Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/g0xFMT2GrYAMoL-inLUwLmSSyCA.roa
File: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (raw, json)
Hash identifier: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=
Subject key identifier: 83:4C:45:31:3D:86:AD:80:0C:A0:BF:A2:9C:B5:30:2E:64:92:C8:20
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0197782CE5E2631E79CFADD4F1DEA68C24E9
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/g0xFMT2GrYAMoL-inLUwLmSSyCA.roa
Signing time: Mon 16 Jun 2025 09:58:17 +0000
ROA not before: Mon 16 Jun 2025 09:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:59::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2c:e5:e2:63:1e:79:cf:ad:d4:f1:de:a6:8c:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jun 16 09:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=834c45313d86ad800ca0bfa29cb5302e6492c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:1b:e4:53:73:04:ae:bf:a8:91:6d:f6:9d:
7a:98:c3:9f:a1:5a:fb:38:32:db:3e:10:d5:97:3c:
73:9a:3e:52:72:6f:65:fa:f1:75:17:de:ce:c5:57:
d7:68:74:10:51:2e:d9:fa:46:3b:a8:10:79:38:91:
95:2c:a6:9f:ec:03:b1:5b:8c:ca:41:6f:0b:eb:de:
0d:40:de:0e:5b:54:9a:bc:0f:91:b5:50:0c:30:87:
be:51:e6:a9:44:7b:95:1b:42:14:ac:34:ae:20:41:
a6:c3:7d:76:fe:d1:92:d5:3e:0b:58:15:fc:50:96:
36:d1:c4:4b:f9:3c:2f:dc:24:2b:ea:79:9a:87:da:
9c:1b:34:56:9e:64:3a:46:0c:5f:76:9d:a3:ce:81:
4d:5d:ef:98:12:6f:fb:6c:90:05:75:ce:81:29:00:
34:54:68:a3:9a:8e:b8:4b:89:48:28:55:04:b0:50:
32:d9:46:e4:7d:3e:79:8a:f7:6c:7c:c1:df:20:fd:
36:64:c8:1e:2d:ec:17:35:f7:dd:21:c1:b8:fb:90:
40:48:f3:71:09:1c:15:28:20:51:c7:59:8e:bb:05:
82:09:d7:a4:f8:91:5c:72:07:ed:11:16:6f:e4:3f:
c4:ee:ae:86:6a:20:79:83:0c:44:d2:e0:21:15:cf:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:45:31:3D:86:AD:80:0C:A0:BF:A2:9C:B5:30:2E:64:92:C8:20
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/g0xFMT2GrYAMoL-inLUwLmSSyCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/21
212.70.105.0-212.70.127.255
IPv6:
2a04:7f80:2::-2a04:7f80:5:ffff:ffff:ffff:ffff:ffff
2a04:7f80:10::/45
2a04:7f80:19::-2a04:7f80:1f:ffff:ffff:ffff:ffff:ffff
2a04:7f80:50::/44
2a04:7f80:99::/48
Signature Algorithm: sha256WithRSAEncryption
0e:3f:96:93:71:f7:44:78:71:42:01:c2:3d:78:ad:08:68:92:
94:1e:72:ee:26:5d:dd:04:6d:23:e0:59:71:b0:d1:38:28:4e:
69:32:fd:c2:52:07:e2:04:dc:5f:7f:d6:39:31:f8:66:2c:9e:
4e:a4:92:fd:f8:b8:34:b4:cf:5f:fe:c7:e9:ec:1e:e7:eb:08:
f0:a2:c2:4c:62:1e:c0:09:81:d1:36:24:0f:bf:e5:01:b0:5a:
c8:8d:90:e0:80:0f:ca:49:bf:06:b6:7c:5d:47:a8:4b:00:18:
cc:14:16:c5:fd:6d:fb:8a:c2:a8:fa:08:c0:2b:18:99:1b:4e:
82:86:76:16:59:43:c0:ef:03:96:6d:fd:11:5b:0e:40:54:a8:
68:24:ce:ba:91:c5:55:42:a9:b4:59:61:7e:49:fc:c0:c8:6c:
3b:81:6d:c3:88:37:ce:13:f1:fc:b4:ff:52:a3:c9:f6:c8:e8:
a2:dd:24:f4:a6:bd:b2:18:1c:f8:a1:9b:c2:2c:5b:ae:53:6f:
4f:b4:65:28:bc:5a:1f:24:72:89:1a:d2:8a:a7:2d:9d:e9:56:
66:a4:e9:08:0e:72:5d:a3:7d:c5:fe:6e:f9:b0:6b:51:6c:df:
d9:39:99:a4:ec:f1:c5:d5:21:81:b0:a8:5b:d9:a1:e0:3c:0b:
c7:96:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:31:13 2025 by rpki-client