Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Y4NmZbZuhs1viCkczDnrgcVKsPA.roa
File: Y4NmZbZuhs1viCkczDnrgcVKsPA.roa (raw, json)
Hash identifier: iZ00KX52faCxPLqFBBgbaxFYB5kh7DTKiprocjPi7OY=
Subject key identifier: 63:83:66:65:B6:6E:86:CD:6F:88:29:1C:CC:39:EB:81:C5:4A:B0:F0
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0198A7E5FEB8D6DDF05BE96F6DC227879906
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Y4NmZbZuhs1viCkczDnrgcVKsPA.roa
Signing time: Thu 14 Aug 2025 09:25:24 +0000
ROA not before: Thu 14 Aug 2025 09:25:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:e5:fe:b8:d6:dd:f0:5b:e9:6f:6d:c2:27:87:99:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Aug 14 09:25:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63836665b66e86cd6f88291ccc39eb81c54ab0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:ca:ba:71:96:41:4b:3a:84:d7:ae:e7:5b:
18:ad:bd:28:d7:04:0c:76:24:96:30:ae:1d:5a:7e:
0d:a9:89:28:cb:f8:bc:f8:d0:af:ff:e5:f2:2c:7c:
eb:ab:4d:8a:ed:bf:f8:e2:10:05:60:c8:d0:24:8d:
b9:43:db:ba:c9:e5:76:19:3a:2e:fe:dd:e7:f0:2a:
ad:06:b6:05:f4:14:1f:47:93:6a:bb:eb:87:0d:59:
54:98:fd:15:b1:d5:38:19:76:7f:83:1f:0c:f5:70:
2a:a4:7e:43:b3:50:77:44:67:c6:c8:e9:3d:ea:15:
56:be:9a:e0:27:ce:ba:24:fa:56:55:32:58:d8:f8:
48:5d:e3:1a:58:39:12:5c:ad:9f:00:60:da:ff:e1:
50:69:fc:61:e8:7c:8e:33:11:ab:29:0c:f3:82:2a:
ea:50:b5:d0:58:0f:90:cc:fd:60:4f:76:7b:f9:27:
97:39:53:f2:81:ef:e5:df:14:d3:19:cd:c8:42:84:
ea:36:c9:89:26:dc:83:69:d4:d2:ce:a7:11:e4:e2:
18:7d:0a:65:40:4f:78:d5:af:fb:1d:3c:e6:37:e6:
1b:55:02:83:0f:c3:e5:12:64:f3:c8:bf:08:13:43:
d5:90:a6:cd:a8:ee:6d:41:2b:e4:e3:b1:5c:53:48:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:66:65:B6:6E:86:CD:6F:88:29:1C:CC:39:EB:81:C5:4A:B0:F0
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Y4NmZbZuhs1viCkczDnrgcVKsPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.79.255
31.169.81.0-31.169.82.255
31.169.84.0/23
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
6e:21:a7:35:cb:9a:ad:07:a2:b7:99:60:d9:58:d5:8d:6a:02:
36:20:c5:83:f7:e4:89:6e:ea:a8:d6:e6:b7:f1:2a:ed:56:94:
c2:00:50:03:1c:5d:77:7f:f9:ba:67:06:d9:00:09:d3:fb:68:
7f:4e:80:ec:74:ab:1f:30:de:26:91:50:f3:64:9b:9a:c0:ea:
0c:d7:5e:95:e3:cd:6f:70:22:dd:08:c1:83:7e:7f:11:77:92:
cd:e0:fa:c2:a3:8f:f7:8a:4c:33:71:9e:97:26:04:b6:27:dc:
fb:8d:00:7c:e3:8c:c0:df:7a:49:c5:68:3e:d1:6a:4f:d4:33:
36:3a:07:25:6b:86:43:22:63:5c:78:73:4d:08:bf:3c:d2:87:
d5:e1:34:ea:e0:41:ab:2e:78:a7:8c:5a:0e:7e:43:b3:ab:cd:
18:a4:25:b2:25:8b:47:ae:f9:84:ef:70:7f:6c:09:0c:8a:cc:
03:dd:bf:00:d1:b4:18:11:0c:5e:b8:b1:8e:48:02:5d:b2:c1:
27:ab:cd:bf:05:ac:14:b0:a6:ee:4d:9b:b2:1a:ef:83:f5:c5:
87:6e:cb:43:61:11:dc:f3:15:81:5a:59:34:6b:46:7c:2a:a6:
1c:22:fb:cd:2f:5c:26:00:6f:7c:35:94:7b:35:07:ca:d3:aa:
19:aa:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:36 2025 by rpki-client