Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/vknM6fMpp7RjN6aHY9yLoL3YFH0.roa
File: vknM6fMpp7RjN6aHY9yLoL3YFH0.roa (raw, json)
Hash identifier: VxtTG9zbKa2nS2uWhWDmKWt2+1JAT32lgl+0T5kZvMY=
Subject key identifier: BE:49:CC:E9:F3:29:A7:B4:63:37:A6:87:63:DC:8B:A0:BD:D8:14:7D
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0198FAE87A067385E8FAD2D6D25BD19E35FB
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/vknM6fMpp7RjN6aHY9yLoL3YFH0.roa
Signing time: Sat 30 Aug 2025 12:16:36 +0000
ROA not before: Sat 30 Aug 2025 12:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206065
IP address blocks: 31.25.104.0/21 maxlen: 24
31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.225.0/24 maxlen: 24
37.114.246.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.191.75.0/24 maxlen: 24
37.191.80.0/21 maxlen: 24
37.191.88.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.17.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/21 maxlen: 24
46.34.184.0/22 maxlen: 22
46.34.188.0/22 maxlen: 22
78.158.182.0/23 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
109.230.93.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.122.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.158.0/23 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.192.0/23 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.204.0/22 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.16.0/22 maxlen: 24
213.207.192.0/20 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fa:e8:7a:06:73:85:e8:fa:d2:d6:d2:5b:d1:9e:35:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Aug 30 12:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be49cce9f329a7b46337a68763dc8ba0bdd8147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:17:9f:12:61:d3:ac:e5:b9:86:ca:33:b6:
6b:0b:eb:fe:32:f3:7b:be:5f:04:6d:b0:81:40:0b:
16:48:34:9c:37:c1:17:c8:5e:9a:de:a1:e5:12:4c:
0b:bc:e2:88:90:a5:08:7b:a8:dc:96:87:1b:71:cb:
71:51:c0:39:ff:9c:3c:18:00:e5:18:60:59:48:8e:
03:8a:b4:0a:56:19:ca:6d:a1:40:86:a7:48:fd:c4:
9a:c7:fb:d1:87:52:23:07:b7:ef:39:24:3a:9e:ee:
40:80:70:33:b9:9d:5f:f3:7a:d2:2f:c2:6d:61:cd:
c9:b6:72:0c:f4:fb:c9:d4:f2:6c:3e:a2:1d:80:2e:
9e:3d:2c:7f:d6:d4:ec:12:d4:bc:15:3d:ba:7d:0f:
8f:fc:d6:4b:58:99:79:88:a1:1e:eb:e8:b9:8f:e2:
03:bb:4e:44:55:e6:01:8c:20:a9:54:bd:3d:f7:92:
be:e0:01:4f:56:da:23:d0:d3:00:00:30:37:c0:6e:
f8:53:9e:55:20:16:36:12:02:29:65:9a:ff:52:19:
10:52:12:2c:42:9f:fc:6e:00:23:97:64:33:60:f1:
eb:3a:68:2c:b5:81:b1:4a:d6:c1:cd:24:e1:4a:d1:
3d:c1:fd:9f:90:25:ef:0a:a2:cb:3d:32:7c:02:e6:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:CC:E9:F3:29:A7:B4:63:37:A6:87:63:DC:8B:A0:BD:D8:14:7D
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/vknM6fMpp7RjN6aHY9yLoL3YFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.75.0/24
37.191.80.0-37.191.91.255
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.158.182.0/23
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.122.0/23
188.121.128.0/19
188.136.134.0/24
188.136.141.0/24
188.136.145.0/24
188.136.148.0/24
188.136.151.0/24
188.136.157.0-188.136.159.255
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.209.255
188.136.212.0-188.136.223.255
213.195.16.0/22
213.207.192.0/20
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
35:b6:0c:73:ec:19:c6:54:1d:9e:91:e5:2c:b0:73:dd:98:55:
f6:48:99:af:01:0b:4f:d5:60:4b:b5:03:cb:00:44:4f:40:f3:
0c:94:1e:a0:09:ba:21:97:a5:4b:55:78:7d:6a:04:cc:3c:28:
af:1d:04:1d:d4:02:d5:cc:1d:ea:68:cd:49:99:e6:d5:06:6a:
b4:f6:0e:e7:f0:5e:37:c2:b9:57:27:ba:86:24:76:38:43:7d:
de:7a:ce:a3:fa:81:d9:99:e1:5d:0d:24:f7:39:98:d6:63:e5:
24:d8:40:46:46:33:a8:e9:03:a1:3f:78:ff:a2:7b:66:94:7e:
20:f5:42:f9:99:ae:ca:ea:90:ea:5e:5a:ed:4b:cb:34:b2:94:
d9:d0:1d:d2:c9:0d:72:03:12:a6:63:ef:eb:4d:3e:20:3a:41:
05:13:6d:21:d6:ec:8a:60:2e:94:f4:43:ea:4d:66:7d:50:cb:
48:d6:33:d1:b2:2e:46:5f:e9:4f:ef:98:4a:05:d9:15:93:5f:
73:0d:e4:62:74:74:63:df:77:34:98:16:07:7b:9e:67:b6:35:
5c:54:7a:28:d7:c5:3b:70:d4:0c:af:78:fb:78:8a:f7:4b:10:
fd:92:55:56:c3:2a:71:ad:15:22:04:3f:b9:ef:35:b0:37:10:
41:91:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:56 2025 by rpki-client