Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/V6WIAX2k_9YhzK9UDN0xMDhX17Q.roa
File: V6WIAX2k_9YhzK9UDN0xMDhX17Q.roa (raw, json)
Hash identifier: PY1dfG3R2HZllFQevVe4jheypEOunn8/d6GHPvaFs+Q=
Subject key identifier: 57:A5:88:01:7D:A4:FF:D6:21:CC:AF:54:0C:DD:31:30:38:57:D7:B4
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019A492B9056E0A52E5CFD9DA88993133B71
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/V6WIAX2k_9YhzK9UDN0xMDhX17Q.roa
Signing time: Mon 03 Nov 2025 10:03:03 +0000
ROA not before: Mon 03 Nov 2025 10:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398781
IP address blocks: 31.13.211.0/24 maxlen: 32
45.81.39.0/24 maxlen: 32
67.211.224.0/20 maxlen: 32
69.160.128.0/20 maxlen: 32
69.160.144.0/20 maxlen: 32
80.76.48.0/24 maxlen: 32
81.31.193.0/24 maxlen: 32
85.217.222.0/23 maxlen: 32
87.120.4.0/24 maxlen: 32
87.120.38.0/24 maxlen: 32
87.120.59.0/24 maxlen: 32
87.120.60.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.236.0/24 maxlen: 32
87.121.20.0/24 maxlen: 32
87.121.21.0/24 maxlen: 32
87.121.45.0/24 maxlen: 32
87.121.87.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.73.0/24 maxlen: 32
93.123.117.0/24 maxlen: 32
93.123.119.0/24 maxlen: 32
94.156.12.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.239.0/24 maxlen: 32
94.156.248.0/24 maxlen: 32
185.207.13.0/24 maxlen: 32
213.254.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:2b:90:56:e0:a5:2e:5c:fd:9d:a8:89:93:13:3b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Nov 3 10:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a588017da4ffd621ccaf540cdd31303857d7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:ad:b8:34:fd:aa:58:fa:a8:78:c0:08:fb:
ce:64:22:02:07:49:31:5a:95:6f:d5:18:b2:47:09:
30:ee:83:00:f0:9e:ed:82:0d:a0:ee:7b:3c:60:ce:
5f:97:97:13:67:41:86:96:ac:fa:44:e7:3e:c3:b0:
83:d8:b0:9b:48:4a:78:bc:a0:15:f0:c7:a9:4c:76:
35:fe:99:a4:95:58:d2:d1:45:d3:61:96:88:1d:85:
93:ff:fe:af:22:93:cd:63:e3:8d:c9:3a:25:d8:b8:
06:35:d7:a2:d8:de:5c:01:e7:43:e3:2b:11:1f:30:
f1:1a:09:6c:ea:1b:fa:08:55:a2:c6:7b:94:e0:8f:
03:6e:bb:90:ce:ca:01:92:55:2c:61:8d:d9:22:ec:
a8:42:ca:67:d7:f6:0c:9d:39:df:77:dc:af:3b:f8:
be:e6:75:df:88:76:c3:11:ab:0d:b6:b6:c8:33:79:
9f:df:96:7c:a3:54:1c:6f:e4:5a:4b:13:2c:07:72:
e5:f2:62:8c:46:66:d8:9c:49:bb:1e:8c:f6:ad:b3:
43:45:05:b3:84:12:a9:d7:c6:8e:63:c0:d7:7a:69:
81:9d:79:d2:2a:08:7e:30:c9:88:5f:3c:bc:5c:f4:
c5:8f:63:2e:33:62:89:22:a4:ae:c4:26:23:3b:80:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:88:01:7D:A4:FF:D6:21:CC:AF:54:0C:DD:31:30:38:57:D7:B4
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/V6WIAX2k_9YhzK9UDN0xMDhX17Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.81.39.0/24
67.211.224.0/20
69.160.128.0/19
80.76.48.0/24
81.31.193.0/24
85.217.222.0/23
87.120.4.0/24
87.120.38.0/24
87.120.59.0-87.120.60.255
87.120.98.0/24
87.120.236.0/24
87.121.20.0/23
87.121.45.0/24
87.121.87.0/24
91.92.230.0/24
93.123.47.0/24
93.123.73.0/24
93.123.117.0/24
93.123.119.0/24
94.156.12.0/24
94.156.130.0/24
94.156.239.0/24
94.156.248.0/24
185.207.13.0/24
213.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:15:3b:ee:c9:1b:c8:13:f6:b2:9b:44:a9:6e:70:78:83:91:
88:fc:7a:74:4f:c2:f2:7d:ef:81:55:a7:0e:1d:37:12:52:1b:
a1:85:5d:9f:4e:90:74:08:a8:45:b4:f3:07:d2:c9:9e:f0:4f:
f6:0f:ba:04:f5:e7:91:6d:dc:da:ef:56:cb:12:41:60:2c:60:
94:6d:94:f0:24:4f:32:19:33:ad:08:f6:53:7f:0c:4b:6f:ea:
b8:9c:75:d9:50:b2:8a:51:96:d4:96:5f:8d:a4:f0:59:2b:10:
8a:e8:a3:a8:5a:3e:9c:1c:a1:99:d0:0d:5d:ef:e6:11:ff:35:
ac:81:d8:d5:b7:34:4a:fc:2e:dd:53:ba:a3:97:27:c1:be:a3:
19:b3:49:94:35:80:2e:aa:62:de:f6:4c:38:50:71:15:28:c8:
ed:3f:e5:4b:9f:14:ef:84:18:02:c5:70:82:cc:46:15:6f:06:
65:f2:32:9b:09:70:28:dd:90:d8:7a:fa:a5:58:75:02:cb:55:
49:f1:79:ab:f4:1e:50:a1:2d:3e:f6:c4:48:c9:a7:3f:c4:52:
22:1a:cc:eb:0f:3b:c8:05:5d:f2:7b:fb:99:3b:dc:2d:22:ee:
33:6d:a4:12:75:cb:40:2b:09:93:b5:58:83:5b:03:8d:e5:0d:
25:78:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:21 2025 by rpki-client