Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/NQRxJ-xByxr1eWAK14bWxSvv1yE.roa
File: NQRxJ-xByxr1eWAK14bWxSvv1yE.roa (raw, json)
Hash identifier: hs2KquWmde5muuKt8cYW4dUzbqzQjRVpgua4fvRtb4E=
Subject key identifier: 35:04:71:27:EC:41:CB:1A:F5:79:60:0A:D7:86:D6:C5:2B:EF:D7:21
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0199C06DFEF251D5568A597924674B8BA1F3
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/NQRxJ-xByxr1eWAK14bWxSvv1yE.roa
Signing time: Tue 07 Oct 2025 20:47:38 +0000
ROA not before: Tue 07 Oct 2025 20:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.57.0/24 maxlen: 24
31.216.63.0/24 maxlen: 24
77.87.120.0/24 maxlen: 24
84.246.84.0/24 maxlen: 24
84.246.86.0/24 maxlen: 24
84.246.87.0/24 maxlen: 24
84.246.106.0/24 maxlen: 24
84.246.109.0/24 maxlen: 24
87.236.151.0/24 maxlen: 24
88.151.15.0/24 maxlen: 24
89.107.14.0/24 maxlen: 24
89.107.15.0/24 maxlen: 24
89.248.70.0/24 maxlen: 24
91.190.153.0/24 maxlen: 24
91.220.198.0/24 maxlen: 24
91.246.34.0/24 maxlen: 24
91.246.48.0/24 maxlen: 24
91.246.53.0/24 maxlen: 24
91.246.54.0/24 maxlen: 24
91.247.161.0/24 maxlen: 24
91.247.162.0/24 maxlen: 24
91.247.165.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.167.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
91.247.183.0/24 maxlen: 24
93.157.104.0/24 maxlen: 24
93.157.109.0/24 maxlen: 24
109.94.161.0/24 maxlen: 24
109.94.163.0/24 maxlen: 24
109.107.136.0/24 maxlen: 24
109.107.141.0/24 maxlen: 24
109.107.142.0/24 maxlen: 24
109.107.144.0/24 maxlen: 24
109.107.147.0/24 maxlen: 24
109.107.148.0/24 maxlen: 24
109.205.184.0/24 maxlen: 24
109.205.188.0/24 maxlen: 24
176.97.199.0/24 maxlen: 24
176.97.203.0/24 maxlen: 24
176.97.208.0/24 maxlen: 24
176.97.222.0/24 maxlen: 24
176.97.223.0/24 maxlen: 24
176.116.3.0/24 maxlen: 24
193.160.219.0/24 maxlen: 24
193.163.22.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
194.26.224.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
195.88.220.0/24 maxlen: 24
195.96.144.0/24 maxlen: 24
195.96.147.0/24 maxlen: 24
195.96.154.0/24 maxlen: 24
212.18.126.0/24 maxlen: 24
212.52.25.0/24 maxlen: 24
212.52.26.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
217.198.176.0/24 maxlen: 24
217.198.178.0/24 maxlen: 24
217.198.179.0/24 maxlen: 24
217.198.180.0/24 maxlen: 24
217.198.181.0/24 maxlen: 24
217.198.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:6d:fe:f2:51:d5:56:8a:59:79:24:67:4b:8b:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 7 20:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35047127ec41cb1af579600ad786d6c52befd721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:f0:95:7c:b3:51:14:83:1f:15:6d:48:59:
e5:d3:bb:c4:af:8a:ae:2e:70:3e:25:c5:a6:80:85:
