Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/uOIlSnTF6fTtDAo-t67l55RoI68.roa
File: uOIlSnTF6fTtDAo-t67l55RoI68.roa (raw, json)
Hash identifier: dB5cropfobX2xCE84HM5iEAEEedSs1cybSdhKv0KvQ8=
Subject key identifier: B8:E2:25:4A:74:C5:E9:F4:ED:0C:0A:3E:B7:AE:E5:E7:94:68:23:AF
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019781C8EBE53D26957A38C277E8A501A77A
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/uOIlSnTF6fTtDAo-t67l55RoI68.roa
Signing time: Wed 18 Jun 2025 06:45:17 +0000
ROA not before: Wed 18 Jun 2025 06:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197328
IP address blocks: 31.210.96.0/24 maxlen: 24
31.210.97.0/24 maxlen: 24
31.210.98.0/24 maxlen: 24
31.210.99.0/24 maxlen: 24
31.210.100.0/24 maxlen: 24
31.210.101.0/24 maxlen: 24
31.210.102.0/24 maxlen: 24
31.210.103.0/24 maxlen: 24
31.210.104.0/24 maxlen: 24
31.210.105.0/24 maxlen: 24
31.210.106.0/24 maxlen: 24
31.210.107.0/24 maxlen: 24
31.210.108.0/24 maxlen: 24
31.210.109.0/24 maxlen: 24
31.210.110.0/24 maxlen: 24
31.210.111.0/24 maxlen: 24
31.210.112.0/24 maxlen: 24
31.210.113.0/24 maxlen: 24
31.210.114.0/24 maxlen: 24
31.210.115.0/24 maxlen: 24
31.210.116.0/24 maxlen: 24
31.210.117.0/24 maxlen: 24
31.210.118.0/24 maxlen: 24
31.210.119.0/24 maxlen: 24
31.210.120.0/24 maxlen: 24
31.210.121.0/24 maxlen: 24
31.210.122.0/24 maxlen: 24
31.210.123.0/24 maxlen: 24
31.210.124.0/24 maxlen: 24
31.210.125.0/24 maxlen: 24
31.210.126.0/24 maxlen: 24
31.210.127.0/24 maxlen: 24
46.45.128.0/24 maxlen: 24
46.45.136.0/24 maxlen: 24
46.45.137.0/24 maxlen: 24
46.45.138.0/24 maxlen: 24
46.45.139.0/24 maxlen: 24
46.45.140.0/24 maxlen: 24
46.45.141.0/24 maxlen: 24
46.45.142.0/24 maxlen: 24
46.45.143.0/24 maxlen: 24
46.45.168.0/24 maxlen: 24
46.45.169.0/24 maxlen: 24
46.45.170.0/24 maxlen: 24
46.45.171.0/24 maxlen: 24
46.45.172.0/24 maxlen: 24
46.45.173.0/24 maxlen: 24
46.45.174.0/24 maxlen: 24
46.45.175.0/24 maxlen: 24
46.45.176.0/24 maxlen: 24
46.45.177.0/24 maxlen: 24
46.45.178.0/24 maxlen: 24
46.45.179.0/24 maxlen: 24
46.45.180.0/24 maxlen: 24
46.45.181.0/24 maxlen: 24
46.45.182.0/24 maxlen: 24
46.45.183.0/24 maxlen: 24
176.53.16.0/24 maxlen: 24
176.53.17.0/24 maxlen: 24
176.53.18.0/24 maxlen: 24
176.53.19.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.21.0/24 maxlen: 24
176.53.22.0/24 maxlen: 24
176.53.23.0/24 maxlen: 24
176.53.24.0/24 maxlen: 24
176.53.25.0/24 maxlen: 24
176.53.26.0/24 maxlen: 24
176.53.27.0/24 maxlen: 24
176.53.28.0/24 maxlen: 24
176.53.29.0/24 maxlen: 24
176.53.30.0/24 maxlen: 24
176.53.31.0/24 maxlen: 24
176.53.113.0/24 maxlen: 24
176.53.114.0/24 maxlen: 24
176.53.115.0/24 maxlen: 24
176.53.116.0/24 maxlen: 24
176.53.117.0/24 maxlen: 24
176.53.118.0/24 maxlen: 24
176.53.119.0/24 maxlen: 24
176.53.120.0/24 maxlen: 24
176.53.121.0/24 maxlen: 24
176.53.122.0/24 maxlen: 24
176.53.123.0/24 maxlen: 24
176.53.124.0/24 maxlen: 24
176.53.125.0/24 maxlen: 24
176.53.126.0/24 maxlen: 24
176.53.127.0/24 maxlen: 24
178.211.32.0/24 maxlen: 24
