Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b2leNBD1ZDAF5M8AK_e9gqEDq2Q.roa
File: b2leNBD1ZDAF5M8AK_e9gqEDq2Q.roa (raw, json)
Hash identifier: xjpJUtR71d2O9/IJO+5BWKoogGu/xXwObMxETMUoKBk=
Subject key identifier: 6F:69:5E:34:10:F5:64:30:05:E4:CF:00:2B:F7:BD:82:A1:03:AB:64
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019893EE9DDE2F4218AC3F9ECA60094660E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b2leNBD1ZDAF5M8AK_e9gqEDq2Q.roa
Signing time: Sun 10 Aug 2025 12:22:25 +0000
ROA not before: Sun 10 Aug 2025 12:22:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:ee:9d:de:2f:42:18:ac:3f:9e:ca:60:09:46:60:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 10 12:22:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f695e3410f5643005e4cf002bf7bd82a103ab64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:dd:2d:28:f5:5f:21:9c:62:4b:f0:e3:87:
c3:88:a4:e2:f3:28:76:f7:9c:74:26:a1:16:88:f2:
d4:b5:a1:b5:f8:3c:c1:23:f4:bf:f2:fd:5e:10:6a:
83:6d:27:33:56:07:cc:ce:1f:0c:1d:e8:19:3d:0f:
71:5c:69:ee:b3:8e:23:40:66:fb:1b:10:06:f6:93:
d4:4e:aa:7d:6e:c0:e1:b2:57:f0:a9:4b:c2:e4:0d:
ae:a6:c1:ca:9d:d7:75:00:05:b1:88:f0:4f:e0:0e:
df:58:05:ef:f2:40:40:3e:4c:9c:36:2f:00:e4:c0:
42:2f:27:55:a5:f3:8d:6d:b6:7f:3a:88:46:8a:0f:
d9:6a:3e:15:8c:e3:f5:b2:ab:d9:66:f0:e5:4b:28:
03:d0:90:e9:f1:58:5b:90:58:51:0b:c0:4b:ca:38:
17:7a:f2:cb:f6:d7:aa:22:d5:e2:70:db:dc:d7:4e:
a0:6e:2f:d9:5d:d2:45:89:04:c6:0f:75:00:8c:8e:
a7:ad:e4:6a:e3:8a:3a:56:44:f7:83:d8:43:8e:06:
67:0d:41:1e:71:ec:1f:03:9a:ec:d6:41:d4:cc:79:
8c:1e:cd:81:dd:8a:8b:f9:a6:b9:55:43:f5:90:0f:
16:52:93:53:81:f6:84:4d:16:49:5e:de:16:ba:b8:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:5E:34:10:F5:64:30:05:E4:CF:00:2B:F7:BD:82:A1:03:AB:64
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b2leNBD1ZDAF5M8AK_e9gqEDq2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
93.123.30.0/24
94.125.100.0/23
94.156.236.0/24
109.206.241.0/24
171.22.30.0/24
185.246.220.0/24
192.145.28.0/22
193.8.184.0/24
193.47.60.0/24
193.148.58.0/23
193.168.196.0/22
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1c:79:1a:ce:ca:9c:b2:4c:27:6f:3a:e0:b5:7d:a8:a2:6a:
2f:9a:be:5d:71:70:a5:1d:c6:35:a2:d6:c6:3c:2e:c3:d8:1b:
4d:e0:16:c9:8f:49:36:4f:bc:f8:15:f5:29:18:a5:f1:fc:e4:
bf:e3:a4:59:be:26:c7:b7:c6:39:a4:ba:c5:b9:e8:5b:75:01:
86:d4:b1:6b:57:45:99:fa:cd:ca:34:5a:41:1a:c6:18:03:36:
23:6f:c2:a7:b4:55:6b:2c:fa:ed:f6:fe:00:85:32:44:dc:7c:
d6:d2:c3:f8:05:d3:0c:58:89:b7:1e:00:8c:25:5e:2c:d3:d6:
95:b6:ab:7a:cc:51:10:5e:4e:fc:7b:9c:31:38:fe:7d:b2:bf:
a9:0f:0f:a4:96:06:9d:38:5b:d9:0c:db:ec:16:1a:e9:54:78:
a8:cf:dd:bf:1a:eb:33:d4:48:e7:7e:dd:22:75:fc:f7:99:cc:
8d:64:cf:a7:ec:e3:21:86:55:9f:4a:b6:06:a9:a5:32:6c:7d:
b3:f5:dc:4d:f9:e7:1b:a3:43:47:d5:2e:0d:b7:20:74:95:4c:
d7:81:df:d4:81:5f:6a:fe:08:53:bd:c8:d9:55:fc:50:9b:0b:
df:47:ac:6e:f2:32:b4:a3:62:31:40:db:aa:26:a8:7c:3e:d2:
67:f6:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:01:59 2025 by rpki-client