Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_6Oqu4MuJTI70eaSoAv5nLlDWS8.roa
File: _6Oqu4MuJTI70eaSoAv5nLlDWS8.roa (raw, json)
Hash identifier: m9ZU2qzXp1I75sfghu/GcsNhA4HOwVYPHrAV0SSjAFE=
Subject key identifier: FF:A3:AA:BB:83:2E:25:32:3B:D1:E6:92:A0:0B:F9:9C:B9:43:59:2F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198415376182F87C5A8EFE6447324AEAD4A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_6Oqu4MuJTI70eaSoAv5nLlDWS8.roa
Signing time: Fri 25 Jul 2025 11:24:05 +0000
ROA not before: Fri 25 Jul 2025 11:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34224
IP address blocks: 31.13.195.0/24 maxlen: 32
31.13.197.0/24 maxlen: 32
31.13.216.0/21 maxlen: 32
31.13.217.0/24 maxlen: 32
31.13.221.0/24 maxlen: 32
31.13.223.0/24 maxlen: 32
31.13.230.0/24 maxlen: 32
31.13.236.0/22 maxlen: 32
31.13.241.0/24 maxlen: 32
31.13.245.0/24 maxlen: 32
37.60.138.0/24 maxlen: 32
37.60.139.0/24 maxlen: 32
45.81.38.0/24 maxlen: 32
45.139.123.0/24 maxlen: 24
82.115.210.0/24 maxlen: 32
83.143.115.0/24 maxlen: 32
85.217.140.0/24 maxlen: 32
87.120.6.0/23 maxlen: 32
87.120.6.0/24 maxlen: 32
87.120.8.0/24 maxlen: 32
87.120.13.0/24 maxlen: 32
87.120.37.0/24 maxlen: 32
87.120.39.0/24 maxlen: 32
87.120.43.0/24 maxlen: 32
87.120.61.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.104.0/24 maxlen: 32
87.120.109.0/24 maxlen: 32
87.120.128.0/23 maxlen: 32
87.120.132.0/24 maxlen: 32
87.120.133.0/24 maxlen: 32
87.120.134.0/24 maxlen: 32
87.120.135.0/24 maxlen: 32
87.120.176.0/24 maxlen: 32
87.120.195.0/24 maxlen: 32
87.120.199.0/24 maxlen: 32
87.120.200.0/24 maxlen: 32
87.120.201.0/24 maxlen: 32
87.120.206.0/23 maxlen: 32
87.120.206.0/24 maxlen: 32
87.120.207.0/24 maxlen: 32
87.120.217.0/24 maxlen: 32
87.120.223.0/24 maxlen: 32
87.120.253.0/24 maxlen: 32
87.120.254.0/24 maxlen: 32
87.120.255.0/24 maxlen: 32
87.121.0.0/23 maxlen: 32
87.121.0.0/24 maxlen: 32
87.121.1.0/24 maxlen: 32
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 32
87.121.32.0/24 maxlen: 24
87.121.42.0/24 maxlen: 32
87.121.52.0/24 maxlen: 32
87.121.64.0/24 maxlen: 32
87.121.82.0/24 maxlen: 32
87.121.83.0/24 maxlen: 32
87.121.90.0/23 maxlen: 32
87.121.110.0/24 maxlen: 32
87.121.111.0/24 maxlen: 32
87.121.112.0/24 maxlen: 32
87.121.113.0/24 maxlen: 32
87.121.118.0/24 maxlen: 32
87.121.150.0/23 maxlen: 32
87.121.150.0/24 maxlen: 32
87.121.151.0/24 maxlen: 32
87.121.161.0/24 maxlen: 32
91.92.0.0/24 maxlen: 32
91.92.1.0/24 maxlen: 32
91.92.2.0/24 maxlen: 32
91.92.65.0/24 maxlen: 32
91.92.66.0/24 maxlen: 32
91.92.105.0/24 maxlen: 32
91.92.109.0/24 maxlen: 32
91.92.139.0/24 maxlen: 32
91.92.197.0/24 maxlen: 32
91.92.198.0/23 maxlen: 32
91.92.219.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
91.212.233.0/24 maxlen: 32
92.249.49.0/24 maxlen: 32
93.123.8.0/24 maxlen: 32
93.123.12.0/24 maxlen: 32
93.123.18.0/24 maxlen: 32
93.123.28.0/23 maxlen: 32
93.123.32.0/22 maxlen: 32
93.123.36.0/24 maxlen: 32
93.123.37.0/24 maxlen: 32
93.123.64.0/24 maxlen: 32
94.156.15.0/24 maxlen: 32
94.156.24.0/24 maxlen: 32
94.156.25.0/24 maxlen: 32
94.156.42.0/24 maxlen: 32
94.156.44.0/24 maxlen: 32
94.156.77.0/24 maxlen: 32
94.156.94.0/24 maxlen: 32
94.156.98.0/24 maxlen: 32
94.156.100.0/24 maxlen: 32
94.156.129.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.153.0/24 maxlen: 32
94.156.158.0/24 maxlen: 32
94.156.159.0/24 maxlen: 32
94.156.172.0/23 maxlen: 32
94.156.185.0/24 maxlen: 32
94.156.188.0/24 maxlen: 32
94.156.216.0/21 maxlen: 32
94.156.249.0/24 maxlen: 32
94.156.251.0/24 maxlen: 32
