Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/G31_V7Wifn7ez9W533Idk0xdbXA.roa
File: G31_V7Wifn7ez9W533Idk0xdbXA.roa (raw, json)
Hash identifier: YosqAXxIqRCnTE0XAjywszjlI6veNUfUjq2liO4FEN0=
Subject key identifier: 1B:7D:7F:57:B5:A2:7E:7E:DE:CF:D5:B9:DF:72:1D:93:4C:5D:6D:70
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199166508B7FB9ABEC225E862B229A8F9C8
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/G31_V7Wifn7ez9W533Idk0xdbXA.roa
Signing time: Thu 04 Sep 2025 20:22:24 +0000
ROA not before: Thu 04 Sep 2025 20:22:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 130.49.0.0/24 maxlen: 24
170.168.35.0/24 maxlen: 24
170.168.36.0/24 maxlen: 24
170.168.37.0/24 maxlen: 24
170.168.38.0/24 maxlen: 24
170.168.39.0/24 maxlen: 24
170.168.52.0/24 maxlen: 24
170.168.53.0/24 maxlen: 24
170.168.54.0/24 maxlen: 24
170.168.55.0/24 maxlen: 24
170.168.56.0/24 maxlen: 24
170.168.57.0/24 maxlen: 24
170.168.58.0/24 maxlen: 24
170.168.59.0/24 maxlen: 24
170.168.68.0/24 maxlen: 24
170.168.69.0/24 maxlen: 24
170.168.70.0/24 maxlen: 24
170.168.71.0/24 maxlen: 24
170.168.80.0/24 maxlen: 24
170.168.81.0/24 maxlen: 24
170.168.82.0/24 maxlen: 24
170.168.83.0/24 maxlen: 24
170.168.84.0/24 maxlen: 24
170.168.85.0/24 maxlen: 24
170.168.86.0/24 maxlen: 24
170.168.87.0/24 maxlen: 24
170.168.92.0/24 maxlen: 24
170.168.93.0/24 maxlen: 24
170.168.94.0/24 maxlen: 24
170.168.95.0/24 maxlen: 24
170.168.104.0/24 maxlen: 24
170.168.105.0/24 maxlen: 24
170.168.106.0/24 maxlen: 24
170.168.107.0/24 maxlen: 24
170.168.108.0/24 maxlen: 24
170.168.109.0/24 maxlen: 24
170.168.110.0/24 maxlen: 24
170.168.111.0/24 maxlen: 24
170.168.120.0/24 maxlen: 24
170.168.121.0/24 maxlen: 24
170.168.122.0/24 maxlen: 24
170.168.123.0/24 maxlen: 24
170.168.124.0/24 maxlen: 24
170.168.125.0/24 maxlen: 24
170.168.126.0/24 maxlen: 24
170.168.127.0/24 maxlen: 24
170.168.132.0/24 maxlen: 24
170.168.133.0/24 maxlen: 24
170.168.134.0/24 maxlen: 24
170.168.135.0/24 maxlen: 24
170.168.140.0/24 maxlen: 24
170.168.141.0/24 maxlen: 24
170.168.142.0/24 maxlen: 24
170.168.143.0/24 maxlen: 24
170.168.148.0/24 maxlen: 24
170.168.149.0/24 maxlen: 24
170.168.150.0/24 maxlen: 24
170.168.151.0/24 maxlen: 24
170.168.156.0/24 maxlen: 24
170.168.157.0/24 maxlen: 24
170.168.158.0/24 maxlen: 24
170.168.159.0/24 maxlen: 24
170.168.160.0/24 maxlen: 24
170.168.161.0/24 maxlen: 24
170.168.162.0/24 maxlen: 24
170.168.163.0/24 maxlen: 24
170.168.176.0/24 maxlen: 24
170.168.177.0/24 maxlen: 24
170.168.178.0/24 maxlen: 24
170.168.179.0/24 maxlen: 24
170.168.184.0/24 maxlen: 24
170.168.185.0/24 maxlen: 24
170.168.186.0/24 maxlen: 24
170.168.187.0/24 maxlen: 24
170.168.192.0/24 maxlen: 24
170.168.193.0/24 maxlen: 24
170.168.194.0/24 maxlen: 24
170.168.195.0/24 maxlen: 24
170.168.200.0/24 maxlen: 24
170.168.201.0/24 maxlen: 24
170.168.202.0/24 maxlen: 24
170.168.203.0/24 maxlen: 24
170.168.208.0/24 maxlen: 24
170.168.209.0/24 maxlen: 24
170.168.210.0/24 maxlen: 24
170.168.211.0/24 maxlen: 24
170.168.216.0/24 maxlen: 24
170.168.217.0/24 maxlen: 24
170.168.218.0/24 maxlen: 24
