Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/7L93z_qlhSOtd1RZOlWCJUWvg_o.roa
File: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (raw, json)
Hash identifier: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=
Subject key identifier: EC:BF:77:CF:FA:A5:85:23:AD:77:54:59:3A:55:82:25:45:AF:83:FA
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 0198CC43AE7C5724B6B0D419BA8D3FAB0431
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/7L93z_qlhSOtd1RZOlWCJUWvg_o.roa
Signing time: Thu 21 Aug 2025 10:54:04 +0000
ROA not before: Thu 21 Aug 2025 10:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197720
IP address blocks: 31.186.0.0/24 maxlen: 24
31.186.1.0/24 maxlen: 24
31.186.2.0/24 maxlen: 24
31.186.3.0/24 maxlen: 24
31.186.4.0/24 maxlen: 24
31.186.5.0/24 maxlen: 24
31.186.6.0/24 maxlen: 24
31.186.7.0/24 maxlen: 24
31.186.8.0/24 maxlen: 24
31.186.9.0/24 maxlen: 24
31.186.10.0/24 maxlen: 24
31.186.11.0/24 maxlen: 24
31.186.12.0/24 maxlen: 24
31.186.13.0/24 maxlen: 24
31.186.14.0/24 maxlen: 24
31.186.15.0/24 maxlen: 24
31.186.16.0/24 maxlen: 24
31.186.17.0/24 maxlen: 24
31.186.18.0/24 maxlen: 24
31.186.19.0/24 maxlen: 24
31.186.20.0/24 maxlen: 24
31.186.21.0/24 maxlen: 24
31.186.22.0/24 maxlen: 24
31.186.23.0/24 maxlen: 24
31.186.24.0/24 maxlen: 24
31.186.25.0/24 maxlen: 24
31.186.26.0/24 maxlen: 24
31.186.27.0/24 maxlen: 24
31.186.28.0/24 maxlen: 24
31.186.29.0/24 maxlen: 24
31.186.30.0/24 maxlen: 24
31.186.31.0/24 maxlen: 24
2a0d:a000:0:a00::/56 maxlen: 56
2a0d:a000:0:b00::/56 maxlen: 56
2a0d:a000:0:c00::/56 maxlen: 56
2a0d:a000:0:d00::/56 maxlen: 56
2a0d:a000:0:e00::/56 maxlen: 56
2a0d:a000:0:f00::/56 maxlen: 56
2a0d:a000:0:1000::/56 maxlen: 56
2a0d:a000:0:1100::/56 maxlen: 56
2a0d:a000:0:1200::/56 maxlen: 56
2a0d:a000:0:1300::/56 maxlen: 56
2a0d:a000:0:1400::/56 maxlen: 56
2a0d:a000:0:1500::/56 maxlen: 56
2a0d:a000:0:1600::/56 maxlen: 56
2a0d:a000:0:1700::/56 maxlen: 56
2a0d:a000:0:1800::/56 maxlen: 56
2a0d:a000:0:1900::/56 maxlen: 56
2a0d:a000:0:1a00::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:43:ae:7c:57:24:b6:b0:d4:19:ba:8d:3f:ab:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Aug 21 10:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecbf77cffaa58523ad7754593a55822545af83fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:3d:ca:3b:06:97:15:00:39:a9:70:15:66:
a7:05:26:45:3a:b8:85:d1:a2:0f:37:de:8b:14:85:
d6:2f:db:de:7d:ff:fc:e9:09:b5:33:12:03:18:36:
b3:d8:27:4d:cd:bc:75:af:6f:c7:a8:75:b7:60:8a:
52:14:f3:32:77:49:ed:1c:ae:3a:af:ef:8b:01:c9:
ea:07:f1:5c:f1:a1:97:90:be:31:47:01:19:6c:c3:
37:6e:1e:c2:87:24:c5:6f:80:de:ed:98:b7:4c:02:
21:d1:9f:79:13:ce:5d:78:b7:96:e5:96:d2:b0:66:
99:d3:18:9a:f6:7b:79:17:6e:ec:25:bd:87:43:4d:
22:b9:a6:fe:4d:ff:08:63:39:02:9c:8b:81:66:42:
