Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/t9f4uvuSReQD1fpfqc3iMeQnPAk.roa
File: t9f4uvuSReQD1fpfqc3iMeQnPAk.roa (raw, json)
Hash identifier: l6rt0GkAmfnFJjBJ3/v8KyXeeiFZJYapDu/cPpJ6+Pc=
Subject key identifier: B7:D7:F8:BA:FB:92:45:E4:03:D5:FA:5F:A9:CD:E2:31:E4:27:3C:09
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01978C24AFC88E4E722368EBCD9C2ACD87B6
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/t9f4uvuSReQD1fpfqc3iMeQnPAk.roa
Signing time: Fri 20 Jun 2025 07:01:43 +0000
ROA not before: Fri 20 Jun 2025 07:01:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35470
IP address blocks: 31.3.96.0/21 maxlen: 24
37.34.48.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
79.170.88.0/21 maxlen: 24
81.4.84.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
85.10.184.0/24 maxlen: 24
85.10.185.0/24 maxlen: 24
85.10.186.0/24 maxlen: 24
85.10.187.0/24 maxlen: 24
85.10.188.0/22 maxlen: 22
85.222.224.0/21 maxlen: 24
85.222.224.0/22 maxlen: 24
89.31.96.0/21 maxlen: 24
89.31.98.0/23 maxlen: 24
93.191.128.0/21 maxlen: 24
93.191.134.0/24 maxlen: 24
141.138.192.0/20 maxlen: 24
141.138.207.0/24 maxlen: 24
178.18.80.0/20 maxlen: 24
185.3.208.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.96.4.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
193.138.204.0/22 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
2a02:348::/32 maxlen: 48
2a02:348:3::/48 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:59::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:60::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:5e6::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:24:af:c8:8e:4e:72:23:68:eb:cd:9c:2a:cd:87:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 20 07:01:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d7f8bafb9245e403d5fa5fa9cde231e4273c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:3b:f9:d2:14:0e:41:e1:90:27:aa:a8:21:
b2:42:e3:94:2c:ea:9d:96:71:26:f8:14:33:04:b7:
e8:9b:19:93:ea:52:33:c6:44:e5:88:6e:d4:f1:84:
e4:dd:4a:2f:5b:a0:b3:4e:e5:33:c8:a0:0c:b9:07:
80:d8:43:2c:b7:63:7f:fe:0b:8e:84:3c:51:97:23:
10:1e:97:fd:77:20:de:6a:a3:d9:49:51:7b:7c:a0:
38:5e:c6:c2:a1:a8:3e:d4:43:6b:c5:fc:b0:d5:83:
18:a9:af:77:49:27:da:db:e4:78:b0:32:13:6d:e5:
b0:eb:60:6a:b6:55:84:fa:a6:d4:c3:53:06:00:36:
95:75:1e:7c:cb:a3:a3:64:d2:9c:8e:b4:22:88:e8:
0e:dd:0b:36:0a:f7:ed:c3:09:37:e7:ea:98:dd:63:
2a:35:03:1a:fc:db:36:94:d2:fd:7c:9b:8a:f4:4a:
e1:6b:d4:7c:03:ce:d7:55:27:53:32:a5:07:a8:7d:
0f:66:e2:6f:5b:8e:9b:54:74:1f:4c:de:7a:0d:eb:
c5:35:50:cc:64:9b:cd:5f:c1:67:ed:ed:e3:40:f5:
ff:b3:b9:5e:a8:6d:48:81:3f:26:45:ee:e5:a4:b8:
ed:77:af:24:d8:51:a7:9b:a8:f7:5d:cf:86:37:e0:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:F8:BA:FB:92:45:E4:03:D5:FA:5F:A9:CD:E2:31:E4:27:3C:09
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/t9f4uvuSReQD1fpfqc3iMeQnPAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
37.34.48.0/21
37.230.96.0/21
79.170.88.0/21
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/21
89.31.96.0/21
93.191.128.0/21
141.138.192.0/20
178.18.80.0/20
185.3.208.0/22
185.21.188.0/22
185.96.4.0/22
185.110.172.0/22
185.110.200.0/22
193.138.204.0/22
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
5d:d2:42:7d:55:fb:4e:31:13:88:0f:31:8d:63:2c:a8:1e:ef:
15:64:11:62:91:5d:70:3c:12:3d:0e:7c:1f:ac:31:8a:43:f4:
95:7e:fc:b0:ff:52:74:43:c9:eb:3c:6b:02:73:cd:68:7d:8e:
38:84:08:ce:a9:e4:03:c2:e0:2b:10:fb:14:df:be:57:a7:12:
d4:60:17:bb:c7:1f:5d:b1:7f:60:b9:d2:01:7b:12:a9:1f:02:
7a:6c:e2:d3:52:bf:10:b9:1c:31:d0:8f:f0:2b:93:f0:9c:33:
3e:d8:e6:de:a1:70:02:5b:a5:43:6b:e2:3c:f4:91:17:3c:1d:
67:26:71:ab:50:a8:4f:99:f4:ce:dc:c8:11:f6:e7:2a:29:e6:
dd:ea:82:47:cf:3b:d3:81:8f:94:0f:a5:e0:cf:b2:84:25:c1:
2d:c0:a4:22:1b:12:d0:e6:c0:d9:87:3c:c8:d3:7a:b3:fe:46:
32:e0:2b:b9:ec:25:96:6f:67:28:2c:e4:96:6a:f4:0b:26:e8:
05:db:88:7f:e9:0a:e8:f1:ec:ca:46:56:65:9e:b8:11:29:7d:
d8:70:b3:2f:f7:88:bb:1d:0f:d2:0a:91:bd:f9:a9:ff:af:95:
8f:4b:27:b4:90:f5:b0:06:1b:34:26:e3:0b:bf:18:b3:68:12:
3c:98:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:56:12 2025 by rpki-client