Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ewyw2lGDDe7FA2-5fD2FK7PvU00.roa
File: Ewyw2lGDDe7FA2-5fD2FK7PvU00.roa (raw, json)
Hash identifier: gOkusI2bR4WMPYwJ8xhAoIvBkL8O+9+WU5STwFJ83zQ=
Subject key identifier: 13:0C:B0:DA:51:83:0D:EE:C5:03:6F:B9:7C:3D:85:2B:B3:EF:53:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197D425E715573FFC11D4E2FB86F3BB3064
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ewyw2lGDDe7FA2-5fD2FK7PvU00.roa
Signing time: Fri 04 Jul 2025 06:35:43 +0000
ROA not before: Fri 04 Jul 2025 06:35:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 18:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:25:e7:15:57:3f:fc:11:d4:e2:fb:86:f3:bb:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 06:35:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=130cb0da51830deec5036fb97c3d852bb3ef534d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:9e:1c:f6:9f:e8:a1:3a:ee:4c:8a:10:2e:
ca:d6:c0:12:f1:66:1b:08:24:30:57:b6:3a:04:df:
8a:d2:8f:c8:e4:be:1c:27:9c:38:c2:7b:17:72:d5:
79:ec:8c:50:bb:79:4a:3e:13:18:79:c9:77:8a:53:
54:a5:0e:17:57:87:f7:c7:8a:dd:ff:b0:1e:12:02:
aa:04:76:9b:99:75:43:d8:f0:b7:ff:60:9d:94:75:
7a:e0:0d:12:c9:35:52:ed:01:21:25:b2:dc:cc:95:
d2:2e:d5:04:bc:21:6b:c8:58:3e:37:1e:03:7f:c4:
1e:9f:31:4e:48:ce:69:a2:f3:50:91:43:c6:2e:dd:
6f:2f:54:5f:96:3d:31:dd:50:5d:68:d5:c4:b8:e6:
3c:c6:18:3b:54:2c:18:3d:e1:10:a1:82:96:75:e0:
53:d0:2f:76:d5:68:f1:c9:46:ac:8a:ca:ac:3a:ee:
d1:1f:b8:8c:68:d1:8e:d9:29:06:fc:5e:9c:4f:89:
4a:b6:8d:e2:8e:bc:f8:63:f5:af:a5:a8:83:de:6b:
3c:64:4c:98:32:15:6f:46:0b:ea:38:f0:c1:1e:08:
4b:19:ea:cd:1f:d3:fe:45:17:c5:1e:74:30:a0:fe:
63:17:43:27:f6:e4:46:72:30:3e:65:b6:7a:cc:0c:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0C:B0:DA:51:83:0D:EE:C5:03:6F:B9:7C:3D:85:2B:B3:EF:53:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ewyw2lGDDe7FA2-5fD2FK7PvU00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
93.123.30.0/24
94.125.100.0/23
94.156.236.0/24
109.206.241.0/24
185.246.220.0/24
192.145.28.0/22
193.8.184.0/24
193.47.60.0/24
193.148.58.0/23
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b3:8e:3a:da:48:99:7d:c9:cb:23:64:6b:83:4f:7e:d5:ea:
f7:72:57:bf:cd:19:ad:88:4e:66:f1:e4:8c:a0:34:3c:91:cf:
cf:fa:e6:35:2c:48:c8:92:eb:72:54:b4:6f:7c:6c:60:4b:bc:
cd:2c:1b:d5:d6:cc:df:e9:2a:50:f0:c5:e0:15:95:0e:5e:14:
80:a1:2e:65:41:d3:21:8e:c6:19:56:70:70:2d:71:0a:1c:d7:
82:54:c5:ed:8a:4b:d7:38:a5:c2:d2:4b:91:72:2e:ec:5e:a1:
f4:93:7b:fd:74:e2:fb:f8:58:f6:1e:aa:8a:4b:46:51:fb:b1:
ae:d3:54:d4:ab:c6:36:4a:3c:e1:02:b0:3c:32:26:c6:77:43:
9c:e0:4a:d3:ec:97:e0:b0:a3:d3:07:76:94:ab:4d:80:e4:1a:
0a:a6:ea:0e:fb:3b:60:c8:a3:85:5e:18:c5:d4:9b:c5:3e:48:
78:aa:f8:dc:62:e8:85:b8:49:b8:b2:a9:a5:8f:2a:b4:e8:56:
74:74:b0:3d:e8:4a:d4:a0:dc:85:ec:7f:8c:51:bf:6a:e0:c4:
ae:08:de:82:79:1e:6c:d3:f1:2c:c8:24:28:de:5c:08:53:00:
e4:87:ef:d9:09:d6:3f:2c:3a:31:ff:5a:d5:cc:60:3b:0e:38:
36:e2:7f:ff
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZfUJecVVz/8EdTi+4bzuzBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNzA0MDYzNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzBjYjBkYTUxODMwZGVlYzUwMzZmYjk3YzNkODUyYmIzZWY1MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKaeHPaf6KE67kyKEC7K1sAS8WYb
CCQwV7Y6BN+K0o/I5L4cJ5w4wnsXctV57IxQu3lKPhMYecl3ilNUpQ4XV4f3x4rd
/7AeEgKqBHabmXVD2PC3/2CdlHV64A0SyTVS7QEhJbLczJXSLtUEvCFryFg+Nx4D
f8QenzFOSM5povNQkUPGLt1vL1Rflj0x3VBdaNXEuOY8xhg7VCwYPeEQoYKWdeBT
0C921WjxyUasisqsOu7RH7iMaNGO2SkG/F6cT4lKto3ijrz4Y/WvpaiD3ms8ZEyY
MhVvRgvqOPDBHghLGerNH9P+RRfFHnQwoP5jF0Mn9uRGcjA+ZbZ6zAxHZwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFBMMsNpRgw3uxQNvuXw9hSuz71NNMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRXd5dzJsR0REZTdGQTItNWZEMkZLN1B2VTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQCH6l8
AwQALQz+AwQALQ6lAwQALVHzAwQALVhDAwQAVBWsAwQAVR8tAwQAVdGEAwQAVdGG
AwQAXXseAwQBXn1kAwQAXpzsAwQAbc7xAwQAufbcAwQCwJEcAwQAwQi4AwQAwS88
AwQBwZQ6AwQA1FfcAwQA1FffMA0GCSqGSIb3DQEBCwUAA4IBAQC0s4462kiZfcnL
I2Rrg09+1er3cle/zRmtiE5m8eSMoDQ8kc/P+uY1LEjIkutyVLRvfGxgS7zNLBvV
1szf6SpQ8MXgFZUOXhSAoS5lQdMhjsYZVnBwLXEKHNeCVMXtikvXOKXC0kuRci7s
XqH0k3v9dOL7+Fj2HqqKS0ZR+7Gu01TUq8Y2SjzhArA8MibGd0Oc4ErT7JfgsKPT
B3aUq02A5BoKpuoO+ztgyKOFXhjF1JvFPkh4qvjcYuiFuEm4sqmljyq06FZ0dLA9
6ErUoNyF7H+MUb9q4MSuCN6CeR5s0/EsyCQo3lwIUwDkh+/ZCdY/LDox/1rVzGA7
Djg24n//
-----END CERTIFICATE-----
Generated at Sun Jul 6 02:05:36 2025 by rpki-client