Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/_-2pl3YfyYv4YOJC1j11iYk1zBM.roa
File: _-2pl3YfyYv4YOJC1j11iYk1zBM.roa (raw, json)
Hash identifier: xD0l6qy0cCOD5gO7cQ9uWtSBRbsrlRlUqKqxixamYKI=
Subject key identifier: FF:ED:A9:97:76:1F:C9:8B:F8:60:E2:42:D6:3D:75:89:89:35:CC:13
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019813D573662EBCC78C3331A6E732723FF1
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/_-2pl3YfyYv4YOJC1j11iYk1zBM.roa
Signing time: Wed 16 Jul 2025 15:23:32 +0000
ROA not before: Wed 16 Jul 2025 15:23:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 24
37.230.172.0/22 maxlen: 24
37.230.188.0/22 maxlen: 24
45.133.96.0/22 maxlen: 24
46.21.244.0/22 maxlen: 24
51.250.0.0/17 maxlen: 24
62.84.112.0/20 maxlen: 24
84.201.128.0/18 maxlen: 24
84.252.128.0/20 maxlen: 24
89.169.128.0/18 maxlen: 24
89.232.188.0/22 maxlen: 24
92.255.1.0/24 maxlen: 24
92.255.3.0/24 maxlen: 24
93.77.160.0/19 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.240.0/20 maxlen: 24
130.193.32.0/19 maxlen: 24
158.160.0.0/16 maxlen: 24
178.154.192.0/18 maxlen: 24
185.206.164.0/22 maxlen: 24
185.216.194.0/23 maxlen: 24
193.32.216.0/22 maxlen: 24
194.247.51.0/24 maxlen: 24
213.165.192.0/19 maxlen: 24
217.28.224.0/20 maxlen: 24
217.198.168.0/21 maxlen: 24
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:d5:73:66:2e:bc:c7:8c:33:31:a6:e7:32:72:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jul 16 15:23:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffeda997761fc98bf860e242d63d75898935cc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:52:88:e4:6e:75:23:03:4d:6d:7f:80:c5:
3c:9e:75:f5:05:a2:f6:f9:ca:f8:17:df:f8:43:14:
a7:e5:04:02:3d:8d:42:c0:0a:0c:22:14:ee:47:ff:
7e:37:f7:0b:a8:b5:8e:f1:0f:66:aa:97:c0:d8:59:
0b:50:1c:99:1a:db:12:f2:1a:b8:3e:47:2a:5e:ce:
92:af:4f:83:1c:d7:d7:21:db:4c:3b:ae:96:43:38:
b1:84:79:00:5b:80:ed:99:3a:5d:0d:94:9e:77:c6:
80:f2:84:cc:13:3d:33:3c:64:37:1b:8b:64:b4:b1:
a8:a7:8f:ed:3f:c6:8b:9f:dc:4d:9e:d3:a5:f2:d4:
45:f5:7e:00:19:e1:87:fe:23:58:c9:99:19:02:3b:
e9:68:eb:ed:fd:22:e8:25:e0:84:b5:4d:f7:0a:f7:
46:b6:91:a2:18:10:bd:58:d8:fd:cf:45:22:5f:9c:
29:fc:9d:bd:30:42:0c:12:00:22:f8:fc:09:29:f2:
14:3a:58:5b:59:d0:14:84:e2:92:1c:44:17:3e:05:
70:4b:6a:4f:1b:ce:6f:f3:ce:1f:3a:bd:cc:f9:9c:
d7:ac:37:7c:d2:63:93:41:28:a6:38:45:8c:0e:d3:
0f:0e:24:eb:ab:7d:3a:0a:30:2c:4f:bf:39:81:d2:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:A9:97:76:1F:C9:8B:F8:60:E2:42:D6:3D:75:89:89:35:CC:13
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/_-2pl3YfyYv4YOJC1j11iYk1zBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
