Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/QIeHQolwi-ZHoT37sWf6aH03ldI.roa
File: QIeHQolwi-ZHoT37sWf6aH03ldI.roa (raw, json)
Hash identifier: AlkTkJeW2VJO+UFmkCUHScw4aZ4Ip+r5zZOUYl0xkpQ=
Subject key identifier: 40:87:87:42:89:70:8B:E6:47:A1:3D:FB:B1:67:FA:68:7D:37:95:D2
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0197F99B85FDD5891E94D14D1BB34DE86BB0
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/QIeHQolwi-ZHoT37sWf6aH03ldI.roa
Signing time: Fri 11 Jul 2025 13:10:08 +0000
ROA not before: Fri 11 Jul 2025 13:10:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/23 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
148.230.72.0/21 maxlen: 24
148.230.80.0/20 maxlen: 24
148.230.96.0/22 maxlen: 24
148.230.104.0/21 maxlen: 24
148.230.112.0/21 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:9b:85:fd:d5:89:1e:94:d1:4d:1b:b3:4d:e8:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jul 11 13:10:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4087874289708be647a13dfbb167fa687d3795d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:31:1e:72:12:87:76:9d:30:06:1d:11:9b:
7e:b1:8d:a6:12:3b:c1:61:f0:de:7c:5a:e4:d4:ca:
d5:cb:45:a4:23:67:e9:f7:d3:f5:cb:8d:a7:2d:09:
39:9d:33:2c:be:21:d4:a2:62:e1:ec:ab:39:b5:52:
25:6b:8f:f6:2b:fd:75:74:20:bc:e7:4a:b5:f4:ce:
8e:9e:75:12:5b:29:2c:69:6d:d3:5c:e8:df:50:44:
ee:1e:1e:72:a2:f2:b3:44:18:5d:b0:01:6f:82:4e:
82:af:3c:87:a4:fd:f7:b0:94:8f:eb:c9:a3:c0:19:
4a:92:1a:bc:0a:38:2b:02:e4:7e:5c:be:97:83:6e:
2b:0f:b2:5e:68:c4:68:25:d9:23:9a:9d:dc:eb:a6:
90:06:ac:b8:07:db:da:cb:be:35:f0:44:b6:3f:b6:
9c:25:47:83:dd:8e:db:16:05:60:4a:d9:69:06:75:
1f:69:43:36:2c:78:02:b9:eb:d3:e8:7d:b2:f0:25:
28:92:51:61:df:3b:64:06:4d:cd:03:54:ce:02:0f:
45:bf:9a:97:5f:5e:3b:ec:ba:86:fc:1b:46:97:bc:
f3:56:f5:66:c4:22:1d:70:6b:bf:98:71:6a:1d:5a:
d9:49:c7:d5:35:fd:5a:22:af:47:e9:75:29:78:2b:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:87:42:89:70:8B:E6:47:A1:3D:FB:B1:67:FA:68:7D:37:95:D2
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/QIeHQolwi-ZHoT37sWf6aH03ldI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/22
31.97.8.0-31.97.255.255
69.62.64.0/18
103.199.184.0/22
148.222.52.0/22
148.230.64.0-148.230.69.255
148.230.72.0-148.230.99.255
148.230.104.0-148.230.119.255
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
38:9d:a9:c2:1e:0a:d0:77:9d:31:05:d8:6f:8d:be:5e:85:55:
72:12:a5:b9:be:02:1c:77:14:6b:a8:5f:0d:10:4a:96:8f:a0:
ae:f8:f0:d7:81:cb:5a:7d:1c:70:11:97:1d:e1:d0:c4:51:fb:
c4:dd:40:bc:54:b8:4c:6b:2c:92:3a:76:b3:2d:ba:ca:6c:d2:
5d:f2:d7:9d:4d:b6:42:b5:34:22:d0:31:f4:83:dc:51:51:34:
00:0d:a7:83:5d:1d:c0:8f:d5:d8:a6:f2:f0:47:a1:5d:be:8e:
c1:44:bc:06:93:e6:72:a6:dd:d6:2d:df:c5:7d:69:a6:19:7c:
03:76:61:d0:a7:77:54:d1:18:31:8f:a3:ca:81:78:8d:02:b5:
d9:e1:25:36:0a:25:7a:e7:71:78:9a:3a:09:2f:a8:fd:e9:e8:
48:d2:00:88:c3:c4:02:01:81:3a:28:59:ed:a4:37:98:cd:a5:
a9:49:6f:ae:cc:94:ee:13:d8:ce:89:7c:ec:dc:5d:e1:75:c2:
9d:ee:a6:e9:0f:94:23:6b:e6:a7:21:74:56:50:1f:13:e5:6b:
fe:ac:11:7e:f1:26:aa:99:c4:3f:de:15:7b:91:f8:06:4c:dd:
d1:88:72:e2:a1:7e:34:1d:4b:2d:85:53:17:25:0c:2d:ba:8d:
35:cc:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:59:56 2025 by rpki-client