23 maxlen: 32
89.223.22.0/23 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
91.92.64.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
91.92.178.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
91.192.212.0/22 maxlen: 32
91.203.128.0/22 maxlen: 32
91.233.108.0/22 maxlen: 32
91.235.208.0/22 maxlen: 32
92.114.60.0/22 maxlen: 32
92.114.81.0/24 maxlen: 32
92.255.0.0/24 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
92.255.80.0/22 maxlen: 32
93.113.52.0/23 maxlen: 24
93.114.136.0/23 maxlen: 32
93.114.236.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
94.139.48.0/21 maxlen: 32
94.139.56.0/22 maxlen: 32
94.139.60.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
94.176.0.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
103.61.13.0/24 maxlen: 32
103.61.14.0/24 maxlen: 32
103.211.84.0/22 maxlen: 32
103.211.88.0/22 maxlen: 32
110.172.128.0/23 maxlen: 32
110.172.137.0/24 maxlen: 32
110.172.141.0/24 maxlen: 32
110.172.144.0/24 maxlen: 32
110.172.165.0/24 maxlen: 32
110.172.169.0/24 maxlen: 32
110.172.172.0/24 maxlen: 32
110.172.173.0/24 maxlen: 32
110.172.176.0/24 maxlen: 32
110.238.192.0/19 maxlen: 32
114.69.250.0/23 maxlen: 32
119.12.192.0/20 maxlen: 32
160.202.52.0/22 maxlen: 32
176.223.68.0/22 maxlen: 32
176.223.104.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
180.235.160.0/20 maxlen: 32
180.235.176.0/20 maxlen: 32
185.66.136.0/22 maxlen: 32
188.94.84.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
188.240.48.0/23 maxlen: 32
188.240.214.0/23 maxlen: 32
188.241.0.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
188.241.249.0/24 maxlen: 32
193.56.24.0/22 maxlen: 32
193.142.103.0/24 maxlen: 32
193.163.74.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
202.89.75.0/24 maxlen: 32
212.70.3.0/24 maxlen: 32
212.70.8.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b6:7a:4a:2c:95:fe:de:b7:fb:ef:72:76:a1:ea:4b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 17 05:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe7707a31a44170cc6c3eeae263f7a28f99a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:53:26:84:92:11:1e:e5:a5:2f:a1:84:56:
de:fe:10:09:60:71:9f:c2:de:8d:7c:b8:77:47:a9:
1a:6c:d4:8a:ae:a8:8f:23:fd:c0:03:4b:9a:77:dc:
28:15:fd:c6:7d:d0:52:20:60:fe:9c:42:23:f0:a5:
7b:7f:08:c4:23:f4:95:8d:12:4f:33:09:9c:36:0e:
3f:d7:37:84:5c:6f:1d:11:b2:f3:61:11:23:5e:56:
1f:8a:ba:9c:2e:db:f0:cb:d4:09:4c:68:20:c2:16:
5a:36:da:e1:fc:4c:66:51:40:12:d0:8f:29:ec:74:
6e:be:d3:c8:a8:4b:9c:8a:20:11:60:4d:1b:5c:d3:
41:ee:c8:c6:2f:3d:b1:9a:dc:33:b7:40:c2:e5:56:
fb:dc:d0:01:c0:ea:a1:5e:d2:68:6d:30:e0:5d:d7:
c0:58:b9:b3:02:f7:a1:9e:f6:42:a9:8c:51:1c:61:
22:ef:68:c2:31:ba:32:0a:32:15:c1:ea:8f:04:8c:
f3:10:63:7e:a6:80:b2:11:e2:c9:43:83:fc:b8:60:
d6:6a:6b:45:dd:de:0e:81:03:12:78:f3:95:db:09:
25:97:0d:79:92:e5:36:2d:e1:6b:6d:61:03:0c:d0:
6b:0a:72:aa:52:74:b6:4a:73:0e:3a:eb:b5:a2:41:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:70:7A:31:A4:41:70:CC:6C:3E:EA:E2:63:F7:A2:8F:99:A3:04
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/q-dwejGkQXDMbD7q4mP3oo-ZowQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
14.102.20.0/23
14.102.28.0/22
14.102.39.0/24
14.102.49.0/24
14.102.51.0/24
14.102.58.0/24
14.102.124.0/24
31.14.26.0/24
45.78.84.0-45.78.89.255
45.120.188.0/22
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.104.192.0/24
86.104.195.0/24
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.64.0/24
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
91.203.128.0/22
91.233.108.0/22
91.235.208.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.48.0-94.139.61.255
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
103.61.13.0-103.61.14.255
103.211.84.0-103.211.91.255
110.172.128.0/23
110.172.137.0/24
110.172.141.0/24
110.172.144.0/24
110.172.165.0/24
110.172.169.0/24
110.172.172.0/23
110.172.176.0/24
110.238.192.0/19
114.69.250.0/23
119.12.192.0/20
160.202.52.0/22
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.163.74.0/24
193.200.104.0/23
202.89.75.0/24
212.70.3.0/24
212.70.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:2a:23:2a:e8:dd:8d:79:12:aa:df:7e:b0:ae:da:ce:8b:07:
82:76:fa:59:8c:24:d0:a6:07:c9:ce:88:d0:ae:f8:bb:2b:ff:
a3:5c:2e:bf:76:22:59:43:51:71:1c:d2:7e:2b:6f:c8:21:de:
92:f3:f3:f5:03:aa:2b:77:56:f7:f0:55:4e:f1:f0:be:a5:62:
68:60:a6:5e:68:59:b2:66:10:52:6d:9c:a2:48:b9:d5:9a:c0:
d5:bb:d3:9b:de:7c:eb:32:65:fb:85:0b:f6:95:9c:e6:6d:9f:
62:ed:de:d5:14:9c:d1:a0:a1:66:90:58:b7:ef:9f:2e:a3:a8:
dd:93:50:6a:7c:3d:bd:4a:0d:ca:52:b6:f1:5d:f4:8c:19:7a:
1c:0e:ce:2e:b4:64:e2:5c:50:3c:a2:e1:ba:f4:a2:76:50:7c:
e8:ab:02:b2:9e:cd:71:2b:6f:54:be:24:28:f7:24:50:55:f8:
7d:6f:00:80:dd:f2:d0:b1:c7:41:10:14:f9:11:72:bc:74:b1:
e6:01:4e:01:d2:a7:11:e0:cd:3d:43:e7:2d:21:0d:99:51:87:
9c:42:54:ba:50:e3:bc:7a:4b:1f:b0:f4:2c:8c:03:8b:15:80:
23:66:aa:64:1d:6c:ab:22:f7:58:f2:bd:70:84:f4:75:d8:d4:
24:83:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:06 2025 by rpki-client