Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/x2vhjp4ROCl1f2P_fCn9QrzE2Y8.roa
File: x2vhjp4ROCl1f2P_fCn9QrzE2Y8.roa (raw, json)
Hash identifier: QnHMlxe02f4k1tZI5zHGxQjLOy1IlK/sA708CDdDH5k=
Subject key identifier: C7:6B:E1:8E:9E:11:38:29:75:7F:63:FF:7C:29:FD:42:BC:C4:D9:8F
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 019A3038D7DF34567910E693CFE972EEBE8A
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/x2vhjp4ROCl1f2P_fCn9QrzE2Y8.roa
Signing time: Wed 29 Oct 2025 13:47:02 +0000
ROA not before: Wed 29 Oct 2025 13:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49683
IP address blocks: 31.25.234.0/24 maxlen: 24
31.25.235.0/24 maxlen: 24
31.25.236.0/22 maxlen: 24
31.25.236.0/24 maxlen: 24
31.25.237.0/24 maxlen: 24
31.25.239.0/24 maxlen: 24
171.22.172.0/24 maxlen: 24
171.22.173.0/24 maxlen: 24
171.22.174.0/24 maxlen: 24
171.22.175.0/24 maxlen: 24
185.44.64.0/24 maxlen: 24
185.44.65.0/24 maxlen: 24
185.44.66.0/24 maxlen: 24
185.44.67.0/24 maxlen: 24
185.85.240.0/24 maxlen: 24
185.85.241.0/24 maxlen: 24
185.85.242.0/24 maxlen: 24
185.85.243.0/24 maxlen: 24
185.116.236.0/24 maxlen: 24
185.116.237.0/24 maxlen: 24
185.116.238.0/24 maxlen: 24
185.116.239.0/24 maxlen: 24
185.122.164.0/24 maxlen: 24
185.122.165.0/24 maxlen: 24
185.122.166.0/24 maxlen: 24
185.122.167.0/24 maxlen: 24
185.168.192.0/24 maxlen: 24
185.168.193.0/24 maxlen: 24
185.168.194.0/24 maxlen: 24
185.168.195.0/24 maxlen: 24
185.184.68.0/24 maxlen: 24
185.184.69.0/24 maxlen: 24
185.184.70.0/24 maxlen: 24
185.184.71.0/24 maxlen: 24
185.189.56.0/24 maxlen: 24
185.189.57.0/24 maxlen: 24
185.189.58.0/24 maxlen: 24
185.189.59.0/24 maxlen: 24
2a0a:2f00:1::/48 maxlen: 48
2a0a:2f00:2::/48 maxlen: 48
2a0a:2f00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:38:d7:df:34:56:79:10:e6:93:cf:e9:72:ee:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Oct 29 13:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c76be18e9e113829757f63ff7c29fd42bcc4d98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:95:62:28:7c:4a:c3:93:09:4a:8e:fb:ac:
d2:05:12:a4:06:d0:1f:a0:fd:db:79:22:4d:cb:f2:
d6:df:09:37:b1:ba:85:cd:63:85:8d:46:16:dc:7e:
6e:c2:29:bb:09:3a:47:29:de:00:9a:a7:74:b1:ed:
52:80:70:ad:de:46:5f:53:4d:cc:77:00:a5:b4:37:
91:3e:0b:58:cf:ff:41:ae:c7:36:db:c1:02:8a:f6:
84:6b:9f:d8:08:3b:8d:33:db:90:ae:cf:b5:5f:33:
20:5e:54:18:6d:07:42:33:5b:aa:12:e1:fb:b7:95:
1c:78:52:b1:68:30:13:6d:40:f5:50:96:4a:96:de:
14:f4:a1:f3:de:28:35:94:c7:52:8c:07:b9:96:78:
cd:b4:f9:12:ff:5d:c3:45:b6:79:34:05:fc:d8:6a:
05:49:41:fa:fa:81:83:b2:cd:c1:ae:9e:0e:91:f6:
47:dc:70:c6:be:3e:59:b9:a8:4e:75:05:76:50:ca:
87:a8:03:8c:2c:44:68:e9:13:3f:79:fc:91:42:d0:
bc:95:91:70:5e:a9:1b:b3:c8:8a:16:ef:e7:c0:11:
d4:e5:fc:56:ad:63:02:63:ff:1d:54:13:7b:9f:b2:
91:b1:27:30:b8:b8:bd:58:a6:dd:f2:89:26:a6:0a:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6B:E1:8E:9E:11:38:29:75:7F:63:FF:7C:29:FD:42:BC:C4:D9:8F
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/x2vhjp4ROCl1f2P_fCn9QrzE2Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.234.0-31.25.239.255
171.22.172.0/22
185.44.64.0/22
185.85.240.0/22
185.116.236.0/22
185.122.164.0/22
185.168.192.0/22
185.184.68.0/22
185.189.56.0/22
IPv6:
2a0a:2f00:1::-2a0a:2f00:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:b9:a2:48:20:e8:ca:41:19:e6:37:ca:d5:96:b3:59:da:87:
8c:2e:d4:b4:8d:9d:c1:7c:d6:55:ea:b7:3b:83:c9:8f:7e:7a:
b6:12:62:98:0c:bd:73:f0:00:8e:73:b9:18:6e:e7:e3:fb:03:
a9:36:a3:c7:80:7a:f2:95:2c:bd:83:9b:fb:af:75:9c:9f:43:
66:69:86:4a:f5:3d:5b:84:da:66:7c:25:59:3e:e5:6e:83:5e:
6b:57:24:62:c8:de:ec:12:5a:74:83:64:7e:06:eb:26:c3:eb:
27:10:f5:ee:dd:df:82:7e:65:ba:ed:7f:b4:b1:d4:73:2e:a9:
de:b0:0f:8c:70:48:2a:cf:a6:ac:8b:2e:a4:a6:2e:9d:3d:ae:
4e:1a:4e:73:71:5c:03:52:5a:e1:b7:7c:3a:c3:7c:0d:e3:a9:
c2:c2:29:e9:ac:f4:ca:7a:01:ec:06:00:60:04:6f:26:56:01:
14:33:83:ed:c6:f3:13:46:86:6c:23:60:fa:f6:d0:f3:0b:d6:
ee:ca:98:e0:51:16:e3:61:f4:47:2d:1a:c4:69:54:43:ba:52:
52:b6:f7:0b:61:63:7f:f0:6c:96:92:8c:2d:0c:70:4f:88:02:
13:f3:ee:28:6b:09:d1:dc:3b:c5:2e:9d:15:8f:c4:37:32:13:
99:30:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:48:23 2025 by rpki-client