Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa
File: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (raw, json)
Hash identifier: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=
Subject key identifier: 02:A8:E6:10:A6:BF:28:F4:FD:23:0A:06:9C:58:CF:D2:38:89:EA:83
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019884CDEDA731BDC6F46F2A9783E9EE5D81
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa
Signing time: Thu 07 Aug 2025 13:52:24 +0000
ROA not before: Thu 07 Aug 2025 13:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34758
IP address blocks: 31.6.80.0/20 maxlen: 20
31.6.80.0/24 maxlen: 24
31.6.81.0/24 maxlen: 24
31.6.82.0/24 maxlen: 24
31.6.83.0/24 maxlen: 24
31.6.84.0/24 maxlen: 24
31.6.85.0/24 maxlen: 24
31.6.86.0/24 maxlen: 24
31.6.87.0/24 maxlen: 24
31.6.88.0/24 maxlen: 24
31.6.89.0/24 maxlen: 24
31.6.90.0/24 maxlen: 24
31.6.91.0/24 maxlen: 24
31.6.92.0/24 maxlen: 24
31.6.93.0/24 maxlen: 24
31.6.94.0/24 maxlen: 24
31.6.95.0/24 maxlen: 24
45.13.88.0/22 maxlen: 22
45.13.88.0/24 maxlen: 24
45.13.89.0/24 maxlen: 24
45.13.90.0/24 maxlen: 24
45.13.91.0/24 maxlen: 24
45.93.36.0/22 maxlen: 22
45.93.36.0/24 maxlen: 24
45.93.37.0/24 maxlen: 24
45.93.38.0/24 maxlen: 24
45.93.39.0/24 maxlen: 24
46.229.80.0/20 maxlen: 20
46.229.80.0/24 maxlen: 24
46.229.81.0/24 maxlen: 24
46.229.82.0/24 maxlen: 24
46.229.83.0/24 maxlen: 24
46.229.84.0/24 maxlen: 24
46.229.85.0/24 maxlen: 24
46.229.86.0/24 maxlen: 24
46.229.87.0/24 maxlen: 24
46.229.88.0/24 maxlen: 24
46.229.89.0/24 maxlen: 24
46.229.90.0/24 maxlen: 24
46.229.91.0/24 maxlen: 24
46.229.92.0/24 maxlen: 24
46.229.93.0/24 maxlen: 24
46.229.94.0/24 maxlen: 24
46.229.95.0/24 maxlen: 24
80.70.116.0/22 maxlen: 22
80.70.116.0/24 maxlen: 24
80.70.117.0/24 maxlen: 24
80.70.118.0/24 maxlen: 24
80.70.119.0/24 maxlen: 24
82.163.32.0/22 maxlen: 22
82.163.32.0/24 maxlen: 24
82.163.33.0/24 maxlen: 24
82.163.34.0/24 maxlen: 24
82.163.35.0/24 maxlen: 24
84.234.100.0/22 maxlen: 22
84.234.100.0/24 maxlen: 24
84.234.101.0/24 maxlen: 24
84.234.102.0/24 maxlen: 24
84.234.103.0/24 maxlen: 24
89.189.32.0/20 maxlen: 20
89.189.32.0/24 maxlen: 24
89.189.33.0/24 maxlen: 24
89.189.34.0/24 maxlen: 24
89.189.35.0/24 maxlen: 24
89.189.36.0/24 maxlen: 24
89.189.37.0/24 maxlen: 24
89.189.38.0/24 maxlen: 24
89.189.39.0/24 maxlen: 24
89.189.40.0/24 maxlen: 24
89.189.41.0/24 maxlen: 24
89.189.42.0/24 maxlen: 24
89.189.43.0/24 maxlen: 24
89.189.44.0/24 maxlen: 24
89.189.45.0/24 maxlen: 24
89.189.46.0/24 maxlen: 24
89.189.47.0/24 maxlen: 24
89.189.56.0/21 maxlen: 21
89.189.56.0/24 maxlen: 24
89.189.57.0/24 maxlen: 24
89.189.58.0/24 maxlen: 24
89.189.59.0/24 maxlen: 24
89.189.60.0/24 maxlen: 24
89.189.61.0/24 maxlen: 24
89.189.62.0/24 maxlen: 24
89.189.63.0/24 maxlen: 24
92.246.96.0/21 maxlen: 21
92.246.96.0/24 maxlen: 24
92.246.97.0/24 maxlen: 24
92.246.98.0/24 maxlen: 24
92.246.99.0/24 maxlen: 24
92.246.100.0/24 maxlen: 24
92.246.101.0/24 maxlen: 24
92.246.102.0/24 maxlen: 24
