Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/v-Yn_DvpXA7j1_lN1T-1YuHCWmI.roa
File: v-Yn_DvpXA7j1_lN1T-1YuHCWmI.roa (raw, json)
Hash identifier: ZnF9tKGa/qdgcRv4m6rVpLSMnUrNWrgNiJW696FDkvE=
Subject key identifier: BF:E6:27:FC:3B:E9:5C:0E:E3:D7:F9:4D:D5:3F:B5:62:E1:C2:5A:62
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0197B16DF39F5EF15AA99BE764CD493DD449
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/v-Yn_DvpXA7j1_lN1T-1YuHCWmI.roa
Signing time: Fri 27 Jun 2025 12:47:42 +0000
ROA not before: Fri 27 Jun 2025 12:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 20
31.135.226.0/23 maxlen: 23
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.132.0/22 maxlen: 22
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
92.62.116.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.68.0/22 maxlen: 22
176.125.192.0/19 maxlen: 19
195.2.238.0/23 maxlen: 23
2a13:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:6d:f3:9f:5e:f1:5a:a9:9b:e7:64:cd:49:3d:d4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jun 27 12:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfe627fc3be95c0ee3d7f94dd53fb562e1c25a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:4e:e4:e4:6c:44:1e:d0:4e:e6:d1:6e:1e:
3a:53:11:dd:7e:3d:9b:3f:42:32:09:bd:a6:ff:42:
23:51:e5:8a:39:b4:c5:9d:58:7a:9c:e6:9e:88:b7:
87:44:84:1b:29:c4:d4:d4:8b:92:ba:86:c4:7d:fc:
46:3c:7c:0f:6d:56:8c:f0:52:20:a7:77:34:60:fc:
90:00:54:f7:e5:ce:38:9c:4c:5f:57:ac:40:db:61:
dc:c7:4d:89:26:a0:75:a2:5a:d5:c3:79:70:af:4a:
c6:1a:41:36:d1:50:4a:5b:fa:0e:a1:05:38:29:d8:
10:7f:3e:ff:d0:23:b4:0d:ec:52:ee:6a:89:1c:c7:
f9:55:af:f6:82:81:7e:91:f3:45:17:9c:79:9b:25:
ac:00:3f:0b:6f:d9:fb:81:cd:96:49:9a:19:17:d9:
08:86:1d:95:2a:a8:9c:e7:99:49:51:62:e2:a4:0d:
a2:75:61:17:f8:af:75:cb:6e:c7:ba:f2:ce:c6:e6:
62:dc:9f:9d:52:a5:07:9f:11:cd:c9:24:20:e1:95:
80:cd:78:b5:3a:6a:82:43:7a:0b:01:96:b1:24:2e:
a9:84:16:0d:59:71:6a:d7:1b:3d:b5:f3:a3:fa:87:
cf:43:69:81:32:74:4e:ed:7a:cb:fd:a4:eb:c8:74:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:27:FC:3B:E9:5C:0E:E3:D7:F9:4D:D5:3F:B5:62:E1:C2:5A:62
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/v-Yn_DvpXA7j1_lN1T-1YuHCWmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
92.62.116.0/24
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
22:7b:78:18:ae:54:13:db:d5:58:e4:e4:fc:b9:af:a6:b3:f4:
13:44:e9:bf:c2:af:68:db:b7:ef:d7:01:13:40:5a:5d:a8:01:
5c:71:3f:bb:7f:cf:37:3b:21:a4:f0:99:24:32:27:08:2e:5e:
0b:bd:49:e8:68:eb:71:26:0b:74:05:57:1e:5f:3f:1a:1c:4f:
e5:78:ef:4d:d2:32:a4:e6:44:db:37:23:28:ec:d0:b1:2c:21:
04:eb:03:ee:ca:a1:00:73:49:31:ba:9b:01:f2:75:47:5e:5e:
ef:97:b6:1e:ed:7e:8a:ca:c4:ff:72:83:3f:60:47:c4:ae:cf:
e1:90:e9:19:c5:47:03:45:37:a3:60:fa:ad:e6:93:6b:6f:fc:
bf:e7:98:e3:7a:d2:e1:92:8b:de:08:b6:fd:2f:97:c8:20:4c:
6b:ee:b5:85:07:59:a6:1e:41:42:a6:b8:36:43:f9:90:f6:d3:
7b:80:a9:fe:6f:af:13:3e:6d:c1:32:b3:21:11:8c:b5:f8:b2:
3e:3c:df:bd:fa:78:2c:17:7c:e6:41:2c:6b:78:3a:6e:73:cd:
97:d6:81:d0:ee:8f:3a:fc:eb:f6:ae:29:38:14:21:25:fd:c0:
5a:07:8f:a9:ae:23:64:25:5f:63:7a:7f:d1:db:30:0a:67:27:
3d:13:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:13:58 2025 by rpki-client