Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gG2bczsEgp5Ea6HMTqVTO22bBwc.roa
File: gG2bczsEgp5Ea6HMTqVTO22bBwc.roa (raw, json)
Hash identifier: AuttycrlvdsTGOArCiNMxWWJ+uIg0wEj7C+tLNzzUug=
Subject key identifier: 80:6D:9B:73:3B:04:82:9E:44:6B:A1:CC:4E:A5:53:3B:6D:9B:07:07
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019A4A82E31FB1149F46BA25DFBE7D4D7535
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gG2bczsEgp5Ea6HMTqVTO22bBwc.roa
Signing time: Mon 03 Nov 2025 16:18:03 +0000
ROA not before: Mon 03 Nov 2025 16:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.93.43.0/24 maxlen: 24
103.124.164.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.166.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
199.168.120.0/24 maxlen: 24
199.168.121.0/24 maxlen: 24
199.168.122.0/24 maxlen: 24
199.168.123.0/24 maxlen: 24
209.23.44.0/24 maxlen: 24
209.23.45.0/24 maxlen: 24
209.23.46.0/24 maxlen: 24
209.23.47.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:82:e3:1f:b1:14:9f:46:ba:25:df:be:7d:4d:75:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 3 16:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=806d9b733b04829e446ba1cc4ea5533b6d9b0707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8e:56:2b:cd:de:12:99:3c:12:4f:1b:6d:fa:
84:79:82:52:64:e5:49:c3:78:20:93:0d:74:c9:2b:
69:13:81:4e:89:f4:92:3c:fc:11:5c:ce:58:cf:48:
cd:20:1e:01:17:1d:2f:bf:1a:a0:a9:99:b3:63:55:
2b:19:7e:2b:d2:73:52:8a:94:a5:c7:a3:51:08:d5:
7c:b7:20:e1:e1:f5:88:c5:1d:64:d8:46:b8:a1:1c:
d5:7a:1a:92:a1:f4:aa:f7:e4:4b:68:8b:9a:53:c0:
ae:db:ae:25:1a:bb:18:37:70:1c:7c:59:e9:f1:a6:
8f:63:97:a8:72:33:fb:b3:b4:47:fa:d7:eb:64:2e:
af:a2:5b:35:69:63:fb:34:c4:50:dc:37:9f:6c:62:
55:9c:5e:d2:b8:83:d7:b7:2a:97:22:7d:86:3e:04:
50:f0:a2:d5:53:2b:a3:83:44:99:67:24:c8:0e:79:
55:fc:d7:01:38:e3:3d:48:74:b2:51:2d:01:62:e4:
1f:58:10:59:b5:0b:f4:0e:57:a4:33:2d:54:50:62:
4c:3c:ed:a0:07:88:a7:02:a5:d3:7e:42:38:93:66:
f8:1f:39:05:14:20:2f:50:92:16:9b:b5:2b:3e:6a:
71:e2:6e:74:47:55:4d:56:92:25:0b:ab:ab:56:49:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6D:9B:73:3B:04:82:9E:44:6B:A1:CC:4E:A5:53:3B:6D:9B:07:07
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/gG2bczsEgp5Ea6HMTqVTO22bBwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
45.142.25.0-45.142.27.255
103.93.40.0/22
103.124.164.0/22
109.104.132.0/24
109.104.138.0-109.104.143.255
109.104.156.0/22
144.48.52.0/22
185.53.100.0/23
185.153.125.0-185.153.127.255
199.168.120.0/22
209.23.44.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
4f:90:ac:50:e0:38:f3:b5:e9:8e:60:44:47:5e:5b:11:99:a5:
4b:be:0b:ee:49:df:ff:a9:c2:c4:2d:14:59:8a:de:47:58:73:
7f:ef:7c:ea:d5:6b:23:c5:c5:94:70:72:15:b3:12:bb:85:65:
83:de:8b:bd:53:2e:4d:4f:53:96:3e:98:7c:8e:83:f0:24:ed:
fe:d7:7e:44:c4:2a:72:85:30:53:6b:14:b9:d7:d3:43:68:6b:
21:4e:66:5c:cc:fc:88:cb:bf:cd:48:fc:52:cb:c4:b1:2f:bb:
c7:7e:bf:dd:7a:95:3b:3f:e4:f6:0d:8a:42:ce:6c:18:d1:7f:
5d:26:e6:31:de:3f:52:fd:8b:e6:01:06:4c:12:eb:d3:69:99:
12:86:7f:3e:48:77:36:02:70:a7:3d:a1:a7:ad:5e:fc:08:ee:
d9:97:80:c3:9b:00:d3:b3:fa:41:17:57:0e:16:50:1e:f8:de:
89:e9:41:03:a4:9b:31:af:9f:3a:5b:b6:d8:a9:a8:ff:1a:58:
37:f5:99:fc:9d:14:95:0b:4e:98:a9:64:50:3b:c2:3b:91:ba:
80:3e:55:95:c9:d6:98:c1:21:2c:1c:1d:03:66:10:e5:a1:b4:
e6:18:ad:2a:ee:b4:f7:3c:77:27:66:72:7b:71:4f:3d:3a:82:
b2:77:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:29:39 2025 by rpki-client