46.21.244.0/22
51.250.0.0/17
62.84.112.0/20
84.201.128.0/18
84.252.128.0/20
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
93.77.160.0/19
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.247.51.0/24
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:8a:ce:86:0b:53:89:d4:f8:ac:92:50:63:ff:49:1f:2a:43:
cc:1c:cd:dc:b1:d1:97:34:61:ed:2f:c1:8c:99:63:a9:80:c7:
de:cd:30:34:30:c9:d5:46:44:ab:3e:5c:39:99:8d:85:de:94:
a4:42:3e:f9:b8:45:35:18:e7:c1:85:07:41:ec:3b:54:6b:4e:
60:c3:3a:ee:c0:92:78:e5:b9:af:be:5f:8a:d2:88:e1:e7:ed:
16:4d:95:1a:4d:9e:16:60:5c:82:43:42:4e:25:8f:03:cc:17:
a2:b7:e2:3a:b8:b3:ec:0d:67:d6:8e:c6:48:cb:e7:25:63:95:
01:20:f4:ce:d4:40:ba:58:81:5d:fb:3f:2d:01:c0:ca:0d:77:
42:59:83:5a:a0:ac:4c:a7:f4:d0:98:71:ca:d5:08:e0:77:77:
29:ba:70:cb:2a:8d:3b:de:49:f4:1f:59:6c:90:d9:80:78:f9:
cf:82:9b:87:4a:92:aa:43:3f:c1:b4:22:71:71:75:5e:dd:4a:
54:eb:c8:0e:79:19:7c:c9:ad:a8:ce:49:25:1a:be:87:a9:9b:
96:e6:b7:2e:7f:b2:2d:17:30:83:1e:2f:80:a0:c3:4d:23:6a:
d3:2d:5e:a4:52:72:73:10:a1:4e:7b:3c:65:c6:30:db:1b:94:
cc:cb:65:c9
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZgT1XNmLrzHjDMxpucycj/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjUwNzE2MTUyMzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmVkYTk5Nzc2MWZjOThiZjg2MGUyNDJkNjNkNzU4OTg5MzVjYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ9SiORudSMDTW1/gMU8nnX1BaL2
+cr4F9/4QxSn5QQCPY1CwAoMIhTuR/9+N/cLqLWO8Q9mqpfA2FkLUByZGtsS8hq4
PkcqXs6Sr0+DHNfXIdtMO66WQzixhHkAW4DtmTpdDZSed8aA8oTMEz0zPGQ3G4tk
tLGop4/tP8aLn9xNntOl8tRF9X4AGeGH/iNYyZkZAjvpaOvt/SLoJeCEtU33CvdG
tpGiGBC9WNj9z0UiX5wp/J29MEIMEgAi+PwJKfIUOlhbWdAUhOKSHEQXPgVwS2pP
G85v884fOr3M+ZzXrDd80mOTQSimOEWMDtMPDiTrq306CjAsT785gdJzsQIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFP/tqZd2H8mL+GDiQtY9dYmJNcwTMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvXy0ycGwzWWZ5WXY0WU9KQzFqMTFpWWsxekJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBogQCAAEwgZsDBAMf
LAgDBAIl5qwDBAIl5rwDBAIthWADBAIuFfQDBAcz+gADBAQ+VHADBAZUyYADBARU
/IADBAZZqYADBAJZ6LwDBABc/wEDBABc/wMDBAVdTaADBARvWJADBARvWPADBAWC
wSADAwCeoAMEBrKawAMEArnOpAMEAbnYwgMEAsEg2AMEAML3MwMEBdWlwAMEBNkc
4AMEA9nGqDANBAIAAjAHAwUDKg3WwDANBgkqhkiG9w0BAQsFAAOCAQEASYrOhgtT
idT4rJJQY/9JHypDzBzN3LHRlzRh7S/BjJljqYDH3s0wNDDJ1UZEqz5cOZmNhd6U
pEI++bhFNRjnwYUHQew7VGtOYMM67sCSeOW5r75fitKI4eftFk2VGk2eFmBcgkNC
TiWPA8wXorfiOriz7A1n1o7GSMvnJWOVASD0ztRAuliBXfs/LQHAyg13QlmDWqCs
TKf00JhxytUI4Hd3KbpwyyqNO95J9B9ZbJDZgHj5z4Kbh0qSqkM/wbQicXF1Xt1K
VOvIDnkZfMmtqM5JJRq+h6mblua3Ln+yLRcwgx4vgKDDTSNq0y1epFJycxChTns8
ZcYw2xuUzMtlyQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 20:38:44 2025 by rpki-client