d5:f2:68:90:4b:8f:ee:56:3e:df:85:3e:56:27:3d:
b0:9f:6f:8d:a0:af:e6:46:7d:db:51:c2:f4:58:c6:
17:ba:e8:92:4d:80:90:97:58:e0:92:86:d8:71:01:
13:06:f1:79:85:b5:b0:31:33:f8:33:0c:27:17:3c:
3a:88:18:1b:86:96:38:56:02:cb:a7:8c:5b:56:56:
06:ed:42:3b:a9:30:5a:24:f6:1b:4b:3e:55:ac:96:
a4:5f:c9:fa:53:06:b8:ae:04:1e:ab:52:43:a3:e0:
43:8b:9a:1f:e6:80:da:9f:e3:0a:fc:c0:d7:22:43:
84:92:86:21:0d:f4:e0:10:c5:e6:97:a7:6d:94:eb:
6b:e3:9e:63:f9:4f:d1:d3:c9:53:d7:12:5b:b9:62:
fb:46:50:45:70:0c:85:8a:2b:e8:60:f9:3e:4c:f1:
ea:22:53:30:e7:83:72:ca:f9:45:01:77:4e:91:83:
7c:0e:99:53:30:cc:87:be:84:90:d0:58:8f:01:74:
94:36:62:fb:8a:86:db:48:23:05:30:65:3a:9b:8c:
08:ca:01:04:99:1b:2f:91:ef:99:47:ce:3a:0e:d5:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:71:27:EC:41:CB:1A:F5:79:60:0A:D7:86:D6:C5:2B:EF:D7:21
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/NQRxJ-xByxr1eWAK14bWxSvv1yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
31.216.63.0/24
77.87.120.0/24
84.246.84.0/24
84.246.86.0/23
84.246.106.0/24
84.246.109.0/24
87.236.151.0/24
88.151.15.0/24
89.107.14.0/23
89.248.70.0/24
91.190.153.0/24
91.220.198.0/24
91.246.34.0/24
91.246.48.0/24
91.246.53.0-91.246.54.255
91.247.161.0-91.247.162.255
91.247.165.0-91.247.167.255
91.247.173.0/24
91.247.183.0/24
93.157.104.0/24
93.157.109.0/24
109.94.161.0/24
109.94.163.0/24
109.107.136.0/24
109.107.141.0-109.107.142.255
109.107.144.0/24
109.107.147.0-109.107.148.255
109.205.184.0/24
109.205.188.0/24
176.97.199.0/24
176.97.203.0/24
176.97.208.0/24
176.97.222.0/23
176.116.3.0/24
193.160.219.0/24
193.163.22.0/24
194.26.134.0/24
194.26.224.0/24
194.105.60.0/24
194.107.92.0/24
195.88.220.0/24
195.96.144.0/24
195.96.147.0/24
195.96.154.0/24
212.18.126.0/24
212.52.25.0-212.52.26.255
213.217.11.0/24
217.198.176.0/24
217.198.178.0-217.198.182.255
Signature Algorithm: sha256WithRSAEncryption
71:ad:9f:83:b2:7d:ef:e3:08:48:e3:4e:9e:8c:60:ce:c7:c0:
51:88:fb:53:e9:9b:91:b1:53:d6:d3:af:b6:7e:04:2b:a9:ec:
80:59:53:11:28:07:32:f7:fe:67:7f:ee:16:59:27:1c:cb:4f:
e6:c3:6c:d1:df:95:cd:44:7f:de:fe:8b:ab:36:7a:cb:84:cb:
51:c0:40:97:f0:da:aa:e7:7a:24:a9:5d:41:5b:9f:49:d9:4e:
e3:60:8a:67:7a:73:46:0b:3f:13:98:83:95:b8:4f:9e:bd:38:
04:cc:e6:4e:de:d8:45:14:5d:3a:ac:d6:7c:3c:c7:c1:2c:d2:
4d:39:bf:e1:95:be:a3:1f:28:65:28:fb:da:8d:97:7d:51:81:
a9:bc:64:c2:66:1c:a6:7c:97:53:c7:a0:99:70:57:a1:4a:a8:
81:4c:30:d8:a1:2b:47:11:ec:2a:90:15:28:aa:06:d5:87:c9:
39:1c:01:a6:90:9f:c0:f9:df:60:de:96:0d:3f:d5:92:a1:91:
b3:6d:5a:90:9c:4c:40:e6:f7:cd:fb:72:e4:9e:fa:ed:d4:b9:
8d:9d:cc:26:3e:46:d7:4b:49:80:ba:cd:34:d0:64:cf:c7:53:
55:27:51:3e:d5:3d:73:9c:12:9b:b2:a8:f4:f1:b0:80:6a:49:
98:1a:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:02:52 2025 by rpki-client