Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa
File: FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa (raw, json)
Hash identifier: mY8drD0B5z14cvplqrvZqDtdowa1l5LQ8YBe8N40mz4=
Subject key identifier: 15:58:47:C4:85:5F:B8:D9:BE:A7:0B:E3:4E:05:FF:72:CF:C7:7D:CB
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0198E03593100A0BF6CD4CE3F5BD2998E90E
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa
Signing time: Mon 25 Aug 2025 07:51:04 +0000
ROA not before: Mon 25 Aug 2025 07:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15967
IP address blocks: 31.172.168.0/22 maxlen: 22
31.172.168.0/24 maxlen: 24
31.172.169.0/24 maxlen: 24
31.172.170.0/23 maxlen: 23
77.55.0.0/16 maxlen: 16
77.55.0.0/18 maxlen: 18
77.55.64.0/22 maxlen: 22
77.55.68.0/22 maxlen: 22
77.55.72.0/22 maxlen: 22
77.55.76.0/23 maxlen: 23
77.55.78.0/23 maxlen: 23
77.55.84.0/22 maxlen: 22
77.55.88.0/23 maxlen: 23
77.55.90.0/24 maxlen: 24
77.55.91.0/24 maxlen: 24
77.55.92.0/24 maxlen: 24
77.55.93.0/24 maxlen: 24
77.55.94.0/24 maxlen: 24
77.55.95.0/24 maxlen: 24
77.55.96.0/22 maxlen: 22
77.55.100.0/22 maxlen: 22
77.55.104.0/23 maxlen: 23
77.55.106.0/23 maxlen: 23
77.55.108.0/23 maxlen: 23
77.55.110.0/24 maxlen: 24
77.55.111.0/24 maxlen: 24
77.55.112.0/23 maxlen: 23
77.55.114.0/23 maxlen: 23
77.55.116.0/23 maxlen: 23
77.55.118.0/23 maxlen: 23
77.55.120.0/24 maxlen: 24
77.55.121.0/24 maxlen: 24
77.55.122.0/23 maxlen: 23
77.55.124.0/24 maxlen: 24
77.55.125.0/24 maxlen: 24
77.55.126.0/24 maxlen: 24
77.55.127.0/24 maxlen: 24
77.55.128.0/20 maxlen: 20
77.55.144.0/21 maxlen: 21
77.55.152.0/24 maxlen: 24
77.55.153.0/24 maxlen: 24
77.55.154.0/24 maxlen: 24
77.55.155.0/24 maxlen: 24
77.55.156.0/23 maxlen: 23
77.55.158.0/23 maxlen: 23
77.55.160.0/20 maxlen: 20
77.55.160.0/23 maxlen: 23
77.55.162.0/23 maxlen: 23
77.55.164.0/23 maxlen: 23
77.55.166.0/24 maxlen: 24
77.55.167.0/24 maxlen: 24
77.55.168.0/24 maxlen: 24
77.55.169.0/24 maxlen: 24
77.55.170.0/23 maxlen: 23
77.55.172.0/23 maxlen: 23
77.55.174.0/23 maxlen: 23
77.55.176.0/21 maxlen: 21
77.55.176.0/23 maxlen: 23
77.55.176.0/24 maxlen: 24
77.55.177.0/24 maxlen: 24
77.55.178.0/24 maxlen: 24
77.55.179.0/24 maxlen: 24
77.55.180.0/24 maxlen: 24
77.55.181.0/24 maxlen: 24
77.55.182.0/23 maxlen: 23
77.55.184.0/23 maxlen: 23
77.55.186.0/23 maxlen: 23
77.55.188.0/23 maxlen: 23
77.55.190.0/24 maxlen: 24
77.55.191.0/24 maxlen: 24
77.55.192.0/20 maxlen: 20
77.55.208.0/20 maxlen: 20
77.55.224.0/20 maxlen: 20
77.55.240.0/23 maxlen: 23
77.55.242.0/23 maxlen: 23
77.55.245.0/24 maxlen: 24
77.55.246.0/24 maxlen: 24
77.55.247.0/24 maxlen: 24
77.55.248.0/22 maxlen: 22
77.55.252.0/23 maxlen: 23
77.55.254.0/24 maxlen: 24
77.55.255.0/24 maxlen: 24
85.128.128.0/17 maxlen: 17
85.128.128.0/24 maxlen: 24
85.128.129.0/24 maxlen: 24
