
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9wqSsz454xa7xQ9yciYDZS_0nT4.roa
File: 9wqSsz454xa7xQ9yciYDZS_0nT4.roa (raw, json)
Hash identifier: t7sNw5C01M0Lri24QEX27hUX97IHa1BqO6KYTgvz7io=
Subject key identifier: F7:0A:92:B3:3E:39:E3:16:BB:C5:0F:72:72:26:03:65:2F:F4:9D:3E
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01985A410B8CED836CB736406B6889538F07
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9wqSsz454xa7xQ9yciYDZS_0nT4.roa
Signing time: Wed 30 Jul 2025 07:34:28 +0000
ROA not before: Wed 30 Jul 2025 07:34:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35470
IP address blocks: 31.3.100.0/24 maxlen: 24
79.170.89.0/24 maxlen: 24
79.170.92.0/24 maxlen: 24
81.4.84.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
85.10.184.0/24 maxlen: 24
85.10.185.0/24 maxlen: 24
85.10.186.0/24 maxlen: 24
85.10.187.0/24 maxlen: 24
85.10.188.0/22 maxlen: 22
85.222.224.0/22 maxlen: 24
89.31.98.0/23 maxlen: 24
89.31.101.0/24 maxlen: 24
93.191.134.0/24 maxlen: 24
93.191.135.0/24 maxlen: 24
141.138.207.0/24 maxlen: 24
185.3.208.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
193.138.205.0/24 maxlen: 24
193.138.206.0/23 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
2a02:348::/32 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:59::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:60::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:5e6::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:41:0b:8c:ed:83:6c:b7:36:40:6b:68:89:53:8f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 30 07:34:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f70a92b33e39e316bbc50f72722603652ff49d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:0e:f7:da:2a:6c:e5:a5:9c:2c:4c:41:71:
7a:21:29:da:bb:c9:12:20:f9:0f:fd:55:60:33:ce:
4c:be:8e:1d:85:c2:bb:87:83:70:31:8d:fc:d5:18:
d1:68:35:e8:28:78:6d:11:5e:a1:d8:f0:0d:e9:65:
18:86:c9:99:fb:97:89:d6:c8:53:50:66:79:a8:ac:
d0:d7:ae:73:57:5d:9e:96:83:52:9b:c5:5d:88:06:
b3:06:f8:73:c4:5c:6c:82:4d:28:e4:fa:c8:5d:14:
a2:d9:98:2f:f7:95:9b:7e:b7:cc:75:85:7a:a4:cb:
97:06:ce:35:25:7c:4e:b6:4e:09:87:e6:5f:98:b8:
a7:2f:b5:5e:d4:6f:c5:2b:8e:f4:ae:35:c6:e6:3b:
97:c4:0c:71:14:0e:46:89:ca:9f:41:00:4c:04:d6:
db:56:b7:af:59:d8:ed:66:e6:13:97:9e:17:65:4d:
b1:e0:6b:a6:01:f2:6d:0c:f6:40:6e:71:99:78:8d:
ad:7b:85:64:bb:3a:8b:c1:1e:d3:3c:8c:e1:fa:53:
58:1c:97:21:20:22:2a:96:d1:eb:0d:3b:18:bb:b9:
0a:ba:ad:82:0d:ff:7a:66:ea:34:e6:d0:e9:ed:d6:
db:96:5c:49:31:25:42:7c:ad:95:5c:5a:1c:e3:93:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:92:B3:3E:39:E3:16:BB:C5:0F:72:72:26:03:65:2F:F4:9D:3E
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9wqSsz454xa7xQ9yciYDZS_0nT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.100.0/24
79.170.89.0/24
79.170.92.0/24
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/22
89.31.98.0/23
89.31.101.0/24
93.191.134.0/23
141.138.207.0/24
185.3.208.0/22
185.110.172.0/22
185.110.200.0/22
193.138.205.0-193.138.207.255
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
47:1f:0f:4b:d7:e1:64:2b:8f:22:42:1a:4f:7c:b0:ed:60:93:
8e:e3:1a:aa:47:95:2a:5a:b6:65:92:88:43:c4:be:6b:58:df:
cf:a6:69:ae:89:16:83:9e:ef:36:f1:ea:b4:e2:41:28:c5:f8:
12:44:b0:3a:0a:88:c0:7f:70:6f:96:91:49:ff:fb:71:e6:3c:
aa:aa:db:ff:5e:d0:a7:02:b0:92:04:6a:5e:6d:7a:82:51:f1:
51:bd:61:5c:1d:14:97:9c:e5:d6:b4:54:60:6a:31:09:76:78:
ea:a0:2f:ba:a9:13:3c:5d:2c:88:7b:4a:1c:42:c4:c9:59:ae:
2b:c7:4a:3f:82:c4:be:6b:12:5d:36:c6:60:b7:db:2f:48:21:
a4:5f:33:e8:0a:22:f4:62:a4:d2:94:38:46:19:82:fb:41:33:
96:1c:26:b5:af:f2:88:f6:cd:f0:05:a4:47:b2:00:b2:ee:4c:
db:1e:24:d9:fe:a8:97:36:43:5f:dc:69:3f:8b:fa:d7:f1:81:
b3:c0:a4:f3:ec:68:d9:36:a1:dd:ce:a6:4b:a2:5e:ec:72:c6:
37:84:c2:03:d5:bf:05:77:9c:a8:54:7f:90:e4:6a:59:01:26:
ad:5f:a3:7b:2e:a2:0a:34:f1:c5:50:b0:3a:70:eb:9e:6f:81:
a8:25:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:59 2025 by rpki-client