Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-G0gouT25O8333oUe_nJSdfE6YM.roa
File: 1-G0gouT25O8333oUe_nJSdfE6YM.roa (raw, json)
Hash identifier: J9B2qz/Rsol1iaWRWOir9Zb70uq5Fu2a/tdTY2us474=
Subject key identifier: F8:6D:20:A2:E4:F6:E4:EF:37:DF:7A:14:7B:F9:C9:49:D7:C4:E9:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D4E1A2C4E7920C148676F3647D101124
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-G0gouT25O8333oUe_nJSdfE6YM.roa
Signing time: Fri 04 Jul 2025 10:00:46 +0000
ROA not before: Fri 04 Jul 2025 10:00:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.135.0/24 maxlen: 24
31.57.168.0/23 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.216.0/23 maxlen: 24
31.57.250.0/23 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
94.183.152.0/22 maxlen: 22
94.183.192.0/22 maxlen: 22
94.183.196.0/22 maxlen: 22
94.183.200.0/22 maxlen: 22
94.183.204.0/22 maxlen: 22
94.183.208.0/22 maxlen: 22
94.183.212.0/22 maxlen: 22
94.183.216.0/22 maxlen: 22
94.183.220.0/22 maxlen: 22
94.183.224.0/22 maxlen: 22
94.183.228.0/22 maxlen: 22
94.183.236.0/22 maxlen: 22
94.183.240.0/22 maxlen: 22
94.183.244.0/22 maxlen: 22
94.183.248.0/22 maxlen: 22
94.183.252.0/22 maxlen: 22
217.60.16.0/21 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.40.0/22 maxlen: 24
217.60.64.0/18 maxlen: 24
217.60.187.0/24 maxlen: 24
217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:e1:a2:c4:e7:92:0c:14:86:76:f3:64:7d:10:11:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 10:00:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86d20a2e4f6e4ef37df7a147bf9c949d7c4e983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:08:a3:31:36:4c:a1:83:5c:9d:bc:b9:f2:56:
ee:94:77:00:e9:0b:49:39:43:53:0b:13:b6:23:e9:
4c:5d:a4:94:99:41:9e:f9:80:f9:9a:58:d4:53:1b:
b0:0a:67:7b:b7:96:a8:ff:98:08:9c:6f:bd:93:bc:
d3:5c:96:f8:63:6f:30:5e:24:27:95:72:34:7b:f6:
f7:b2:08:43:b0:46:32:b1:e8:e8:67:e9:08:d5:39:
2b:5b:e7:09:5a:72:89:10:00:e8:32:79:21:55:00:
71:ae:9b:77:9c:18:75:33:31:7f:45:d6:b8:1a:2c:
18:df:77:b9:c6:29:18:05:2b:e7:39:d6:e7:11:eb:
63:0a:2e:ce:40:fa:c3:24:c4:3b:1f:81:fd:be:95:
2c:6b:4d:8e:f6:e1:68:82:59:b9:0a:b7:e4:ac:18:
fa:7e:ef:dc:67:15:31:cc:50:91:98:7a:7a:f6:63:
fe:d1:3e:12:ad:bf:52:73:97:61:66:b4:c1:2a:3d:
03:9d:5f:45:52:55:aa:1d:cc:54:cd:78:13:40:3a:
a0:d6:b1:09:e2:df:1f:bb:80:96:33:db:b4:c6:cf:
e8:3a:78:28:d6:e4:32:ad:15:2f:c0:4d:ad:86:f9:
d4:c7:72:1c:a1:00:3d:2f:81:63:a2:4f:16:58:c5:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:20:A2:E4:F6:E4:EF:37:DF:7A:14:7B:F9:C9:49:D7:C4:E9:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-G0gouT25O8333oUe_nJSdfE6YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.57.36.0/23
31.57.135.0/24
31.57.168.0/23
31.57.184.0/23
31.57.208.0/22
31.57.216.0/23
31.57.250.0/23
31.58.76.0/22
31.58.92.0/22
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.235.0/24
31.58.240.0-31.58.244.255
31.58.249.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.140.0/22
31.59.148.0-31.59.165.255
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
94.183.152.0/22
94.183.192.0-94.183.231.255
94.183.236.0-94.183.255.255
217.60.16.0/21
217.60.28.0/22
217.60.40.0/22
217.60.64.0/18
217.60.187.0/24
217.60.196.0/23
217.60.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:10:82:11:99:85:f5:26:b9:b5:83:00:66:50:50:b0:4f:2b:
c0:1c:3d:ce:46:db:b4:a8:4d:49:a9:28:d9:20:13:7a:0f:d0:
09:38:f7:e9:ed:1f:a4:ad:04:cd:be:fa:9c:8e:37:eb:93:5d:
ce:7a:eb:5a:a8:23:d8:1e:3c:e3:24:47:18:27:e9:d0:af:15:
24:64:36:00:62:7b:d3:d1:e9:3b:3a:d7:ac:19:ea:f3:6f:13:
15:1a:e2:cc:cf:95:5c:d3:13:f2:1b:07:cd:76:1b:c7:84:cd:
8a:6e:ef:c8:e4:73:b5:ff:7a:b8:14:ab:b9:61:6a:9f:65:0d:
95:5b:7b:53:4d:7a:a1:28:52:d0:d8:1d:fa:52:84:89:e2:45:
56:47:b7:68:d4:43:a3:46:e5:91:a7:dc:ec:82:8e:37:9c:a8:
6e:02:1f:23:e5:5e:85:e2:94:3d:e0:be:86:1b:10:00:0a:f5:
f9:35:54:e5:16:4b:21:ed:53:da:ee:bd:f9:db:0e:2e:31:ff:
ca:78:32:34:e3:a3:4c:14:28:db:b4:6d:10:3a:be:2f:92:35:
bf:49:c2:2a:26:c3:13:47:30:f5:e4:ca:ed:6c:97:4a:7f:d4:
3a:1a:1a:f1:ae:08:ef:3b:2c:0d:00:97:08:6d:fe:6d:7a:e0:
b4:2b:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:29:16 2025 by rpki-client