Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/unEar9L1xd4FiGAUTZOWlQRIsrk.roa
File: unEar9L1xd4FiGAUTZOWlQRIsrk.roa (raw, json)
Hash identifier: GdgjtPj/5GDRtsD4s9GHX7JAmnMoUgQnKKTtW+3uFMc=
Subject key identifier: BA:71:1A:AF:D2:F5:C5:DE:05:88:60:14:4D:93:96:95:04:48:B2:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A38F235702DE5F40F7F0BF67ED1613056
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/unEar9L1xd4FiGAUTZOWlQRIsrk.roa
Signing time: Fri 31 Oct 2025 06:26:28 +0000
ROA not before: Fri 31 Oct 2025 06:26:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
45.95.2.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:f2:35:70:2d:e5:f4:0f:7f:0b:f6:7e:d1:61:30:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 31 06:26:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba711aafd2f5c5de058860144d9396950448b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:4e:0d:00:8d:3c:49:6b:b7:ae:14:0e:3d:
d3:f3:8b:b6:9f:3b:e6:41:bd:1d:1a:10:da:5f:0a:
e8:ee:29:08:48:96:20:58:06:26:e3:0d:bb:81:57:
05:9c:13:83:e8:ed:bb:46:ae:23:24:da:bc:36:3e:
81:35:ee:2b:a2:7c:71:ee:b7:a7:43:34:9b:f2:14:
2c:05:22:a9:5a:0f:d9:39:9c:42:b6:56:0a:1a:d1:
bd:d0:71:24:b9:ab:bd:bd:d8:80:f7:26:a7:b7:3a:
28:c1:00:0e:c3:f3:58:b4:e9:2a:42:e8:15:1f:19:
3c:2b:03:64:4b:21:b3:4b:d2:f2:5b:c1:da:41:80:
20:76:59:2d:aa:b9:1f:9a:60:c4:54:99:8a:38:33:
3c:de:6c:73:b1:34:ab:f9:17:73:20:e4:d4:b0:a2:
40:7d:52:d0:a1:d8:6c:54:33:da:ea:ac:72:dd:04:
65:8d:73:f3:a9:fa:6e:28:65:45:e4:70:d1:60:dd:
14:e8:ee:0e:99:43:9a:e5:7c:01:4f:13:a5:74:b1:
a5:97:48:63:9c:d8:82:dc:3a:b7:70:56:4d:5d:c0:
ca:94:57:f8:f3:d4:f1:6d:96:5d:59:aa:0e:15:3b:
af:00:59:b8:3d:18:ad:31:c8:7d:b9:ef:24:d3:9c:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:1A:AF:D2:F5:C5:DE:05:88:60:14:4D:93:96:95:04:48:B2:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/unEar9L1xd4FiGAUTZOWlQRIsrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
45.95.2.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
87.121.217.0/24
93.123.30.0/24
94.125.100.0/23
94.156.177.0/24
94.156.236.0/24
109.206.241.0/24
171.22.30.0/24
185.246.220.0/24
192.145.28.0/22
193.8.184.0/24
193.47.60.0/24
193.148.58.0/23
193.168.196.0/22
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
41:eb:81:07:9d:ba:a2:e7:54:28:3d:40:5c:fd:da:dc:0f:82:
1f:94:e9:f6:3a:bb:4d:ab:93:9e:0a:ce:54:83:ea:36:c3:32:
03:3c:9a:42:ad:c0:0b:ff:7f:55:41:6e:5a:1b:6d:12:c1:6a:
e9:4d:11:d4:16:1e:85:2e:13:fa:d3:39:66:85:97:51:cd:0f:
3c:cb:59:e8:16:b1:ff:77:21:10:6d:f3:02:c9:6c:47:ce:14:
1f:ae:c8:8c:a1:3a:db:24:d1:5e:99:8d:76:3a:e0:03:3d:e5:
34:c9:da:2a:60:4e:46:0f:fb:01:83:ae:d9:93:0a:8a:2b:62:
a1:11:0d:cc:55:e1:4a:a5:84:c5:ad:ad:4e:71:93:2b:7c:6e:
42:16:50:e9:37:62:c0:27:f3:5d:eb:b4:f4:a5:02:1d:f7:0a:
4e:63:d4:bb:23:ea:9d:d4:27:45:cb:c2:5d:7c:75:da:5c:7e:
c9:81:b3:13:d0:20:8b:1f:5b:76:d6:2c:2c:30:dd:0c:a6:53:
ec:1a:5f:e4:84:1b:24:25:60:2b:9f:b5:09:86:8a:e0:36:46:
34:70:6e:1b:11:60:ae:fb:6d:63:f9:33:71:69:36:5d:55:1a:
b7:9c:60:06:c5:7a:66:1c:16:ee:30:ad:d4:2f:78:37:ff:4b:
bb:a5:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:06:01 2025 by rpki-client