92.246.103.0/24 maxlen: 24
92.246.112.0/20 maxlen: 20
92.246.112.0/24 maxlen: 24
92.246.113.0/24 maxlen: 24
92.246.114.0/24 maxlen: 24
92.246.115.0/24 maxlen: 24
92.246.116.0/24 maxlen: 24
92.246.117.0/24 maxlen: 24
92.246.118.0/24 maxlen: 24
92.246.119.0/24 maxlen: 24
92.246.120.0/24 maxlen: 24
92.246.121.0/24 maxlen: 24
92.246.122.0/24 maxlen: 24
92.246.123.0/24 maxlen: 24
92.246.124.0/24 maxlen: 24
92.246.125.0/24 maxlen: 24
92.246.126.0/24 maxlen: 24
92.246.127.0/24 maxlen: 24
93.93.16.0/21 maxlen: 21
93.93.16.0/24 maxlen: 24
93.93.17.0/24 maxlen: 24
93.93.18.0/24 maxlen: 24
93.93.19.0/24 maxlen: 24
93.93.20.0/24 maxlen: 24
93.93.21.0/24 maxlen: 24
93.93.22.0/24 maxlen: 24
93.93.23.0/24 maxlen: 24
109.234.136.0/21 maxlen: 21
109.234.136.0/24 maxlen: 24
109.234.137.0/24 maxlen: 24
109.234.138.0/24 maxlen: 24
109.234.139.0/24 maxlen: 24
109.234.140.0/24 maxlen: 24
109.234.141.0/24 maxlen: 24
109.234.142.0/24 maxlen: 24
109.234.143.0/24 maxlen: 24
146.255.160.0/21 maxlen: 21
146.255.160.0/24 maxlen: 24
146.255.161.0/24 maxlen: 24
146.255.162.0/24 maxlen: 24
146.255.163.0/24 maxlen: 24
146.255.164.0/24 maxlen: 24
146.255.165.0/24 maxlen: 24
146.255.166.0/24 maxlen: 24
146.255.167.0/24 maxlen: 24
159.255.156.0/22 maxlen: 22
159.255.156.0/24 maxlen: 24
159.255.157.0/24 maxlen: 24
159.255.158.0/24 maxlen: 24
159.255.159.0/24 maxlen: 24
185.23.84.0/22 maxlen: 22
185.23.84.0/24 maxlen: 24
185.23.85.0/24 maxlen: 24
185.23.86.0/24 maxlen: 24
185.23.87.0/24 maxlen: 24
185.103.80.0/22 maxlen: 22
185.103.80.0/24 maxlen: 24
185.103.81.0/24 maxlen: 24
185.103.82.0/24 maxlen: 24
185.103.83.0/24 maxlen: 24
185.126.140.0/22 maxlen: 22
185.126.140.0/24 maxlen: 24
185.126.141.0/24 maxlen: 24
185.126.142.0/24 maxlen: 24
185.126.143.0/24 maxlen: 24
185.138.36.0/22 maxlen: 22
185.138.36.0/23 maxlen: 23
185.138.36.0/24 maxlen: 24
185.138.37.0/24 maxlen: 24
185.138.38.0/23 maxlen: 23
185.138.38.0/24 maxlen: 24
185.138.39.0/24 maxlen: 24
185.158.28.0/22 maxlen: 22
185.158.28.0/24 maxlen: 24
185.158.29.0/24 maxlen: 24
185.158.30.0/24 maxlen: 24
185.158.31.0/24 maxlen: 24
185.171.36.0/22 maxlen: 22
185.171.36.0/24 maxlen: 24
185.171.37.0/24 maxlen: 24
185.171.38.0/24 maxlen: 24
185.171.39.0/24 maxlen: 24
185.178.12.0/22 maxlen: 22
185.178.12.0/24 maxlen: 24
185.178.13.0/24 maxlen: 24
185.178.14.0/24 maxlen: 24
185.178.15.0/24 maxlen: 24
193.238.136.0/22 maxlen: 22
193.238.136.0/24 maxlen: 24
193.238.137.0/24 maxlen: 24
193.238.138.0/24 maxlen: 24
193.238.139.0/24 maxlen: 24
195.225.224.0/22 maxlen: 22
195.225.224.0/24 maxlen: 24
195.225.225.0/24 maxlen: 24
195.225.226.0/24 maxlen: 24
195.225.227.0/24 maxlen: 24
213.178.192.0/20 maxlen: 20
213.178.192.0/24 maxlen: 24
213.178.193.0/24 maxlen: 24
213.178.194.0/24 maxlen: 24
213.178.195.0/24 maxlen: 24
213.178.196.0/24 maxlen: 24
213.178.197.0/24 maxlen: 24
213.178.198.0/24 maxlen: 24
213.178.199.0/24 maxlen: 24
213.178.200.0/24 maxlen: 24
213.178.201.0/24 maxlen: 24
213.178.202.0/24 maxlen: 24
