Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CggymisgfDItwQI0iJoMwcmicbY.roa
File: CggymisgfDItwQI0iJoMwcmicbY.roa (raw, json)
Hash identifier: HyAPLPLmze0K5p+K7E3taJCdmMNbsPFnvIvVirG1a/c=
Subject key identifier: 0A:08:32:9A:2B:20:7C:32:2D:C1:02:34:88:9A:0C:C1:C9:A2:71:B6
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 019807BCD424076BF8D45EB874EAD8CD8270
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CggymisgfDItwQI0iJoMwcmicbY.roa
Signing time: Mon 14 Jul 2025 07:01:12 +0000
ROA not before: Mon 14 Jul 2025 07:01:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6866
IP address blocks: 31.153.0.0/16 maxlen: 24
31.153.0.0/17 maxlen: 17
31.153.0.0/19 maxlen: 19
31.153.0.0/20 maxlen: 20
31.153.16.0/20 maxlen: 20
31.153.32.0/19 maxlen: 19
31.153.64.0/19 maxlen: 19
31.153.96.0/19 maxlen: 19
31.153.128.0/19 maxlen: 19
31.153.160.0/19 maxlen: 19
31.153.192.0/19 maxlen: 19
31.153.224.0/19 maxlen: 19
37.149.0.0/16 maxlen: 24
46.198.0.0/17 maxlen: 24
46.198.0.0/18 maxlen: 18
46.198.0.0/19 maxlen: 19
46.198.32.0/19 maxlen: 19
46.198.64.0/18 maxlen: 18
46.198.64.0/19 maxlen: 19
46.198.96.0/19 maxlen: 19
46.199.0.0/16 maxlen: 24
46.199.0.0/18 maxlen: 18
46.199.0.0/19 maxlen: 19
46.199.16.0/20 maxlen: 20
46.199.32.0/19 maxlen: 19
46.199.32.0/20 maxlen: 20
46.199.48.0/20 maxlen: 20
46.199.64.0/20 maxlen: 20
46.199.88.0/24 maxlen: 24
46.199.192.0/19 maxlen: 19
46.199.224.0/19 maxlen: 19
62.228.0.0/16 maxlen: 24
62.228.0.0/19 maxlen: 19
62.228.0.0/21 maxlen: 21
62.228.8.0/21 maxlen: 21
62.228.16.0/22 maxlen: 22
62.228.20.0/22 maxlen: 22
62.228.24.0/21 maxlen: 21
62.228.32.0/19 maxlen: 19
62.228.64.0/19 maxlen: 19
62.228.96.0/19 maxlen: 19
62.228.128.0/19 maxlen: 19
62.228.160.0/19 maxlen: 19
62.228.192.0/19 maxlen: 19
62.228.224.0/19 maxlen: 19
62.228.226.0/23 maxlen: 23
62.228.228.0/24 maxlen: 24
62.228.229.0/24 maxlen: 24
62.228.240.0/23 maxlen: 23
81.4.128.0/18 maxlen: 24
81.4.128.0/19 maxlen: 19
81.4.133.0/24 maxlen: 24
81.4.160.0/19 maxlen: 19
81.4.160.0/20 maxlen: 20
81.4.160.0/21 maxlen: 21
81.4.168.0/21 maxlen: 21
81.4.174.0/24 maxlen: 24
81.4.176.0/21 maxlen: 21
83.168.0.0/18 maxlen: 24
83.168.0.0/19 maxlen: 19
83.168.32.0/19 maxlen: 19
87.228.128.0/17 maxlen: 24
87.228.128.0/18 maxlen: 18
87.228.144.0/20 maxlen: 20
87.228.160.0/20 maxlen: 20
87.228.176.0/20 maxlen: 20
87.228.192.0/20 maxlen: 20
87.228.208.0/20 maxlen: 20
87.228.224.0/19 maxlen: 19
87.228.224.0/20 maxlen: 20
