Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t5ON5kBFkjE9uPSuJxXLY-y1PAo.roa
File: t5ON5kBFkjE9uPSuJxXLY-y1PAo.roa (raw, json)
Hash identifier: E+8yCu5rLHpogx4hgc+vwnW7ZHHbUIxC3Bq6Z1nT++4=
Subject key identifier: B7:93:8D:E6:40:45:92:31:3D:B8:F4:AE:27:15:CB:63:EC:B5:3C:0A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0197A5A45854C68582F418614322CC9DD4E4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t5ON5kBFkjE9uPSuJxXLY-y1PAo.roa
Signing time: Wed 25 Jun 2025 05:51:40 +0000
ROA not before: Wed 25 Jun 2025 05:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31195
IP address blocks: 31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.235.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.190.0/24 maxlen: 24
37.28.191.0/24 maxlen: 24
37.29.43.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.224.0/23 maxlen: 23
83.169.226.0/24 maxlen: 24
83.169.227.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.230.0/24 maxlen: 24
85.26.240.0/22 maxlen: 22
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.69.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.74.0/24 maxlen: 24
178.178.75.0/24 maxlen: 24
178.178.76.0/24 maxlen: 24
178.178.77.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
2a03:d006::/40 maxlen: 40
2a03:d006:100::/40 maxlen: 40
2a03:d006:200::/40 maxlen: 40
2a03:d006:300::/40 maxlen: 40
2a03:d006:400::/40 maxlen: 40
2a03:d006:500::/40 maxlen: 40
2a03:d006:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:a4:58:54:c6:85:82:f4:18:61:43:22:cc:9d:d4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jun 25 05:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7938de6404592313db8f4ae2715cb63ecb53c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:ad:97:7b:7a:09:18:56:02:a0:be:7f:2c:
73:0d:e8:6c:6f:a3:d6:d0:c7:aa:4b:8c:99:fa:b3:
ef:98:59:5e:74:7b:67:c2:5c:da:3b:b0:9e:b6:96:
9f:8d:1a:0d:76:e9:6e:bb:dc:f9:bd:be:5c:bc:fa:
98:bc:e4:6a:3e:0a:0c:d5:1c:f6:6a:29:27:5c:1e:
ba:5e:2a:c0:24:e6:d5:58:0c:f7:63:b0:91:84:32:
47:d7:12:88:45:01:ec:f6:bb:2f:ac:55:b4:95:6d:
d5:bd:c0:da:85:a9:32:f2:1c:23:52:93:d7:ca:c5:
ce:93:9a:00:f6:92:1a:57:a7:e7:3c:43:4b:d0:04:
f4:70:88:cb:65:a5:a0:c8:55:b9:28:a3:ab:b5:0b:
7c:e7:57:73:72:c5:f7:12:6b:24:df:03:a4:98:e5:
fc:51:42:05:05:a6:f9:91:11:99:59:46:30:43:fb:
ce:e7:7a:15:51:42:40:ee:46:89:cf:ec:d2:7b:c5:
94:7e:44:d0:50:5b:cd:69:f1:2c:0c:b5:0b:95:22:
d5:ec:28:d6:7d:81:03:bb:68:2d:de:19:1f:20:cc:
cf:41:67:b5:78:f7:1d:f7:3a:62:dd:ad:59:fe:bb:
c2:82:73:10:b8:d7:ba:73:21:13:61:81:f4:cb:ac:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:8D:E6:40:45:92:31:3D:B8:F4:AE:27:15:CB:63:EC:B5:3C:0A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t5ON5kBFkjE9uPSuJxXLY-y1PAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.77.255
188.170.228.0-188.170.237.255
188.170.239.0/24
IPv6:
2a03:d006::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:16:a8:10:9a:58:ae:4f:c2:8c:b6:f9:fc:15:01:55:35:69:
79:62:c2:44:94:12:fe:76:fd:60:91:07:26:08:f3:ba:a9:0c:
0a:d5:4b:91:a7:40:41:39:ae:e6:39:cc:20:52:07:99:04:c1:
f6:f6:53:fe:ff:a4:40:fd:c5:8d:9a:a9:27:b2:58:71:65:00:
eb:d9:53:14:67:08:d5:7d:e9:1e:aa:2e:8f:2f:70:f7:ab:8c:
c0:91:c8:81:84:8f:be:75:3d:d1:84:4b:fa:78:22:95:6a:d1:
ff:59:f4:3d:4f:25:00:e2:be:94:e6:80:21:97:bd:d3:91:33:
18:b8:99:8f:a4:30:44:d4:47:a3:24:f3:db:95:22:13:9d:91:
b1:42:44:3f:b0:06:d5:0a:95:55:77:a6:ab:f5:51:8c:0a:04:
9a:98:6d:4a:82:65:c8:07:da:dc:37:20:d2:91:46:36:fa:83:
26:3d:87:5f:74:4c:e8:70:83:e9:28:79:69:31:fe:da:93:9f:
80:e6:ef:96:e9:c0:92:74:6e:38:fd:61:5a:ad:ab:be:6b:9f:
06:1e:5e:0b:bf:af:ba:d2:cf:48:08:95:5e:b9:44:38:de:ee:
70:37:8d:b1:cf:5b:c5:47:48:13:5b:fe:76:92:11:2f:44:5b:
b3:f4:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:00:03 2025 by rpki-client