213.178.203.0/24 maxlen: 24
213.178.204.0/24 maxlen: 24
213.178.205.0/24 maxlen: 24
213.178.206.0/24 maxlen: 24
213.178.207.0/24 maxlen: 24
217.72.32.0/21 maxlen: 21
217.72.32.0/24 maxlen: 24
217.72.33.0/24 maxlen: 24
217.72.34.0/24 maxlen: 24
217.72.35.0/24 maxlen: 24
217.72.36.0/24 maxlen: 24
217.72.37.0/24 maxlen: 24
217.72.38.0/24 maxlen: 24
217.72.39.0/24 maxlen: 24
2a01:7540::/32 maxlen: 32
2a04:2080::/29 maxlen: 48
2a06:c2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:cd:ed:a7:31:bd:c6:f4:6f:2a:97:83:e9:ee:5d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Aug 7 13:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a8e610a6bf28f4fd230a069c58cfd23889ea83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:bf:80:77:bd:26:95:4d:75:a5:83:21:fc:
ed:ab:62:90:fd:7f:f6:42:13:05:c4:26:85:db:ea:
b4:cd:49:f3:db:70:9b:06:33:2a:80:a3:26:88:9c:
2d:48:12:7b:77:e0:0d:7e:9e:1e:52:fe:a7:0c:16:
5d:8a:d2:1f:05:83:9a:07:83:91:b4:c7:66:64:43:
1e:63:86:65:40:70:3d:0b:78:df:e5:29:25:d4:60:
0e:cd:78:60:d6:33:74:80:29:bf:38:d3:0c:93:91:
a0:1a:65:70:bc:5c:b1:cc:dc:04:34:f4:29:9c:c6:
36:57:62:9f:f0:4d:3b:30:05:d9:7d:a7:16:0c:b1:
ba:0a:74:83:eb:e5:29:9f:3a:92:88:7e:6b:4f:b1:
c7:96:8c:83:43:3e:d9:03:84:95:b1:7a:46:5b:8b:
2b:7c:45:f9:36:8b:3b:c0:11:46:20:48:d9:e4:de:
7c:a9:3c:e3:f6:6e:b1:a2:8e:e4:1e:a1:1b:c4:30:
be:c3:2d:ea:ed:01:e8:48:88:7a:2b:01:3e:3e:80:
3d:33:b9:5d:ef:e7:ee:83:d3:28:10:29:cb:03:65:
34:68:53:89:3e:b5:0d:34:10:b7:ca:fd:c1:63:94:
5f:6a:00:af:fb:d6:b6:18:93:63:ba:25:0b:8f:86:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:E6:10:A6:BF:28:F4:FD:23:0A:06:9C:58:CF:D2:38:89:EA:83
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.80.0/20
45.13.88.0/22
45.93.36.0/22
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
92.246.96.0/21
92.246.112.0/20
93.93.16.0/21
109.234.136.0/21
146.255.160.0/21
159.255.156.0/22
185.23.84.0/22
185.103.80.0/22
185.126.140.0/22
185.138.36.0/22
185.158.28.0/22
185.171.36.0/22
185.178.12.0/22
193.238.136.0/22
195.225.224.0/22
213.178.192.0/20
217.72.32.0/21
IPv6:
2a01:7540::/32
2a04:2080::/29
2a06:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
27:0e:a7:b8:b9:ee:38:0e:be:b4:8f:65:50:b9:b9:77:87:0b:
1b:b7:fb:8a:20:12:ca:53:c6:93:8d:0a:88:cd:17:b4:18:cb:
56:7c:54:30:e1:ac:39:0e:d9:85:b8:a2:1c:b3:09:99:ee:14:
9c:cb:1d:c1:52:8d:1e:08:02:eb:ef:d1:40:fe:25:4c:80:23:
4e:6b:2b:a9:37:d5:72:a1:3b:c7:c8:10:bc:dc:db:2e:85:c3:
9b:74:16:c5:d5:a9:22:92:6b:2e:dc:df:42:24:9f:f7:b3:87:
e6:81:d1:72:68:da:aa:b5:23:ba:b2:7a:1b:29:5c:b4:69:f8:
d5:9b:86:22:22:4d:6b:f5:a5:cc:46:eb:83:fc:fa:2a:58:89:
54:fd:19:22:26:b4:b1:5f:54:40:53:23:45:21:d9:1c:27:b8:
62:0a:74:15:76:c5:0c:2a:a1:5e:c5:af:17:07:d8:b6:71:ad:
04:bf:a0:b9:26:4a:97:54:63:a6:15:dd:aa:4e:32:00:a9:e9:
7b:79:2d:21:e0:c5:d3:29:fc:7c:89:4d:72:bd:0e:7c:2d:c2:
17:78:2d:71:6f:ee:dc:3b:e0:fe:dc:a1:56:8d:cf:8f:15:05:
11:a4:99:78:58:04:7e:ca:f2:e2:8c:52:05:4c:00:45:87:1a:
f0:5d:93:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:58 2025 by rpki-client