Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/81Pt95GnPv2j__63HVLsn2YmJ3I.roa
File: 81Pt95GnPv2j__63HVLsn2YmJ3I.roa (raw, json)
Hash identifier: yfEWGI7JOF+pOFhQCzikmJaLzsY8ONOEdEhawm+jJRo=
Subject key identifier: F3:53:ED:F7:91:A7:3E:FD:A3:FF:FE:B7:1D:52:EC:9F:66:26:27:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01971C6561168884EACACB0D562FE7269C1D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/81Pt95GnPv2j__63HVLsn2YmJ3I.roa
Signing time: Thu 29 May 2025 14:14:55 +0000
ROA not before: Thu 29 May 2025 14:14:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.89.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.112.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:65:61:16:88:84:ea:ca:cb:0d:56:2f:e7:26:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 29 14:14:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f353edf791a73efda3fffeb71d52ec9f66262772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:01:f9:b6:3e:c1:88:e9:dd:55:20:b1:08:
e4:e1:b8:89:4e:ca:ec:4d:a1:86:11:64:69:d7:88:
35:4c:24:01:cf:d4:01:2a:ec:3f:e8:c1:c3:e6:ae:
75:2e:db:85:39:83:40:af:62:aa:4a:01:02:71:4f:
4b:4a:2b:a4:61:9c:af:bc:90:24:14:da:6e:4a:6a:
f5:9a:d2:88:d3:b3:6c:30:51:e5:e7:46:01:09:0b:
ab:a0:11:84:4d:9c:03:01:8a:5a:cd:29:95:ee:b0:
83:48:1b:09:c9:c0:88:23:11:c6:d5:72:a1:b9:d2:
35:da:3c:24:ab:8a:55:6f:0a:47:88:8d:fb:00:72:
e9:4f:cb:62:15:a0:e5:41:24:1e:35:a2:da:5b:cb:
76:be:1a:b0:82:17:d7:45:ea:7d:74:99:da:a9:6c:
29:b2:66:17:45:15:86:1b:55:ea:64:20:54:b8:94:
f3:a9:63:57:6f:a2:c2:14:ee:59:eb:09:50:3c:11:
75:7f:0a:a8:a8:ca:65:17:ed:17:dc:ae:58:4d:29:
68:2d:d3:4d:e0:10:94:1f:0a:5b:b1:2f:de:cf:67:
c7:ae:17:d7:db:c5:5e:e4:9c:4f:e3:b3:de:8d:37:
fd:da:99:a5:25:85:9f:f9:b1:6a:19:6a:62:15:1c:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:ED:F7:91:A7:3E:FD:A3:FF:FE:B7:1D:52:EC:9F:66:26:27:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/81Pt95GnPv2j__63HVLsn2YmJ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.84.0/24
87.120.165.0-87.120.166.255
87.120.186.0/23
87.121.89.0/24
87.121.105.0/24
93.123.84.0/24
94.156.102.0/24
94.156.106.0/24
94.156.112.0/24
94.156.114.0/23
94.156.170.0/24
94.156.179.0/24
94.156.237.0/24
141.98.7.0/24
171.22.31.0/24
178.215.236.0/24
178.215.238.0/24
185.216.71.0/24
185.246.223.0/24
193.25.216.0/24
193.35.17.0/24
193.58.121.0-193.58.122.255
193.222.99.0/24
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:08:aa:de:2e:4c:f3:2d:c0:43:f7:ac:57:43:df:91:8f:17:
c9:37:d8:63:42:f2:b0:36:f5:86:23:13:5b:a5:ff:0c:82:f8:
ec:f1:0e:32:c8:4a:15:88:b3:d9:4d:b6:7b:69:b8:88:84:45:
88:19:bc:17:f8:f2:10:1a:ee:0e:53:6f:bb:2b:15:8d:86:ae:
97:a6:ce:90:27:ef:a4:b5:64:df:be:3a:af:11:c0:9d:b2:57:
bf:64:1b:5e:92:f1:3d:9d:c9:ab:25:8b:18:03:a1:02:f5:13:
03:a1:62:88:dd:bf:c0:44:8a:46:87:1c:5b:f0:d3:4d:f9:0d:
80:17:00:d8:36:39:62:1c:55:19:a4:55:17:fe:de:fa:08:96:
6c:68:1e:23:d7:53:ba:15:a1:f0:50:1c:05:96:0f:99:36:64:
1e:22:9e:d7:3a:da:29:29:16:55:6a:f7:29:e8:4f:a4:5c:af:
da:c7:fb:12:3c:ee:99:9f:93:e1:e1:65:13:95:25:e2:c6:91:
19:30:15:15:6a:de:7f:f9:46:d3:3f:6f:40:2f:b5:2e:e6:c7:
76:a4:92:18:a7:e6:4b:a1:03:75:b2:1d:2f:8a:5f:c1:e8:c1:
7b:10:27:7b:3d:6c:40:39:3a:b2:59:f0:f3:f0:23:e1:04:62:
07:b8:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:26 2025 by rpki-client