170.168.219.0/24 maxlen: 24
170.168.224.0/24 maxlen: 24
170.168.225.0/24 maxlen: 24
170.168.226.0/24 maxlen: 24
170.168.227.0/24 maxlen: 24
170.168.232.0/24 maxlen: 24
170.168.233.0/24 maxlen: 24
170.168.234.0/24 maxlen: 24
170.168.235.0/24 maxlen: 24
170.168.244.0/24 maxlen: 24
170.168.245.0/24 maxlen: 24
170.168.246.0/24 maxlen: 24
170.168.247.0/24 maxlen: 24
170.168.252.0/24 maxlen: 24
170.168.253.0/24 maxlen: 24
170.168.254.0/24 maxlen: 24
170.168.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:65:08:b7:fb:9a:be:c2:25:e8:62:b2:29:a8:f9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 4 20:22:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b7d7f57b5a27e7edecfd5b9df721d934c5d6d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:be:c1:e4:b5:17:51:db:8a:b3:33:46:55:
49:e6:9d:5f:85:c7:f4:61:ad:0b:27:06:66:c3:6c:
be:50:24:75:68:c1:51:bb:1e:38:c9:12:1c:d9:a9:
db:70:b8:1d:16:38:1f:77:3c:b9:04:d3:c6:0f:50:
85:09:dd:72:fb:23:de:fd:0c:f5:0c:4a:4c:4b:a3:
43:ab:86:7a:9c:d3:b1:f0:1a:16:a1:01:80:8c:ab:
ac:a5:77:fe:9d:73:13:01:2c:eb:46:74:f8:5e:99:
e4:7e:fb:fd:6b:ef:14:8d:c1:bd:96:6b:fd:42:78:
a1:e8:07:4e:9c:2b:0b:8e:54:ea:c6:62:af:11:ed:
f5:ea:e3:71:eb:3e:5d:9d:7f:60:1e:6b:e6:dd:18:
66:42:f0:0c:c1:8e:57:c4:06:94:a5:c0:7e:c5:06:
c7:2c:c3:b7:e0:05:ca:fa:b3:e4:e2:64:69:a4:5c:
ce:d5:ec:51:90:f5:6e:fe:f9:49:e3:cd:87:64:16:
91:f3:50:3e:bf:14:5b:78:73:c0:fd:9d:09:db:cb:
8d:4c:0f:63:ec:11:bd:06:86:15:75:d0:ae:88:ce:
2a:67:c3:0f:72:fd:72:3c:86:9c:63:3e:fb:02:a1:
db:7e:52:c3:a7:ca:10:c5:28:96:c8:e3:3a:64:cb:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:7F:57:B5:A2:7E:7E:DE:CF:D5:B9:DF:72:1D:93:4C:5D:6D:70
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/G31_V7Wifn7ez9W533Idk0xdbXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.0.0/24
170.168.35.0-170.168.39.255
170.168.52.0-170.168.59.255
170.168.68.0/22
170.168.80.0/21
170.168.92.0/22
170.168.104.0/21
170.168.120.0/21
170.168.132.0/22
170.168.140.0/22
170.168.148.0/22
170.168.156.0-170.168.163.255
170.168.176.0/22
170.168.184.0/22
170.168.192.0/22
170.168.200.0/22
170.168.208.0/22
170.168.216.0/22
170.168.224.0/22
170.168.232.0/22
170.168.244.0/22
170.168.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:68:43:3d:44:5e:b8:89:ae:d6:41:88:ff:23:2d:0c:40:5c:
06:d5:03:dc:72:95:24:a8:32:c8:ee:4b:09:5d:00:7e:8e:76:
73:ba:5b:e4:d5:1b:3f:e1:91:93:b3:a4:ab:ad:89:64:f0:e7:
c0:1c:1f:c6:5d:6b:ae:5f:31:26:03:1b:bc:5d:4a:16:91:c3:
98:80:68:76:e6:a5:eb:3a:98:66:84:bf:b4:a4:1b:28:6a:5f:
fe:74:dc:f3:2e:11:43:97:15:90:25:0a:64:d8:e0:d4:c7:8a:
7c:02:d6:4a:16:c1:bc:3f:23:f7:eb:3c:52:b1:13:c0:b2:c6:
de:13:b8:61:00:89:6d:7b:75:48:0b:f7:a6:75:11:f2:49:36:
12:69:42:7d:60:a0:57:28:b1:15:2b:0f:f6:96:a9:c1:7d:1f:
3e:37:41:92:c7:0b:d0:53:3f:40:78:15:89:aa:c9:41:16:7c:
6a:b3:dd:95:7b:71:19:1b:d9:39:fb:d0:6f:4a:6c:0a:0f:6a:
54:76:c8:e3:2d:a5:00:35:6e:c6:34:cc:dc:a8:18:d3:f3:a7:
66:92:18:20:ed:7e:91:7e:6e:69:66:90:2c:fa:a2:14:51:64:
6b:32:1b:e4:2d:25:48:46:9f:c0:50:57:97:81:50:0b:7a:6e:
95:cf:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:50 2025 by rpki-client