178.211.33.0/24 maxlen: 24
178.211.34.0/24 maxlen: 24
178.211.35.0/24 maxlen: 24
178.211.36.0/24 maxlen: 24
178.211.37.0/24 maxlen: 24
178.211.38.0/24 maxlen: 24
178.211.39.0/24 maxlen: 24
178.211.40.0/24 maxlen: 24
178.211.41.0/24 maxlen: 24
178.211.43.0/24 maxlen: 24
178.211.44.0/24 maxlen: 24
178.211.45.0/24 maxlen: 24
178.211.46.0/24 maxlen: 24
178.211.47.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
213.128.82.0/24 maxlen: 24
213.128.83.0/24 maxlen: 24
213.128.84.0/24 maxlen: 24
213.128.85.0/24 maxlen: 24
213.128.86.0/24 maxlen: 24
213.128.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:c8:eb:e5:3d:26:95:7a:38:c2:77:e8:a5:01:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jun 18 06:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e2254a74c5e9f4ed0c0a3eb7aee5e7946823af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:e0:03:e3:8d:f0:f5:17:06:9f:6d:1f:b8:
b6:7d:de:b4:ce:02:74:b5:3a:7a:f2:94:df:a2:78:
c4:e9:01:2d:2a:47:ef:95:5a:75:d5:45:05:d5:d7:
d2:63:ea:4f:36:c3:7c:9f:3a:a7:84:27:fd:f0:07:
39:3d:de:f0:d9:42:b5:96:71:62:af:d1:34:40:fb:
e0:3f:7b:de:67:3e:34:3b:4b:4f:92:74:77:e5:21:
6f:ca:ba:05:1c:b0:75:ba:0b:93:57:f6:0d:a1:10:
d9:10:c4:00:a1:bb:6c:a2:ad:6b:0c:b8:4e:36:69:
35:6d:30:ab:45:51:ea:fd:c8:b4:dc:92:f0:a4:78:
7a:cb:43:9a:db:2e:7a:31:5c:a1:8c:77:5a:51:68:
d2:9d:a9:66:05:ab:5c:bb:a2:38:7e:2b:4e:a9:ad:
e9:2c:33:ba:3b:b1:c5:01:0e:c5:c5:37:c6:04:c7:
c6:19:ae:82:5e:92:24:2d:eb:2d:27:c0:a0:8d:bf:
ea:5c:cb:d3:5a:fa:16:7d:6d:7b:6c:6c:7d:0b:4f:
02:da:40:70:3b:bc:fb:d7:b3:73:7d:51:39:43:02:
49:74:6b:e8:6d:05:c6:c0:33:bd:2f:2c:b9:35:50:
ea:b1:b7:b1:3f:14:7e:bc:df:a1:4c:5c:43:ca:9f:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E2:25:4A:74:C5:E9:F4:ED:0C:0A:3E:B7:AE:E5:E7:94:68:23:AF
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/uOIlSnTF6fTtDAo-t67l55RoI68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.96.0/19
46.45.128.0/24
46.45.136.0/21
46.45.168.0-46.45.183.255
176.53.16.0/20
176.53.113.0-176.53.127.255
178.211.32.0-178.211.41.255
178.211.43.0-178.211.47.255
213.128.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:01:f3:7d:cf:9b:67:f5:01:8a:92:90:91:3a:33:73:af:f0:
77:27:fc:49:e1:fc:c5:95:ff:ce:24:b2:51:a5:39:bb:a5:71:
85:dc:32:d1:19:b3:d0:3e:da:99:43:c9:b8:fc:d6:fe:5c:dd:
e6:61:e2:c7:74:40:26:78:c4:8a:71:d8:c4:3b:09:b0:e4:5e:
fb:1c:6d:ed:54:9d:55:a2:72:39:f9:b2:47:71:9b:c6:01:bb:
a4:13:ea:55:4e:67:5a:17:5d:57:9f:c0:01:89:56:d6:7a:66:
f0:41:0a:49:e5:ac:44:e9:c9:74:76:98:88:4e:d7:fe:32:5e:
9a:76:6f:f9:68:83:d7:58:de:4b:5c:99:b6:bf:c8:18:10:ae:
49:79:ea:51:98:ce:96:4c:e2:8c:8f:0e:00:76:4e:27:3b:18:
ef:a2:52:af:e0:07:90:b6:c1:b9:81:2c:6e:25:ce:96:f6:a1:
c0:e4:82:e6:01:aa:7c:0f:58:3e:6b:8d:7c:f2:fe:e2:b3:01:
2c:d2:4f:6f:59:ad:77:46:84:9d:cc:68:09:47:cc:ed:8d:94:
e9:10:bc:7a:ef:32:00:b2:a4:9d:83:33:c3:3c:e5:23:95:2d:
e2:d7:4f:9c:11:e2:58:bf:d8:8c:6f:15:cd:25:1d:84:d7:99:
0f:de:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:41:20 2025 by rpki-client