94.156.252.0/24 maxlen: 32
185.254.36.0/24 maxlen: 32
194.55.184.0/23 maxlen: 32
194.169.173.0/24 maxlen: 32
212.73.128.0/23 maxlen: 32
212.73.130.0/23 maxlen: 32
212.73.131.0/24 maxlen: 32
212.73.132.0/24 maxlen: 32
212.73.133.0/24 maxlen: 32
212.73.134.0/24 maxlen: 32
212.73.136.0/24 maxlen: 32
212.73.138.0/23 maxlen: 32
212.73.138.0/24 maxlen: 32
212.73.140.0/24 maxlen: 32
212.73.141.0/24 maxlen: 32
212.73.142.0/24 maxlen: 32
212.73.143.0/24 maxlen: 32
212.73.144.0/24 maxlen: 32
212.73.145.0/24 maxlen: 32
212.73.146.0/24 maxlen: 32
212.73.147.0/24 maxlen: 32
212.73.148.0/24 maxlen: 32
212.73.155.0/24 maxlen: 32
212.73.157.0/24 maxlen: 32
212.87.207.0/24 maxlen: 32
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
2a00:1728:41::/48 maxlen: 48
2a00:1728:42::/48 maxlen: 48
2a00:1728:43::/48 maxlen: 48
2a00:1728:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:53:76:18:2f:87:c5:a8:ef:e6:44:73:24:ae:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 11:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa3aabb832e25323bd1e692a00bf99cb943592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:f4:75:65:10:ec:91:80:7b:4b:77:5c:e4:
51:af:e0:4b:01:4e:3c:ea:7a:7f:24:17:04:21:4c:
21:a5:2f:9f:98:a8:97:9e:be:6f:c1:20:70:9d:8b:
4b:24:a4:d3:62:1b:58:7b:ed:27:5d:6b:72:f3:26:
4c:79:b7:f8:d2:15:dd:78:27:78:eb:ed:b0:48:1b:
25:a9:4e:63:49:31:c9:fd:c0:48:40:e2:1b:0e:92:
65:eb:20:29:99:75:88:e3:0d:60:2d:49:e0:01:a5:
04:ab:db:72:3c:02:f8:15:e2:bb:48:c8:4c:6e:cf:
31:2b:1e:10:63:72:cc:6d:88:a4:93:bb:2e:74:bb:
5b:f9:89:a2:2b:a6:09:7a:9f:78:d5:42:5c:a6:0d:
04:58:f2:01:e2:76:44:eb:68:ac:c8:bb:8c:24:d3:
38:1c:cf:c0:65:65:2e:64:e0:10:e5:4e:1d:69:55:
30:4c:7b:27:5a:e1:7b:71:27:17:f8:fb:4e:7f:05:
d8:54:48:de:6b:51:55:88:10:92:29:97:46:99:f1:
4a:8c:1e:5d:8b:30:24:42:08:5c:27:35:69:6d:8f:
88:ad:ed:88:0c:bc:23:d7:cf:79:e4:0b:bb:d9:8b:
e1:a5:fc:9c:0c:0b:cb:5c:e3:48:06:0a:40:fb:23:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:AA:BB:83:2E:25:32:3B:D1:E6:92:A0:0B:F9:9C:B9:43:59:2F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_6Oqu4MuJTI70eaSoAv5nLlDWS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.195.0/24
31.13.197.0/24
31.13.216.0/21
31.13.230.0/24
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
45.139.123.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.98.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.32.0/24
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.82.0/23
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.185.0/24
94.156.188.0/24
94.156.216.0/21
94.156.249.0/24
94.156.251.0-94.156.252.255
185.254.36.0/24
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
ae:06:8d:19:4c:b8:a0:c1:a6:50:7a:78:55:df:1a:2e:66:2c:
96:4b:ca:cc:77:b1:3b:6f:72:5e:74:97:59:fe:9b:58:aa:4e:
10:35:c5:08:be:c8:af:2b:39:7c:ad:7c:22:46:94:62:d0:f5:
60:48:2a:d3:1a:0a:78:9a:5e:68:38:69:da:6f:9e:ca:20:3d:
20:3c:e0:67:7b:40:4f:3b:20:5f:51:e7:d2:4b:6b:da:3e:a5:
7e:92:cf:1e:a1:cf:04:a9:05:37:bc:99:20:aa:e4:22:36:67:
17:c9:5b:4e:09:b1:b8:bb:c8:e6:fa:a8:71:f0:a7:ec:c0:f3:
be:55:19:88:fd:dc:8c:1f:f4:11:2d:6b:16:57:3a:77:f8:02:
43:7c:50:81:c5:2e:ef:88:14:f7:7b:a2:75:b0:9c:19:ca:75:
62:9e:23:17:84:61:8b:0d:ec:42:6b:51:f7:d5:d8:11:2e:38:
79:68:48:ae:e2:be:f8:2e:17:0a:c6:6e:28:13:a2:03:84:ed:
b8:dc:58:2b:0d:4e:e3:57:57:82:78:ab:27:d3:a4:61:75:0c:
28:cc:08:ca:13:6d:56:bb:09:ce:bd:5f:99:58:a3:f3:3e:cf:
8f:bb:01:8f:5c:d7:30:9f:0c:c3:80:59:8c:d9:a7:74:2a:a7:
a8:f7:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:06:26 2025 by rpki-client