b8:8f:bf:49:de:d7:ab:a2:3a:47:d3:32:11:c7:b3:
20:82:a4:00:66:5b:f2:45:f1:6f:c7:c2:d0:45:1f:
3d:ff:5d:9a:f1:a2:2d:03:40:7b:2c:67:c6:43:0a:
f3:07:9c:2d:91:96:06:ff:a4:37:b9:73:47:b7:d7:
a3:14:30:a7:5d:fc:79:04:2c:2b:ad:8a:23:17:c8:
2f:ee:2d:cd:32:25:10:cc:2d:92:b9:b6:75:0b:32:
bd:d1:99:06:ac:37:4a:b9:ae:df:c5:5d:78:d3:0e:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BF:77:CF:FA:A5:85:23:AD:77:54:59:3A:55:82:25:45:AF:83:FA
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/7L93z_qlhSOtd1RZOlWCJUWvg_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.0.0/19
IPv6:
2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:fd:96:15:c9:65:c8:3d:ac:a3:ef:b9:3a:29:b2:49:c2:7f:
16:63:f2:22:a4:82:37:0a:3e:1b:a3:36:1d:2e:1d:92:f3:ff:
91:6d:c1:5c:d2:c4:ae:68:53:3d:6b:46:90:c3:ff:f4:95:17:
3f:a6:00:4a:c9:4c:24:ae:da:4a:c4:03:36:73:c9:33:11:c6:
01:4c:16:37:4c:b4:b6:a1:0c:76:cb:4c:65:21:ac:7b:83:30:
c0:b8:90:e2:e0:05:32:d8:ca:0a:a5:5b:2b:29:34:7c:5f:3b:
71:b0:54:81:c6:76:5c:db:1b:8c:f1:62:13:8d:fb:0e:83:b3:
3b:3d:32:d5:d2:8e:4b:48:69:28:61:c1:4d:ee:82:0b:a5:f5:
0d:95:bf:43:69:63:aa:40:8c:83:63:2a:69:db:4e:79:22:e3:
b7:5b:ec:05:c2:93:f6:70:26:b4:14:4e:19:e1:c5:24:37:ae:
71:7d:cf:0b:06:71:0d:d7:d3:c0:b1:a2:f1:d2:19:01:95:07:
77:77:5e:5f:f1:eb:f3:65:e8:1e:a1:cb:69:5a:89:4d:b0:fa:
72:c5:27:91:ac:77:cd:2f:b3:b8:48:da:0d:99:1c:e5:ed:40:
51:de:a5:8b:9a:cd:43:65:03:bd:77:af:2b:63:5f:5f:e2:ec:
36:8d:32:27
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZjMQ658VyS2sNQZuo0/qwQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjUwODIxMTA1NDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2JmNzdjZmZhYTU4NTIzYWQ3NzU0NTkzYTU1ODIyNTQ1YWY4M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UY9yjsGlxUAOalwFWanBSZFOriF
0aIPN96LFIXWL9veff/86Qm1MxIDGDaz2CdNzbx1r2/HqHW3YIpSFPMyd0ntHK46
r++LAcnqB/Fc8aGXkL4xRwEZbMM3bh7ChyTFb4De7Zi3TAIh0Z95E85deLeW5ZbS
sGaZ0xia9nt5F27sJb2HQ00iuab+Tf8IYzkCnIuBZkK4j79J3terojpH0zIRx7Mg
gqQAZlvyRfFvx8LQRR89/12a8aItA0B7LGfGQwrzB5wtkZYG/6Q3uXNHt9ejFDCn
Xfx5BCwrrYojF8gv7i3NMiUQzC2SubZ1CzK90ZkGrDdKua7fxV140w6ASwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOy/d8/6pYUjrXdUWTpVgiVFr4P6MB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvN0w5M3pfcWxoU090ZDFSWk9sV0NKVVd2Z19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAMBAIAATAGAwQFH7oAMBwE
AgACMBYwFAMIASoNoAAAAAoDCAAqDaAAAAAaMA0GCSqGSIb3DQEBCwUAA4IBAQAS
/ZYVyWXIPayj77k6KbJJwn8WY/IipII3Cj4bozYdLh2S8/+RbcFc0sSuaFM9a0aQ
w//0lRc/pgBKyUwkrtpKxAM2c8kzEcYBTBY3TLS2oQx2y0xlIax7gzDAuJDi4AUy
2MoKpVsrKTR8XztxsFSBxnZc2xuM8WITjfsOg7M7PTLV0o5LSGkoYcFN7oILpfUN
lb9DaWOqQIyDYypp2055IuO3W+wFwpP2cCa0FE4Z4cUkN65xfc8LBnEN19PAsaLx
0hkBlQd3d15f8evzZegeoctpWolNsPpyxSeRrHfNL7O4SNoNmRzl7UBR3qWLms1D
ZQO9d68rY19f4uw2jTIn
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:54 2025 by rpki-client