Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/aTrGkvO5sOxBXIo1KiSB3ifAh1U.roa
File: aTrGkvO5sOxBXIo1KiSB3ifAh1U.roa (raw, json)
Hash identifier: U2yJyooBVnOhDaZgcMUd0CR1TY9eGwZxZoT9BEikhsw=
Subject key identifier: 69:3A:C6:92:F3:B9:B0:EC:41:5C:8A:35:2A:24:81:DE:27:C0:87:55
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0199333B3C4292F9086C22548BEB70616E34
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/aTrGkvO5sOxBXIo1KiSB3ifAh1U.roa
Signing time: Wed 10 Sep 2025 10:45:43 +0000
ROA not before: Wed 10 Sep 2025 10:45:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49367
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
45.86.144.0/22 maxlen: 22
77.81.103.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
185.198.247.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
193.239.140.0/23 maxlen: 23
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:3b:3c:42:92:f9:08:6c:22:54:8b:eb:70:61:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 10 10:45:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=693ac692f3b9b0ec415c8a352a2481de27c08755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:8a:9d:80:cf:82:37:c7:45:f0:0a:c1:06:
22:0f:ca:f6:bf:32:7b:4f:78:e4:c6:34:ea:46:be:
01:b1:08:af:7d:05:5c:6e:95:81:ed:59:64:5a:2b:
8d:21:67:7c:ca:d6:73:51:b0:c1:1f:45:8d:47:d1:
a7:1d:48:8e:51:ea:19:c2:e7:8d:76:c5:ef:82:2c:
2b:61:97:5d:f8:53:51:16:d7:66:66:ce:c5:a0:ed:
dc:81:73:a6:4e:60:0e:69:00:02:57:0c:4d:f5:b5:
dd:ef:ea:c7:59:c3:f5:fd:24:50:97:5b:64:05:10:
29:14:df:96:37:f5:21:74:40:9c:db:e2:c5:44:a4:
3e:95:bc:42:d6:08:ef:55:51:fc:df:42:20:af:0f:
0a:59:c6:06:c8:4f:59:12:54:3a:5e:b8:d0:27:1c:
b8:9c:5b:14:94:ad:7d:f6:83:81:a1:64:4f:16:29:
a6:a0:e2:47:00:fc:da:7a:43:21:bc:e0:95:24:49:
b0:a1:cb:87:73:87:59:a1:cb:94:a4:d9:89:57:d4:
d0:e3:59:41:b6:c0:9a:e2:ec:15:a4:c4:3a:0f:b7:
a0:c8:eb:0b:fe:f8:f2:9f:d6:b2:89:05:be:6a:dd:
ec:8b:e1:1c:59:34:5e:94:52:d9:94:32:16:c3:33:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:C6:92:F3:B9:B0:EC:41:5C:8A:35:2A:24:81:DE:27:C0:87:55
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/aTrGkvO5sOxBXIo1KiSB3ifAh1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
94.176.108.0/24
94.176.212.0/24
94.177.48.0/23
94.177.98.0/23
185.184.240.0/22
185.198.244.0/22
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/23
188.215.94.0/24
188.240.228.0/23
188.241.126.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
d0:62:97:3c:32:39:4d:1d:a0:d0:07:f0:dd:25:18:11:f5:0e:
97:47:71:03:a6:6a:bd:29:d6:07:9f:05:34:9b:a5:c1:f0:c8:
dd:c8:17:87:ca:b3:2f:ef:65:cb:9e:3e:97:8d:e3:95:46:3a:
36:67:49:90:af:d0:a4:ca:14:ee:c5:10:24:7b:d8:09:e5:a8:
f4:61:4e:a2:93:24:6a:e6:56:94:79:81:c8:c2:42:11:cf:eb:
9b:00:46:e9:d3:1f:3d:4c:87:34:cc:01:a0:e0:79:1f:e4:61:
70:54:83:74:ea:f7:c2:20:71:c1:de:86:c7:3f:a5:17:94:dd:
cb:39:5e:c7:50:58:87:d6:4e:f9:c5:fe:33:b3:44:21:a8:6b:
2b:35:ca:3f:8f:59:b7:e0:9c:81:48:4c:fe:b2:aa:db:5e:38:
98:3d:14:69:5f:22:81:4a:cb:46:26:9e:c9:3f:46:b7:d6:14:
7a:86:b9:38:90:24:c5:ac:69:76:b6:8a:b4:fb:f0:b9:df:d2:
05:39:b4:27:c6:7f:be:3b:a6:e0:e2:a1:7e:d8:e1:d8:fc:f5:
2e:a8:9a:77:02:15:e5:e1:c7:6d:37:32:5f:49:80:f0:0d:b9:
dc:fe:59:79:98:76:ef:b8:b2:05:05:e9:65:42:30:12:7f:7b:
ae:54:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:12:39 2025 by rpki-client