Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa
File: oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa (raw, json)
Hash identifier: uxtVzPlkNCLudyDBzCoWRWmDXs6tfGV7X2Z5QJKK/Eg=
Subject key identifier: A1:CF:09:74:95:DE:99:F1:F5:BC:10:70:6B:D8:23:B8:2E:D9:CC:FF
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 01983AD0497A1E0713773349AE77567B7FCA
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa
Signing time: Thu 24 Jul 2025 05:03:05 +0000
ROA not before: Thu 24 Jul 2025 05:03:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207728
IP address blocks: 31.10.5.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
31.210.172.0/24 maxlen: 24
31.210.173.0/24 maxlen: 24
46.28.234.0/24 maxlen: 24
62.204.42.0/24 maxlen: 24
87.236.177.0/24 maxlen: 24
93.88.74.0/24 maxlen: 24
93.88.75.0/24 maxlen: 24
103.65.230.0/24 maxlen: 24
103.65.231.0/24 maxlen: 24
104.192.42.0/24 maxlen: 24
185.162.8.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
185.204.52.0/24 maxlen: 24
185.204.54.0/24 maxlen: 24
194.146.127.0/24 maxlen: 24
2a12:9cc0::/48 maxlen: 48
2a12:9cc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:d0:49:7a:1e:07:13:77:33:49:ae:77:56:7b:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jul 24 05:03:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1cf097495de99f1f5bc10706bd823b82ed9ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:0d:27:1e:1c:12:35:66:3f:6e:41:bc:06:
83:69:e9:99:4c:78:ba:d9:3d:09:2b:66:52:51:0a:
a4:0a:ad:7c:c0:df:09:c8:45:e8:5f:db:49:18:3c:
fe:31:40:d2:69:45:1e:0c:97:dd:c7:30:e6:00:55:
5a:b4:97:a3:02:90:2e:ea:21:82:dc:41:33:f4:d8:
e8:95:21:49:a1:8e:fe:98:3f:c6:76:a2:28:e7:b5:
d1:70:90:63:cd:21:fb:18:b2:b8:ae:2b:7e:78:d2:
f4:55:81:a6:4d:b5:4d:d2:98:6e:28:f2:a3:5c:8e:
23:e9:31:81:af:ae:61:ad:bf:d5:6f:ac:80:3b:7a:
98:44:d9:f5:ae:6a:a2:93:2f:d7:14:f0:62:67:51:
27:76:ae:cb:62:29:73:ca:30:87:fb:71:21:42:47:
e9:c7:56:26:7e:af:ca:29:50:30:0f:24:89:c5:b7:
a1:6a:24:a7:52:c3:82:d5:f7:67:60:12:4e:f5:a6:
55:42:d1:de:e9:60:a1:e3:1d:8f:43:cc:22:59:81:
13:85:61:ef:ad:71:84:15:e1:69:59:54:3e:66:d8:
a1:22:d3:a0:6f:24:02:df:ed:fb:82:68:d3:3a:58:
ae:73:87:83:28:72:c5:02:a5:2e:70:0f:5c:53:d3:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:09:74:95:DE:99:F1:F5:BC:10:70:6B:D8:23:B8:2E:D9:CC:FF
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0-31.210.173.255
46.28.234.0/24
62.204.42.0/24
87.236.177.0/24
93.88.74.0/23
103.65.230.0/23
