Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e3U5Wt1gC3SRIkbRqDZvNQhQBvQ.roa
File: e3U5Wt1gC3SRIkbRqDZvNQhQBvQ.roa (raw, json)
Hash identifier: EA5O6tXJh0t/yngLUMz0Dox9TJbJGAMHmdIHBIL48xk=
Subject key identifier: 7B:75:39:5A:DD:60:0B:74:91:22:46:D1:A8:36:6F:35:08:50:06:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A164C30FB315FE39C671889FF8F6EC67F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e3U5Wt1gC3SRIkbRqDZvNQhQBvQ.roa
Signing time: Fri 24 Oct 2025 12:58:03 +0000
ROA not before: Fri 24 Oct 2025 12:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
45.95.2.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4c:30:fb:31:5f:e3:9c:67:18:89:ff:8f:6e:c6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 24 12:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b75395add600b74912246d1a8366f35085006f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bc:da:55:50:d1:3f:e1:a4:4a:5d:80:2d:e4:
2c:bb:e6:54:3b:59:12:84:86:c3:dd:4d:58:48:76:
c3:cf:43:0a:ca:4e:a1:47:27:a2:6a:a3:1d:ca:6d:
de:ee:cd:4d:cb:09:ad:76:9e:01:7e:08:fe:ec:a2:
45:39:31:b2:37:dd:40:8e:f3:1f:98:65:82:c6:12:
5b:38:7b:eb:c6:54:a1:d9:1a:64:94:46:bc:37:03:
fe:94:5f:e8:71:25:fb:3a:0a:a4:54:20:25:c2:4f:
7b:88:18:8a:c9:b0:98:23:9f:43:e3:83:11:d0:0e:
ef:52:4a:8e:1e:7e:af:9a:65:7c:1c:dc:e6:6c:a7:
77:60:0a:c8:e5:e6:2b:ad:fe:58:02:b6:ce:10:70:
26:53:fb:05:29:1d:74:e3:55:c1:88:3e:62:4f:b3:
c6:9d:fe:b3:ad:f3:12:3d:05:fc:3d:ab:7c:8e:c6:
3d:f6:e4:d1:6f:68:e9:3b:e8:6f:fb:14:f9:93:7a:
c9:33:5f:15:38:e1:d5:7a:f3:1f:d5:e9:f8:ae:ba:
9a:65:74:c8:0b:b6:d1:84:d1:1d:06:e3:58:ed:26:
05:d1:ba:d1:b8:a5:f0:93:73:6c:69:da:ad:d4:96:
e5:00:d6:cb:4f:ab:be:07:45:40:a9:5d:02:80:0a:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:39:5A:DD:60:0B:74:91:22:46:D1:A8:36:6F:35:08:50:06:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e3U5Wt1gC3SRIkbRqDZvNQhQBvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
45.95.2.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
87.121.217.0/24
93.123.30.0/24
94.125.100.0/23
94.156.236.0/24
109.206.241.0/24
171.22.30.0/24
185.246.220.0/24
192.145.28.0/22
193.8.184.0/24
193.47.60.0/24
193.148.58.0/23
193.168.196.0/22
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:6d:23:da:0b:ed:0e:d6:fc:db:ab:0a:8a:c6:68:7a:53:
04:b3:94:72:01:d9:a9:8d:dc:43:29:65:2b:22:4d:ef:56:af:
3c:7c:24:98:29:e6:2e:3a:40:68:a2:51:cd:fd:36:97:09:7d:
f8:65:62:ac:53:f2:f8:6f:9e:35:48:0f:64:e6:18:86:7f:b0:
26:d8:b9:57:78:43:e0:e3:a8:56:44:69:21:37:01:38:a9:23:
ed:4a:e6:f9:35:de:3f:87:c6:18:b2:a6:8e:ae:02:fe:7e:e3:
c8:c7:70:3f:d6:1a:71:f6:0e:ef:a1:67:fc:14:c1:79:4f:c3:
61:3e:f6:b5:44:ef:61:ad:78:13:a5:85:b0:f3:1c:01:c3:d3:
f5:a8:59:fb:6a:8e:05:46:95:71:82:b5:77:1d:2e:db:51:82:
73:e6:27:87:8b:e7:d2:b8:96:3e:b3:9c:a1:51:ac:61:af:54:
21:72:05:c7:8a:e9:76:0d:0e:7d:cc:0a:65:46:07:74:a3:62:
5b:04:a9:40:be:ae:11:0e:54:86:09:64:64:50:62:a7:e5:b0:
f5:3f:c2:ca:29:dd:1a:c2:d6:35:4d:df:8c:0b:eb:7e:f1:4b:
92:ff:b4:05:6d:cb:16:3c:74:32:6d:45:1c:11:6f:f1:27:13:
2a:42:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:23:07 2025 by rpki-client