Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/gA2tvRQPKpMOl9Y6QBKjGjY3jBY.roa
File: gA2tvRQPKpMOl9Y6QBKjGjY3jBY.roa (raw, json)
Hash identifier: KLknWNja5ldLxki+NqQAO+FIkHHmOEWoi6xunsD7f5k=
Subject key identifier: 80:0D:AD:BD:14:0F:2A:93:0E:97:D6:3A:40:12:A3:1A:36:37:8C:16
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0199C9BFDC96F5E0F0ADFD079F6B15E39093
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/gA2tvRQPKpMOl9Y6QBKjGjY3jBY.roa
Signing time: Thu 09 Oct 2025 16:13:38 +0000
ROA not before: Thu 09 Oct 2025 16:13:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 31.222.238.0/24 maxlen: 24
37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.95.11.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
77.75.230.0/24 maxlen: 24
80.71.157.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
84.246.85.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.160.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
91.242.229.0/24 maxlen: 24
94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.9.0/24 maxlen: 24
94.131.10.0/24 maxlen: 24
94.131.11.0/24 maxlen: 24
94.131.12.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/24 maxlen: 24
94.131.122.0/24 maxlen: 24
94.131.123.0/24 maxlen: 24
94.232.244.0/24 maxlen: 24
94.232.245.0/24 maxlen: 24
94.232.246.0/24 maxlen: 24
94.232.247.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.75.0/24 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
176.126.113.0/24 maxlen: 24
178.23.190.0/24 maxlen: 24
185.53.46.0/24 maxlen: 24
185.138.164.0/24 maxlen: 24
185.218.3.0/24 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
185.252.215.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
193.203.203.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.104.136.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.74.86.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf40::/32 maxlen: 32
2a0b:cf41::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3800::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c00::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c02::/32 maxlen: 32
2a11:4c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e00::/32 maxlen: 32
2a11:7e05::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d84::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d86::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
2a14:3883:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c9:bf:dc:96:f5:e0:f0:ad:fd:07:9f:6b:15:e3:90:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Oct 9 16:13:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800dadbd140f2a930e97d63a4012a31a36378c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:12:88:3b:79:f3:b4:ec:79:70:6e:50:65:
0f:ec:51:cc:a1:45:62:96:46:46:0d:49:7d:cb:b5:
69:0b:27:80:2c:4e:bf:e5:02:41:9f:52:d9:02:f7:
27:ff:cd:9f:67:0b:73:64:3c:a9:14:a1:98:94:36:
31:4c:40:a2:a5:45:bc:0f:90:18:e0:46:e1:0e:22:
8f:ea:68:be:32:1b:97:4a:61:84:18:05:96:22:3a:
23:ae:e2:98:11:e9:3f:bf:b7:f5:78:dd:34:67:da:
4b:a9:cb:26:57:a1:5c:27:29:f1:17:7a:b4:5e:a0:
4e:9d:33:fd:99:96:8d:50:7a:e4:fb:1a:05:db:22:
09:7d:d2:d9:d9:2a:f1:ed:f5:cb:c4:ca:6a:74:3d:
a6:8a:f1:9b:69:c8:c3:05:7d:94:e6:92:93:76:73:
a6:54:59:1b:c3:0c:c0:fb:ae:83:7d:60:fd:a1:ff:
23:47:69:4a:59:72:c9:dc:2c:6f:25:c4:e2:88:00:
08:0d:19:8f:a2:b8:ea:7a:c4:f0:dd:b3:7f:e4:42:
71:1d:2f:79:9c:c3:b1:ea:75:39:7d:23:08:13:f4:
14:92:50:cf:a6:ff:d9:92:d0:75:00:14:ad:76:a6:
9d:0f:b5:0f:d4:3e:3b:f5:b5:cc:df:8e:88:5f:3a:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:AD:BD:14:0F:2A:93:0E:97:D6:3A:40:12:A3:1A:36:37:8C:16
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/gA2tvRQPKpMOl9Y6QBKjGjY3jBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.238.0/24
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.95.11.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
77.75.230.0/24
80.71.157.0/24
80.92.204.0-80.92.206.255
84.246.85.0/24
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.160.0/23
91.225.217.0-91.225.219.255
91.242.229.0/24
94.131.2.0/23
94.131.8.0-94.131.14.255
94.131.20.0/24
94.131.96.0/23
94.131.99.0-94.131.102.255
94.131.104.0-94.131.112.255
94.131.114.0/24
94.131.116.0-94.131.120.255
94.131.122.0/23
94.232.244.0/22
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.75.0/24
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
176.126.113.0/24
178.23.190.0/24
185.53.46.0/24
185.138.164.0/24
185.218.3.0/24
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
185.252.215.0/24
193.203.202.0/23
194.54.156.0/22
194.62.42.0/24
194.104.136.0/24
194.246.114.0/23
195.42.232.0/22
195.74.86.0/24
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c41::-2a09:7c47:ffff:ffff:ffff:ffff:ffff:ffff
2a0b:cf40::/31
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3800::/32
2a11:3805::/32
2a11:3c00::/30
2a11:4c00::/32
2a11:4c02::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e00::/32
2a11:7e05::-2a11:7e06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/29
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
2a14:3883:1::/48
Signature Algorithm: sha256WithRSAEncryption
34:bd:90:aa:f9:09:f3:f6:b3:5d:14:e7:2d:ae:67:17:63:29:
32:d0:be:0e:64:f8:25:66:63:ac:47:45:b4:86:ca:b4:13:d7:
b5:e2:0e:00:20:46:79:2d:56:6c:6f:6e:d0:1c:20:70:a3:65:
e0:14:81:0c:f8:5d:44:2f:4b:ce:42:02:75:ff:47:6a:81:26:
24:c2:7e:7a:4e:e3:be:4d:92:0d:70:b9:aa:77:7a:d0:85:b8:
f5:9e:4a:22:ce:56:16:1d:6c:79:0e:2c:eb:c9:b8:30:b6:72:
79:89:03:1e:19:91:cd:9f:e5:fd:39:3c:9c:fa:3b:e3:d9:ea:
09:f8:da:0a:3d:2c:f4:a5:20:42:5b:1a:40:c6:b9:f0:15:2a:
49:aa:57:34:59:12:c3:fa:42:f3:26:66:c8:7b:99:42:89:1b:
1f:f8:52:a4:f8:61:ca:a5:0d:15:b4:bc:0f:65:b9:9d:1f:17:
18:b7:cb:d5:bb:93:b2:ac:00:9b:63:bf:8a:b3:4b:d8:bc:3d:
a4:32:3c:d2:aa:a3:1a:4f:8d:3a:70:b2:15:67:3a:c3:ce:b2:
a9:88:d9:17:49:20:99:4f:f9:88:1f:de:b2:a0:b5:96:22:3d:
2e:19:7f:ed:11:cb:4a:65:89:0a:7c:72:fa:bc:49:b2:c4:de:
e0:73:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:02 2025 by rpki-client