104.192.42.0/24
185.162.8.0/23
185.162.11.0/24
185.204.52.0/24
185.204.54.0/24
194.146.127.0/24
IPv6:
2a12:9cc0::/47
Signature Algorithm: sha256WithRSAEncryption
d3:5b:97:7e:b0:78:a3:64:52:34:a7:59:66:b9:7a:21:05:bd:
7b:6d:d4:e1:78:45:33:88:a4:b5:93:10:94:40:75:08:d0:55:
fe:38:84:6b:fd:27:c6:aa:36:71:6c:72:67:7d:42:8c:6b:93:
77:ec:5d:ad:60:c0:43:90:e8:d9:d3:a0:47:85:12:0c:96:9e:
b2:39:2e:ea:bd:d7:e3:94:c9:3b:1c:03:82:b3:23:fd:64:6b:
b3:43:b2:ba:63:ab:f7:6a:8a:75:09:cc:34:08:25:8f:b4:f7:
20:88:13:52:ec:f8:15:28:92:5f:b8:0f:02:22:79:80:57:04:
99:55:3e:16:8e:a7:0c:7f:b0:b9:17:93:66:ec:d4:39:be:48:
5b:3a:17:5a:9e:a1:c4:38:ce:a0:1d:e8:04:30:61:5a:41:e7:
b8:07:8c:bd:24:64:b6:f9:62:be:a8:52:f9:d5:44:3b:d0:c2:
34:a5:5a:13:0e:12:6d:65:a1:17:29:7b:34:0c:9c:ed:48:5d:
a5:bf:c1:c0:3c:bb:5a:48:aa:99:7f:1f:9c:71:66:cc:b2:c9:
a6:b5:47:e3:8e:68:ca:f3:f4:57:c2:62:c1:23:0d:6e:27:07:
42:20:24:b2:59:d4:b4:b9:23:e1:58:c1:ab:1d:78:5b:42:82:
51:19:84:33
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAZg60El6HgcTdzNJrndWe3/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjUwNzI0MDUwMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWNmMDk3NDk1ZGU5OWYxZjViYzEwNzA2YmQ4MjNiODJlZDljY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU4NJx4cEjVmP25BvAaDaemZTHi6
2T0JK2ZSUQqkCq18wN8JyEXoX9tJGDz+MUDSaUUeDJfdxzDmAFVatJejApAu6iGC
3EEz9NjolSFJoY7+mD/GdqIo57XRcJBjzSH7GLK4rit+eNL0VYGmTbVN0phuKPKj
XI4j6TGBr65hrb/Vb6yAO3qYRNn1rmqiky/XFPBiZ1Endq7LYilzyjCH+3EhQkfp
x1Ymfq/KKVAwDySJxbehaiSnUsOC1fdnYBJO9aZVQtHe6WCh4x2PQ8wiWYEThWHv
rXGEFeFpWVQ+ZtihItOgbyQC3+37gmjTOliuc4eDKHLFAqUucA9cU9P0GwIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFKHPCXSV3pnx9bwQcGvYI7gu2cz/MB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvb2M4SmRKWGVtZkgxdkJCd2E5Z2p1QzdaelA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXAQCAAEwVgMEAB8KBTAM
AwQBH9KqAwQBH9KsAwQALhzqAwQAPswqAwQAV+yxAwQBXVhKAwQBZ0HmAwQAaMAq
AwQBuaIIAwQAuaILAwQAucw0AwQAucw2AwQAwpJ/MA8EAgACMAkDBwEqEpzAAAAw
DQYJKoZIhvcNAQELBQADggEBANNbl36weKNkUjSnWWa5eiEFvXtt1OF4RTOIpLWT
EJRAdQjQVf44hGv9J8aqNnFscmd9Qoxrk3fsXa1gwEOQ6NnToEeFEgyWnrI5Luq9
1+OUyTscA4KzI/1ka7NDsrpjq/dqinUJzDQIJY+09yCIE1Ls+BUokl+4DwIieYBX
BJlVPhaOpwx/sLkXk2bs1Dm+SFs6F1qeocQ4zqAd6AQwYVpB57gHjL0kZLb5Yr6o
UvnVRDvQwjSlWhMOEm1loRcpezQMnO1IXaW/wcA8u1pIqpl/H5xxZsyyyaa1R+OO
aMrz9FfCYsEjDW4nB0IgJLJZ1LS5I+FYwasdeFtCglEZhDM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:28:48 2025 by rpki-client