87.228.240.0/20 maxlen: 20
93.109.0.0/16 maxlen: 24
93.109.0.0/19 maxlen: 19
93.109.32.0/19 maxlen: 19
93.109.64.0/19 maxlen: 19
93.109.96.0/19 maxlen: 19
93.109.128.0/19 maxlen: 19
93.109.160.0/19 maxlen: 19
93.109.192.0/19 maxlen: 19
93.109.209.0/24 maxlen: 24
93.109.219.0/24 maxlen: 24
93.109.224.0/19 maxlen: 19
93.109.227.0/24 maxlen: 24
93.109.239.0/24 maxlen: 24
128.0.107.0/24 maxlen: 24
128.0.200.0/21 maxlen: 24
128.0.208.0/20 maxlen: 24
128.0.224.0/20 maxlen: 24
128.0.240.0/20 maxlen: 24
176.92.200.0/21 maxlen: 21
176.92.208.0/20 maxlen: 20
176.92.224.0/19 maxlen: 24
176.92.240.0/20 maxlen: 20
185.2.96.0/22 maxlen: 24
185.2.96.0/24 maxlen: 24
185.2.97.0/24 maxlen: 24
185.2.98.0/24 maxlen: 24
185.2.99.0/24 maxlen: 24
195.14.128.0/19 maxlen: 24
195.14.128.0/20 maxlen: 20
195.14.142.0/24 maxlen: 24
195.14.144.0/20 maxlen: 20
195.14.146.0/24 maxlen: 24
195.14.151.0/24 maxlen: 24
195.14.153.0/24 maxlen: 24
212.31.96.0/19 maxlen: 24
212.31.96.0/20 maxlen: 20
212.31.96.0/24 maxlen: 24
212.31.112.0/20 maxlen: 20
212.31.121.0/24 maxlen: 24
212.31.122.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
213.7.0.0/16 maxlen: 24
213.7.0.0/17 maxlen: 17
213.7.0.0/20 maxlen: 20
213.7.16.0/20 maxlen: 20
213.7.32.0/20 maxlen: 20
213.7.48.0/20 maxlen: 20
213.7.64.0/20 maxlen: 20
213.7.80.0/20 maxlen: 20
213.7.96.0/20 maxlen: 20
213.7.112.0/20 maxlen: 20
213.7.128.0/18 maxlen: 18
213.7.128.0/20 maxlen: 20
213.7.144.0/20 maxlen: 20
213.7.160.0/20 maxlen: 20
213.7.176.0/20 maxlen: 20
213.7.192.0/20 maxlen: 20
213.7.208.0/20 maxlen: 20
213.7.208.0/24 maxlen: 24
213.7.220.0/22 maxlen: 22
213.7.224.0/20 maxlen: 20
213.7.240.0/20 maxlen: 20
213.7.240.0/24 maxlen: 24
213.149.160.0/19 maxlen: 24
213.149.160.0/20 maxlen: 20
213.149.176.0/20 maxlen: 20
2a00:1358::/29 maxlen: 48
2a00:1358::/30 maxlen: 48
2a00:1358::/31 maxlen: 48
2a00:1358::/32 maxlen: 48
2a00:1358:1000::/48 maxlen: 48
2a00:1358:b000::/44 maxlen: 44
2a00:1358:d000::/40 maxlen: 40
2a00:1358:df00::/48 maxlen: 48
2a00:1358:f000::/40 maxlen: 40
2a00:1358:f000::/41 maxlen: 41
2a00:1358:f080::/41 maxlen: 41
2a00:1359::/32 maxlen: 48
2a00:135a::/31 maxlen: 48
2a00:135a::/32 maxlen: 48
2a00:135b::/32 maxlen: 48
2a00:135c::/30 maxlen: 48
2a00:135c::/31 maxlen: 48
2a00:135c::/32 maxlen: 48
2a00:135d::/32 maxlen: 48
2a00:135e::/31 maxlen: 48
2a00:135e::/32 maxlen: 48
