Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/anqJ49NaASwaJ_s7wvdwnyeoi7A.roa
File: anqJ49NaASwaJ_s7wvdwnyeoi7A.roa (raw, json)
Hash identifier: tT4VObTQFTBANax7YZ+QGhxAr7cz6xVgJTjgQ2oVs4U=
Subject key identifier: 6A:7A:89:E3:D3:5A:01:2C:1A:27:FB:3B:C2:F7:70:9F:27:A8:8B:B0
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0199BEE7FAFD1D4D7860C72C1F73B21F126F
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/anqJ49NaASwaJ_s7wvdwnyeoi7A.roa
Signing time: Tue 07 Oct 2025 13:41:37 +0000
ROA not before: Tue 07 Oct 2025 13:41:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 24.132.0.0/16 maxlen: 16
24.132.0.0/17 maxlen: 17
24.132.128.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
31.151.0.0/17 maxlen: 17
31.151.128.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.0.0/17 maxlen: 17
46.129.128.0/17 maxlen: 17
62.100.0.0/18 maxlen: 18
62.108.0.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.16.0/20 maxlen: 20
62.163.0.0/16 maxlen: 16
62.163.0.0/17 maxlen: 17
62.163.128.0/17 maxlen: 17
62.194.0.0/15 maxlen: 15
62.194.0.0/16 maxlen: 16
62.195.0.0/16 maxlen: 16
77.248.0.0/14 maxlen: 14
77.248.0.0/15 maxlen: 15
77.250.0.0/15 maxlen: 15
80.56.0.0/15 maxlen: 15
80.56.0.0/16 maxlen: 16
80.57.0.0/16 maxlen: 16
80.85.32.0/20 maxlen: 20
80.113.0.0/16 maxlen: 16
80.113.0.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
80.248.32.0/20 maxlen: 20
80.248.32.0/21 maxlen: 21
80.248.40.0/21 maxlen: 21
81.175.64.0/18 maxlen: 18
81.175.64.0/19 maxlen: 19
81.175.96.0/19 maxlen: 19
84.41.128.0/17 maxlen: 17
88.211.128.0/18 maxlen: 18
89.98.0.0/15 maxlen: 15
89.98.0.0/16 maxlen: 16
89.99.0.0/16 maxlen: 16
89.220.0.0/17 maxlen: 17
92.108.0.0/14 maxlen: 14
92.108.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
95.96.0.0/15 maxlen: 15
95.96.0.0/16 maxlen: 16
95.97.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
178.84.0.0/16 maxlen: 16
178.85.0.0/16 maxlen: 16
185.94.92.0/22 maxlen: 22
185.94.92.0/23 maxlen: 23
185.94.94.0/23 maxlen: 23
185.137.200.0/22 maxlen: 22
185.137.200.0/23 maxlen: 23
185.137.202.0/23 maxlen: 23
195.18.64.0/18 maxlen: 18
212.67.160.0/19 maxlen: 19
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
212.83.80.0/20 maxlen: 20
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
212.178.48.0/20 maxlen: 20
212.187.0.0/17 maxlen: 17
212.187.0.0/18 maxlen: 18
212.187.64.0/18 maxlen: 18
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
213.46.0.0/16 maxlen: 16
213.46.0.0/17 maxlen: 17
213.46.128.0/17 maxlen: 17
213.93.0.0/16 maxlen: 16
213.93.0.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.124.160.0/19 maxlen: 19
213.124.160.0/20 maxlen: 20
213.124.176.0/20 maxlen: 20
213.124.192.0/18 maxlen: 18
213.124.192.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
213.126.128.0/17 maxlen: 17
213.126.128.0/18 maxlen: 18
213.126.192.0/18 maxlen: 18
213.127.0.0/16 maxlen: 16
213.127.0.0/17 maxlen: 17
213.127.128.0/17 maxlen: 17
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.160.252.0/22 maxlen: 22
217.17.128.0/20 maxlen: 20
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
217.63.160.0/19 maxlen: 19
217.102.0.0/17 maxlen: 17
217.102.0.0/18 maxlen: 18
217.102.64.0/18 maxlen: 18
217.103.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.128.0/17 maxlen: 17
