Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/86DIp4nA1KvFpdBSXMyUmtWYWwI.roa
File: 86DIp4nA1KvFpdBSXMyUmtWYWwI.roa (raw, json)
Hash identifier: cpW/tzUkKHchwUYkpy4oFTimBza9umXgZv/RQGOTP7o=
Subject key identifier: F3:A0:C8:A7:89:C0:D4:AB:C5:A5:D0:52:5C:CC:94:9A:D5:98:5B:02
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01999591C711D3A9A7FDED4E633E7A2EA8E9
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/86DIp4nA1KvFpdBSXMyUmtWYWwI.roa
Signing time: Mon 29 Sep 2025 13:03:02 +0000
ROA not before: Mon 29 Sep 2025 13:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 24
31.135.226.0/23 maxlen: 23
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.132.0/22 maxlen: 22
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.68.0/22 maxlen: 22
109.196.72.0/22 maxlen: 22
109.196.76.0/22 maxlen: 22
176.125.192.0/19 maxlen: 19
195.2.238.0/23 maxlen: 23
2a13:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:91:c7:11:d3:a9:a7:fd:ed:4e:63:3e:7a:2e:a8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Sep 29 13:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a0c8a789c0d4abc5a5d0525ccc949ad5985b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:f0:b5:53:36:88:4a:7c:75:43:85:c8:aa:
1d:b9:d4:a5:1d:d2:28:23:be:9d:26:22:82:7a:11:
e5:55:5d:02:2b:16:bb:de:17:be:d2:66:0e:4a:db:
bb:57:74:da:cf:72:bb:9a:fc:2f:a1:ca:78:73:79:
b2:ac:3a:97:c7:ab:cd:42:24:b4:ce:90:2c:ac:0c:
3e:05:b8:b8:3c:38:78:94:d8:f4:ec:0f:8d:12:02:
8e:43:59:51:e2:fb:38:c4:ac:88:cd:01:01:43:37:
f2:62:79:7a:2f:bc:89:69:95:2e:7c:4d:fe:bd:fe:
49:a2:77:89:f9:8c:6c:63:67:cc:d2:fe:15:e0:78:
98:f3:53:3f:dd:77:58:94:c0:3f:c1:0e:44:b3:17:
09:d7:2b:0a:49:52:87:b6:91:b9:3d:ec:a4:1f:f6:
e5:8f:d7:07:ad:d2:97:73:60:6c:aa:b8:06:21:6b:
8d:58:17:a3:7a:4a:86:da:61:b5:54:62:01:b3:2f:
35:f2:f1:2e:6e:4d:f4:a2:1a:15:99:49:f3:ff:e7:
21:33:fc:12:68:ca:5a:37:1b:27:3c:ad:6b:0d:d9:
2e:99:06:22:1c:5b:2f:81:37:71:6f:65:98:bc:35:
46:62:ec:b2:f8:e7:21:cd:70:30:6a:ef:95:44:29:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:C8:A7:89:C0:D4:AB:C5:A5:D0:52:5C:CC:94:9A:D5:98:5B:02
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/86DIp4nA1KvFpdBSXMyUmtWYWwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
8d:32:29:eb:3d:36:96:20:6f:88:5c:0f:bd:ea:9f:fe:ab:4e:
b8:91:c7:bd:ec:ee:e9:de:f8:5b:6f:25:c6:25:34:52:6a:1d:
7b:ed:a3:03:ba:25:b5:30:72:9a:fb:4b:4d:66:2f:c3:5c:97:
10:bc:55:f5:81:98:56:c6:e2:60:da:0c:1f:97:0a:4d:de:fc:
6a:3b:84:c8:61:0d:3a:5b:74:5b:38:21:65:2e:19:77:f0:5d:
4b:8d:a3:7c:6f:da:ce:40:a9:7f:12:5e:9e:e8:91:63:e4:05:
01:17:d2:c1:c5:42:63:e6:ea:1e:45:c0:fc:55:99:d1:a6:a1:
8a:de:de:89:12:a6:c8:11:16:aa:8d:d6:8c:a9:6d:ae:b0:b7:
1c:6d:00:12:7a:dd:a4:4d:66:09:5f:18:67:c1:2d:79:d9:2d:
cb:12:86:6b:87:ed:f3:38:a7:2c:a2:10:9d:03:86:50:12:88:
ba:c4:37:6b:a9:1f:f4:66:59:cc:c8:2c:b2:e3:88:42:0d:a7:
c0:1f:7a:38:7a:81:15:ad:72:6c:33:f9:2d:c1:41:5e:c9:d5:
69:26:90:3b:78:bf:6a:6d:4b:39:f5:c0:bf:a1:71:35:26:32:
db:cd:06:34:4f:ab:59:ec:ce:9d:65:9d:ca:c1:28:d1:d1:19:
41:d4:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:35:26 2025 by rpki-client