Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-qPRcE8DIck4EKZK0daL9Ft_loc.roa
File: 1-qPRcE8DIck4EKZK0daL9Ft_loc.roa (raw, json)
Hash identifier: S6gdYRKBsEHwYSMO807MAbdCMYPB9AZjrQBtmWuu2RQ=
Subject key identifier: FA:A3:D1:70:4F:03:21:C9:38:10:A6:4A:D1:D6:8B:F4:5B:7F:96:87
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 0198BC0E83253970C26734B8FA965E3C4004
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-qPRcE8DIck4EKZK0daL9Ft_loc.roa
Signing time: Mon 18 Aug 2025 07:22:04 +0000
ROA not before: Mon 18 Aug 2025 07:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35470
IP address blocks: 31.3.100.0/24 maxlen: 24
79.170.89.0/24 maxlen: 24
79.170.92.0/24 maxlen: 24
81.4.84.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
85.10.184.0/24 maxlen: 24
85.10.185.0/24 maxlen: 24
85.10.186.0/24 maxlen: 24
85.10.187.0/24 maxlen: 24
85.10.188.0/22 maxlen: 22
85.222.224.0/22 maxlen: 24
89.31.98.0/23 maxlen: 24
89.31.101.0/24 maxlen: 24
93.191.134.0/24 maxlen: 24
93.191.135.0/24 maxlen: 24
141.138.207.0/24 maxlen: 24
185.3.208.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
193.138.205.0/24 maxlen: 24
193.138.206.0/23 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
2a02:348:10::/44 maxlen: 48
2a02:348:20::/44 maxlen: 48
2a02:348:a8::/45 maxlen: 48
2a02:348:c0::/44 maxlen: 48
2a02:348:500::/40 maxlen: 48
2a02:348:600::/39 maxlen: 48
2a02:348:1200::/40 maxlen: 48
2a02:348:1700::/40 maxlen: 48
2a02:348:1800::/40 maxlen: 48
2a02:348:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:0e:83:25:39:70:c2:67:34:b8:fa:96:5e:3c:40:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Aug 18 07:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faa3d1704f0321c93810a64ad1d68bf45b7f9687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:b5:84:7a:2a:b8:8e:1b:c8:da:45:ca:ff:
1b:f4:fa:a8:fc:9f:bd:93:05:29:f9:a6:ee:b4:83:
e3:1f:e5:e4:03:0a:e4:10:da:09:d6:c4:07:8d:80:
a2:e2:6e:72:eb:56:6e:9b:59:20:1d:d0:08:33:47:
30:77:94:15:6d:62:8d:27:42:5e:96:bb:2d:76:a0:
70:32:d3:94:91:07:e0:f8:1f:8a:f2:db:aa:be:7f:
62:69:71:ba:39:97:78:97:ce:df:26:08:e1:dd:7c:
46:c3:07:e0:31:b8:56:cd:ee:b4:7a:58:43:03:69:
12:cc:4b:34:b4:2b:0e:10:9b:15:cf:b2:60:73:a3:
64:54:f7:aa:34:0d:9f:d0:93:a6:45:a4:bf:eb:af:
c3:51:3f:ea:42:36:4c:87:5d:74:9f:46:2c:63:06:
66:59:31:da:cc:fe:88:8c:1e:38:0d:53:24:db:e8:
25:28:41:0f:ce:c1:f0:ba:3a:bf:79:52:58:67:15:
53:95:66:d0:0c:c3:07:a2:2f:a7:7f:d6:3c:77:ba:
c8:05:e3:2c:86:a1:62:8b:a6:6e:66:27:59:9f:9a:
d9:5c:01:98:f2:b0:88:c8:ed:e7:81:75:50:4a:4f:
c7:ac:a7:38:76:be:24:d8:0f:ff:2b:b5:37:07:1c:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:D1:70:4F:03:21:C9:38:10:A6:4A:D1:D6:8B:F4:5B:7F:96:87
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-qPRcE8DIck4EKZK0daL9Ft_loc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.100.0/24
79.170.89.0/24
79.170.92.0/24
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/22
89.31.98.0/23
89.31.101.0/24
93.191.134.0/23
141.138.207.0/24
185.3.208.0/22
185.110.172.0/22
185.110.200.0/22
193.138.205.0-193.138.207.255
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348:10::-2a02:348:2f:ffff:ffff:ffff:ffff:ffff
2a02:348:a8::/45
2a02:348:c0::/44
2a02:348:500::-2a02:348:7ff:ffff:ffff:ffff:ffff:ffff
2a02:348:1200::/40
2a02:348:1700::-2a02:348:18ff:ffff:ffff:ffff:ffff:ffff
2a02:348:f000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:b8:a2:cd:37:81:cd:c2:73:43:38:74:63:50:9e:8a:ef:a3:
b3:f7:78:33:8a:c5:b6:e3:b4:e4:43:bf:f6:26:53:38:a9:c0:
27:8d:fc:ca:cc:5f:ce:b4:70:c8:5f:a8:c3:5e:13:47:c4:e2:
e3:2b:95:db:71:9e:c5:42:32:1c:d6:a7:c6:24:14:5b:e6:5c:
e3:fe:db:c8:53:e5:4e:0b:ce:a5:2d:2f:9d:45:9f:58:a6:77:
07:19:b6:5b:e9:ba:33:03:91:a9:3a:7f:35:47:e4:fe:23:df:
f8:bb:ac:42:a7:31:f4:87:45:ab:d2:9a:a4:5c:e1:91:e0:31:
a7:5c:e8:58:a6:14:27:d9:8e:24:80:78:98:4e:e7:e4:b9:99:
81:3f:ec:35:96:e3:e6:12:ad:b5:65:e9:2d:6e:e7:da:72:a8:
a2:6a:e7:e7:1d:0f:46:06:ae:c8:37:7a:3e:02:29:93:e0:26:
1c:bc:b7:40:6d:51:10:f6:b4:7e:2f:a1:30:f0:81:2d:51:37:
7c:45:36:34:50:c4:30:d8:27:9b:a3:c7:fc:e0:15:2e:cd:df:
c0:62:c0:43:47:61:40:7f:a6:c0:23:6a:5a:d3:29:6c:2e:9b:
dd:ca:e2:eb:7a:a6:f0:62:de:23:2c:a3:5b:93:d5:9b:d8:d9:
c7:3c:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:22 2025 by rpki-client