2a00:135f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:bc:d4:24:07:6b:f8:d4:5e:b8:74:ea:d8:cd:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jul 14 07:01:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a08329a2b207c322dc10234889a0cc1c9a271b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:87:a6:82:26:82:a8:4d:bc:71:cc:ab:85:
96:a7:44:b5:4c:1d:bd:56:d5:dc:c0:cf:bc:b3:9b:
2a:da:ac:b0:9c:d9:49:e0:77:ad:b2:1e:ff:43:2e:
b1:61:e4:26:51:63:bf:b8:68:4e:12:07:78:0a:b8:
3d:21:6f:57:30:6a:00:ec:0f:8a:c1:5f:c8:8b:71:
19:1a:5d:24:7e:84:23:33:df:80:2a:c0:46:46:6a:
46:8f:a2:f1:0e:13:0d:ce:b1:09:49:5f:fe:37:2b:
73:bb:a2:fc:5f:83:c1:96:3e:96:64:16:d3:60:93:
ec:64:3b:43:a8:3f:93:ad:c4:ee:9f:a0:f8:b4:7a:
3c:98:32:e5:5e:6f:67:bf:3f:e0:79:57:ff:a4:5b:
60:2e:a4:e7:e0:20:31:38:99:c0:2b:89:ad:13:e4:
97:eb:55:3a:8f:88:1f:6e:41:de:6b:3f:d7:1d:2d:
7d:23:25:37:dd:86:92:b6:4b:a7:5e:a1:dc:e8:9a:
c3:ad:11:5c:b7:52:56:f9:e1:3e:1e:fc:0d:af:de:
d6:45:69:68:31:2d:19:ad:c7:7a:7c:17:73:4c:e7:
ec:78:5b:ee:ef:72:f1:58:3a:c0:bd:99:e3:c0:6a:
b8:22:f1:48:5a:92:58:d4:ff:73:87:c6:45:aa:2c:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:32:9A:2B:20:7C:32:2D:C1:02:34:88:9A:0C:C1:C9:A2:71:B6
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CggymisgfDItwQI0iJoMwcmicbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.0.0/16
37.149.0.0/16
46.198.0.0/17
46.199.0.0/16
62.228.0.0/16
81.4.128.0/18
83.168.0.0/18
87.228.128.0/17
93.109.0.0/16
128.0.107.0/24
128.0.200.0-128.0.255.255
176.92.200.0-176.92.255.255
185.2.96.0/22
195.14.128.0/19
212.31.96.0/19
213.7.0.0/16
213.149.160.0/19
IPv6:
2a00:1358::/29
Signature Algorithm: sha256WithRSAEncryption
84:31:c1:33:11:3c:c7:12:ed:0c:73:a4:6e:1b:92:a9:3d:0d:
9c:e4:67:b2:78:19:d3:d1:fe:ee:5b:00:77:7a:e5:3b:9a:e3:
78:8c:bb:90:d8:37:2e:0e:dc:ed:e4:50:75:79:e1:2b:5c:e7:
ff:5e:fc:52:96:1a:3b:be:ca:d0:8d:b0:0a:50:55:2f:9f:1c:
f8:41:62:0b:1f:44:e7:d3:65:14:64:ac:6a:dc:44:54:9c:75:
d4:8d:78:03:6b:43:16:f6:db:ce:82:6f:85:1d:32:82:c8:98:
9b:8d:fd:67:72:89:6c:20:40:e2:0d:d8:aa:d6:12:2e:0a:16:
75:a5:5f:9e:bc:b7:63:17:c3:0d:a0:1d:d9:e4:24:93:b7:b6:
1a:a1:76:1c:93:87:67:a7:2c:06:2c:8b:ce:b7:24:23:58:3d:
c6:b4:f0:eb:b1:35:0e:42:bb:5d:a7:b6:ad:b9:36:06:f0:50:
c1:69:ea:46:ac:1f:b0:1c:c6:96:16:6c:8d:cb:7c:77:0b:eb:
d1:a7:6c:a5:01:13:35:a1:1d:3a:78:e1:31:29:e9:46:f0:ab:
66:e9:37:b0:e5:23:33:3a:ce:18:d8:4b:f5:c5:02:86:d2:35:
a5:63:cd:04:5f:4d:7a:1b:0a:4e:42:74:04:53:72:66:e6:69:
b1:b5:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:17:29 2025 by rpki-client