217.104.128.0/17 maxlen: 17
217.104.128.0/18 maxlen: 18
217.104.192.0/18 maxlen: 18
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
217.105.32.0/19 maxlen: 19
217.105.224.0/19 maxlen: 19
217.105.224.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
217.112.112.0/20 maxlen: 20
2a00:18b0::/29 maxlen: 29
2a00:18b0::/30 maxlen: 30
2a00:18b4::/30 maxlen: 30
2a02:938::/29 maxlen: 29
2a02:938::/30 maxlen: 30
2a02:93c::/30 maxlen: 30
2a02:a200::/27 maxlen: 27
2a02:a200::/28 maxlen: 28
2a02:a210::/28 maxlen: 28
2a03:4aa0::/29 maxlen: 29
2a03:4aa0::/30 maxlen: 30
2a03:4aa4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:e7:fa:fd:1d:4d:78:60:c7:2c:1f:73:b2:1f:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Oct 7 13:41:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a7a89e3d35a012c1a27fb3bc2f7709f27a88bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:bb:fc:18:e0:f3:e7:43:0e:2c:dc:a1:96:
42:5a:65:20:ac:02:ef:12:ad:c4:8d:62:6a:2e:d3:
c6:41:46:25:9e:d5:2b:c3:15:ce:70:f8:aa:5d:30:
53:a0:3d:07:11:67:ab:72:6a:47:43:50:0b:29:f2:
81:28:96:b9:3c:8b:ab:c1:cb:e9:17:59:e7:78:5a:
d6:a2:d3:e7:27:e6:c6:ae:65:af:d7:59:d1:fb:90:
4d:93:51:df:e4:c3:43:3b:10:69:65:cf:13:70:78:
49:d8:5f:16:61:1b:50:c0:04:70:4a:44:da:c0:c2:
bb:34:3b:1e:ac:09:50:a2:07:e8:7d:8c:6f:73:bf:
d1:2d:cb:35:59:07:41:7f:36:2f:37:f7:d0:cd:73:
51:6f:92:cc:db:74:1f:9e:1c:e8:08:a8:55:5d:e3:
40:03:fe:e9:7a:11:90:ae:66:6f:09:ea:c2:19:49:
4e:16:f5:ab:31:62:3d:0c:97:fd:fc:c2:d8:42:53:
7e:90:7c:45:69:71:3b:fe:5e:ce:d3:88:79:8e:57:
fe:f9:c2:6e:81:41:b6:5e:c6:77:be:ce:2a:1f:aa:
d6:60:2c:66:f2:d9:df:fa:31:41:8e:d3:7b:ab:53:
2b:c1:76:2c:f5:36:64:d0:c1:02:ce:3d:9e:1d:47:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:89:E3:D3:5A:01:2C:1A:27:FB:3B:C2:F7:70:9F:27:A8:8B:B0
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/anqJ49NaASwaJ_s7wvdwnyeoi7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.100.0.0/18
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
80.248.32.0/20
81.175.64.0/18
84.41.128.0/17
88.211.128.0/18
89.98.0.0/15
89.220.0.0/17
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
195.18.64.0/18
212.67.160.0/19
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.17.128.0/20
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
217.112.112.0/20
IPv6:
2a00:18b0::/29
2a02:938::/29
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
58:7e:ea:0a:94:36:19:b1:a8:39:79:dd:a3:43:18:a7:8d:c5:
26:b8:ae:b6:4d:28:6b:9b:b8:0c:2b:04:76:fd:ea:cf:f3:11:
ce:9f:57:b5:79:33:83:8f:c9:04:c5:95:c3:0c:b9:d7:48:9f:
a2:24:26:df:9c:28:24:60:c5:5c:93:fb:60:13:78:f2:aa:ea:
74:11:fe:94:e5:c7:25:7f:40:d1:85:4a:27:2f:04:49:78:fb:
93:06:2a:95:e1:ca:ee:0e:f6:c7:b3:70:5c:5b:14:94:7e:e7:
ee:88:b2:9d:8f:4e:f1:83:c3:ec:67:5a:64:81:54:bc:9b:d6:
f3:f6:e3:c7:27:d2:f2:d9:e0:c8:ec:3b:c9:80:90:b9:d8:d2:
b3:d0:46:c0:ec:1c:c0:eb:89:d9:0e:34:9e:66:2d:ec:b1:32:
fe:24:65:f1:51:c0:20:f3:1a:5a:05:29:cb:05:da:b5:6d:99:
cf:e6:fe:84:43:c2:a6:dd:17:db:ae:17:c2:8a:e7:f3:b3:ad:
0f:15:19:52:53:82:44:f7:2c:c2:93:8c:9c:bb:6a:a2:bf:ce:
40:62:b7:9e:10:4b:09:56:92:99:82:8d:e6:fe:ba:a4:41:8d:
43:76:e7:d4:88:27:e4:6b:b0:b8:53:b7:9a:62:2f:3e:d7:eb:
29:1f:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:05 2025 by rpki-client