Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/cDE3EzAZuRkA2qUdMfThi8H1qTc.roa
File: cDE3EzAZuRkA2qUdMfThi8H1qTc.roa (raw, json)
Hash identifier: zcH+YrXnLIMTdiSZDY4vYih+mBv8OXiFFCnkDP60SoA=
Subject key identifier: 70:31:37:13:30:19:B9:19:00:DA:A5:1D:31:F4:E1:8B:C1:F5:A9:37
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0199205E701ADEEF8830C1CD7106A9FDEEBC
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/cDE3EzAZuRkA2qUdMfThi8H1qTc.roa
Signing time: Sat 06 Sep 2025 18:51:23 +0000
ROA not before: Sat 06 Sep 2025 18:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61149
IP address blocks: 45.82.106.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
185.16.88.0/22 maxlen: 22
185.16.88.0/23 maxlen: 23
185.16.88.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.90.0/23 maxlen: 23
185.16.90.0/24 maxlen: 24
185.16.91.0/24 maxlen: 24
2a03:cac0:2::/48 maxlen: 48
2a03:cac0:a::/48 maxlen: 48
2a03:cac0:b::/48 maxlen: 48
2a03:cac0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:20:5e:70:1a:de:ef:88:30:c1:cd:71:06:a9:fd:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Sep 6 18:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=703137133019b91900daa51d31f4e18bc1f5a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:31:c6:26:58:46:7d:1c:3c:4c:b4:3a:c5:
67:2d:30:f0:56:57:c9:9a:55:ed:ad:c1:3d:46:32:
80:13:e0:4d:f9:08:4c:45:1a:cd:37:32:1d:4f:f8:
3d:4c:ec:9b:31:11:93:11:26:27:fc:23:8b:99:c8:
0d:3f:4c:2f:cb:50:c3:2d:fa:62:81:ce:9a:bc:ad:
0a:d3:a6:f4:b4:f0:2e:8c:0b:80:fd:ff:7e:51:b2:
04:81:15:6c:1a:d1:62:94:9e:15:ad:01:4f:dd:ef:
58:0e:ad:d2:63:23:40:f0:32:9d:9f:60:50:ec:06:
d2:1c:78:5b:28:42:aa:5f:89:21:37:d9:fd:2d:3b:
6c:19:c2:e4:ab:e5:f9:1b:f7:a3:49:34:12:77:5a:
28:46:f1:a0:e7:ed:15:46:27:6a:3d:06:40:d4:2e:
4a:a7:38:c7:25:f9:0d:9f:1f:ea:e7:5d:98:de:38:
ae:58:33:a4:88:0f:27:e6:7c:ca:0e:2b:f0:f5:4b:
d6:7f:a8:4b:80:84:b8:ba:84:b0:f6:9a:ff:ed:25:
9e:79:8c:84:02:1c:e0:e7:92:da:7d:8c:3b:dc:23:
49:0a:cb:fc:dc:d6:26:1e:c2:78:d3:83:95:3a:9d:
23:a1:00:f2:16:9f:5a:22:d5:d4:d6:63:85:58:6e:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:37:13:30:19:B9:19:00:DA:A5:1D:31:F4:E1:8B:C1:F5:A9:37
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/cDE3EzAZuRkA2qUdMfThi8H1qTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
IPv6:
2a03:cac0:2::/48
2a03:cac0:a::-2a03:cac0:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:40:c1:2b:ae:b1:ba:f0:12:92:89:53:69:dd:ea:c8:63:12:
51:3f:03:2e:02:0a:8f:0a:62:ee:53:21:3f:29:46:87:a8:a2:
6d:53:d6:b2:9b:0f:8e:9d:24:71:dd:42:9c:58:e4:7e:d9:0a:
f4:7b:d9:61:4b:e3:93:ff:ed:92:59:df:26:05:d6:a4:ad:bc:
8f:9a:5b:8c:5f:30:60:6e:8c:06:3f:d0:1a:fc:88:c3:7e:d1:
a5:f3:ef:89:3c:ec:96:b8:ab:15:32:57:48:5b:09:93:59:cd:
69:e0:1d:b9:9c:a4:f2:f8:4d:94:0c:39:43:0a:47:37:ea:08:
c9:82:65:0d:43:b5:25:14:53:20:20:ac:42:5c:bb:bb:56:03:
17:67:1d:57:82:6b:d8:47:75:6c:75:fd:f3:30:c7:d0:ec:dc:
f0:42:53:11:8e:1b:64:3d:1a:28:6c:0a:9d:82:cd:6f:06:92:
68:ac:92:8e:e0:31:83:a0:79:a3:ef:67:71:56:7e:a2:a2:85:
58:3a:1e:4f:6a:aa:f3:ed:a2:5a:98:bb:28:40:f2:c8:0f:a8:
79:f0:8f:68:d6:ed:b3:9d:7b:9d:64:3f:46:da:b1:15:e8:81:
64:80:90:a1:a4:82:36:9b:41:46:d1:07:35:4a:63:a6:d4:bc:
61:5e:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:01 2025 by rpki-client