85.128.130.0/24 maxlen: 24
85.128.131.0/24 maxlen: 24
85.128.132.0/23 maxlen: 23
85.128.134.0/24 maxlen: 24
85.128.135.0/24 maxlen: 24
85.128.136.0/22 maxlen: 22
85.128.140.0/23 maxlen: 23
85.128.142.0/24 maxlen: 24
85.128.143.0/24 maxlen: 24
85.128.144.0/20 maxlen: 20
85.128.160.0/19 maxlen: 19
85.128.192.0/18 maxlen: 18
2a01:6100::/32 maxlen: 32
2a01:6100::/48 maxlen: 48
2a01:6100:111::/48 maxlen: 48
2a01:6100:fe00::/48 maxlen: 48
2a01:6100:fe01::/48 maxlen: 48
2a01:6100:fe02::/48 maxlen: 48
2a01:6100:fe10::/48 maxlen: 48
2a01:6100:fe11::/48 maxlen: 48
2a01:6100:fe12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:35:93:10:0a:0b:f6:cd:4c:e3:f5:bd:29:98:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Aug 25 07:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155847c4855fb8d9bea70be34e05ff72cfc77dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:46:06:23:2b:8d:36:69:4d:e5:e9:f3:58:
a1:c0:23:92:52:00:5d:42:6f:fd:53:bb:49:4b:65:
b4:0c:20:b6:1e:53:8a:73:d7:eb:c0:59:02:ea:7e:
bf:72:59:fd:2d:19:78:1d:a4:70:19:5e:b3:f6:f2:
23:1a:04:70:0c:89:e2:1b:0a:03:a0:3d:15:59:4f:
3d:92:b2:c3:46:67:7d:b0:c5:04:df:59:99:9b:db:
0a:3f:9e:a7:89:14:7a:01:90:f3:be:51:23:bb:ba:
74:e9:41:9b:74:3c:8d:95:0d:f3:44:30:ee:65:d9:
f7:1a:cc:70:40:b7:bb:86:22:c5:ab:f1:cf:7f:20:
b4:a5:18:b4:e6:d1:99:97:67:b6:f2:ac:1a:de:61:
67:a7:51:fd:c0:5d:92:55:ef:98:d3:7c:54:b7:ea:
f4:b1:ba:83:4d:8e:a9:3a:9c:94:99:b6:c8:62:b5:
0e:f4:f0:58:0b:d6:be:02:99:f2:f6:2c:90:56:6e:
36:0a:d4:fe:d1:f3:c3:e4:43:66:8c:1a:6e:5f:6e:
ef:fd:a0:fa:6f:5c:88:12:01:ed:b3:4a:44:be:bb:
1f:e0:2b:0d:eb:f2:be:08:24:5d:de:14:7a:79:68:
57:92:06:63:46:e9:25:44:28:46:33:6b:94:c0:af:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:47:C4:85:5F:B8:D9:BE:A7:0B:E3:4E:05:FF:72:CF:C7:7D:CB
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.168.0/22
77.55.0.0/16
85.128.128.0/17
IPv6:
2a01:6100::/32
Signature Algorithm: sha256WithRSAEncryption
8f:1d:bf:9e:93:51:89:9a:c4:a8:0a:2b:03:95:96:39:63:37:
ce:02:db:7c:b2:8b:9f:b5:1f:4d:82:6c:ed:77:49:c0:86:8b:
49:d9:20:b8:22:d2:52:f7:5a:c6:3e:87:d3:f3:d7:bf:18:16:
05:62:b8:93:b1:f1:3e:53:ee:7c:59:76:18:75:25:10:7d:61:
25:69:8d:5d:01:84:1a:51:fb:77:3c:69:3f:72:a1:1d:6c:cc:
19:c7:6e:b6:61:1c:b3:79:6c:b8:28:56:95:b9:da:c7:1d:56:
15:da:9c:ba:b6:b0:d7:c6:75:24:a6:c0:ca:6e:60:d0:e9:06:
72:ac:84:7a:86:a0:2c:8b:b5:34:b2:4e:c1:db:f8:45:9a:d8:
15:84:84:e4:f6:51:c8:4d:4b:39:bf:6f:ab:fe:ec:46:ed:37:
d2:1e:94:7f:c2:ec:85:ba:26:43:a2:61:81:dc:ce:69:f2:41:
98:b1:6d:e7:9f:e0:8f:ea:91:4e:d9:88:51:d4:22:5d:e4:17:
6a:d0:fb:be:52:b1:d4:81:e6:4e:dc:5f:b3:e6:60:d5:f7:e2:
e0:9a:a0:50:87:7c:b1:79:f2:48:e0:9f:ae:b7:86:97:75:8e:
31:d0:88:48:36:24:b1:68:e3:7c:ab:a0:8e:d1:42:5c:63:49:
15:f5:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:20:18 2025 by rpki-client