Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/Icbwhc8S4XsUNrA3DAVlOZ_S-dI.roa
File: Icbwhc8S4XsUNrA3DAVlOZ_S-dI.roa (raw, json)
Hash identifier: KivdxCjSWzKBuTPXWGtW7RGejxkaq7uv1LCmzlsIUeA=
Subject key identifier: 21:C6:F0:85:CF:12:E1:7B:14:36:B0:37:0C:05:65:39:9F:D2:F9:D2
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019808E34F95147E2D6AE4FEB937B99680B1
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/Icbwhc8S4XsUNrA3DAVlOZ_S-dI.roa
Signing time: Mon 14 Jul 2025 12:22:51 +0000
ROA not before: Mon 14 Jul 2025 12:22:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199242
IP address blocks: 31.222.234.0/24 maxlen: 24
37.72.142.0/24 maxlen: 24
62.3.11.0/24 maxlen: 24
62.106.90.0/24 maxlen: 24
62.233.61.0/24 maxlen: 24
80.71.144.0/24 maxlen: 24
80.71.145.0/24 maxlen: 24
91.241.55.0/24 maxlen: 24
91.246.50.0/24 maxlen: 24
146.19.4.0/24 maxlen: 24
146.19.199.0/24 maxlen: 24
146.19.203.0/24 maxlen: 24
176.97.217.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
185.234.12.0/24 maxlen: 24
188.244.119.0/24 maxlen: 24
193.162.132.0/24 maxlen: 24
193.162.133.0/24 maxlen: 24
194.26.230.0/24 maxlen: 24
194.26.231.0/24 maxlen: 24
194.99.158.0/24 maxlen: 24
195.96.130.0/24 maxlen: 24
195.96.131.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
212.52.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:e3:4f:95:14:7e:2d:6a:e4:fe:b9:37:b9:96:80:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 14 12:22:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c6f085cf12e17b1436b0370c0565399fd2f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:1d:dd:b7:63:3e:75:a2:6a:17:ee:04:bd:
2b:f6:9b:3f:69:37:89:f5:50:d2:a7:bd:44:64:77:
84:b4:c0:6b:5a:f6:45:fc:c7:98:97:fa:c2:8c:d0:
1e:10:59:e0:7d:32:72:21:dc:6b:e0:b3:3a:05:3b:
48:e6:be:f7:b3:0e:0e:2d:98:24:0b:06:ef:6c:c8:
e5:ad:27:a8:f0:34:42:a0:d5:19:3d:0e:0d:e9:1d:
64:38:c2:20:9f:8c:89:39:43:b9:04:5a:04:13:76:
43:b6:10:b9:56:b3:7b:0e:36:9f:2a:50:11:56:3d:
75:bb:dd:b5:55:d3:5b:4e:68:0c:62:27:40:39:8a:
97:6a:fe:aa:e9:2f:1c:7b:1a:ca:c1:af:c2:3a:9b:
21:54:d3:7c:a8:95:6b:14:ae:86:96:06:96:ba:5b:
d7:86:34:d7:46:89:18:5e:be:40:89:4f:04:96:d2:
29:27:1a:16:dd:83:41:67:68:0f:b2:c1:57:04:ec:
2c:b0:ab:a7:3d:7b:07:01:97:88:a2:63:47:66:37:
8e:b1:b7:f3:71:52:b3:11:ef:b5:74:8e:47:33:a4:
14:0d:1c:f4:0f:08:5e:de:c9:f1:b1:b9:23:eb:52:
7a:62:0e:cc:53:57:2c:63:e0:9b:3b:7a:e9:db:26:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C6:F0:85:CF:12:E1:7B:14:36:B0:37:0C:05:65:39:9F:D2:F9:D2
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/Icbwhc8S4XsUNrA3DAVlOZ_S-dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
37.72.142.0/24
62.3.11.0/24
62.106.90.0/24
62.233.61.0/24
80.71.144.0/23
91.241.55.0/24
91.246.50.0/24
146.19.4.0/24
146.19.199.0/24
146.19.203.0/24
176.97.217.0/24
176.126.101.0/24
185.234.12.0/24
188.244.119.0/24
193.162.132.0/23
194.26.230.0/23
194.99.158.0/24
195.96.130.0/23
212.52.14.0/24
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7c:7f:da:61:ef:1a:e0:dd:37:03:ff:0c:a2:71:93:91:bf:
40:36:76:45:2f:20:0a:50:d5:0f:cc:61:74:ab:7b:91:3a:c0:
8b:30:5d:9e:c4:61:64:23:fa:16:c6:72:96:bb:26:31:10:81:
3e:19:7e:6a:88:74:e1:0f:c6:d4:37:b8:e0:db:c8:5a:5e:27:
6a:28:58:3b:e7:ea:2f:b4:58:c3:8c:19:40:a6:48:2a:3c:f3:
99:a2:ee:69:4a:6d:f0:13:0b:c7:49:73:f9:d8:32:e4:eb:6f:
7b:6e:84:91:8d:52:4b:68:78:86:42:f3:74:35:66:4f:d5:14:
ee:98:ea:29:96:01:24:2c:71:2e:e6:30:55:c9:0a:73:57:4c:
b2:6e:72:46:49:3f:96:0f:78:e9:58:ac:b4:ce:08:22:8c:fc:
6c:96:5e:b4:93:8f:95:30:10:d1:0c:b3:12:41:6b:67:62:10:
22:b6:8a:ae:08:ff:4c:81:ad:ce:22:d5:52:fa:cb:f3:5f:85:
6e:c2:df:56:3b:8b:d1:19:ff:c6:fb:95:d3:0a:7c:1e:27:ce:
3e:16:0b:4e:a5:ad:8e:81:57:27:83:5a:ba:0b:33:52:bf:ce:
c8:ad:bc:6d:dc:06:f6:c6:18:b4:11:44:9f:d1:2f:80:1d:7d:
35:62:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:10:24 2025 by rpki-client