Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/th7EIeqoBKrwZJJeDzKMKUXwuxc.roa
File: th7EIeqoBKrwZJJeDzKMKUXwuxc.roa (raw, json)
Hash identifier: ALjgBdMNXEgXhwMxQ4HYp3b8XrLy/GtDIe9aOPg2/3k=
Subject key identifier: B6:1E:C4:21:EA:A8:04:AA:F0:64:92:5E:0F:32:8C:29:45:F0:BB:17
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019A173112CE13EF801A9C56CA992DB55E57
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/th7EIeqoBKrwZJJeDzKMKUXwuxc.roa
Signing time: Fri 24 Oct 2025 17:08:03 +0000
ROA not before: Fri 24 Oct 2025 17:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216129
IP address blocks: 81.30.105.0/24 maxlen: 24
95.215.56.0/24 maxlen: 24
107.161.154.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
148.253.208.0/24 maxlen: 24
148.253.209.0/24 maxlen: 24
148.253.210.0/24 maxlen: 24
148.253.211.0/24 maxlen: 24
148.253.212.0/24 maxlen: 24
148.253.213.0/24 maxlen: 24
148.253.214.0/24 maxlen: 24
148.253.215.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
185.28.85.0/24 maxlen: 24
185.56.162.0/24 maxlen: 24
194.164.245.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
2a13:d200:14::/48 maxlen: 48
2a13:d201::/48 maxlen: 48
2a13:d201:1::/48 maxlen: 48
2a13:d201:2::/48 maxlen: 48
2a13:d201:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:31:12:ce:13:ef:80:1a:9c:56:ca:99:2d:b5:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Oct 24 17:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b61ec421eaa804aaf064925e0f328c2945f0bb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:62:48:da:60:15:ba:f7:27:fe:f4:39:5d:
44:c3:3a:72:69:c5:5c:53:d9:21:d4:e3:5d:1f:e5:
d3:fc:54:16:f5:79:78:ee:a7:57:a0:9d:28:30:ce:
22:f3:0c:9d:ca:4b:46:5d:20:02:54:eb:1c:6a:55:
88:9c:4b:ee:41:fe:fc:b5:1e:56:00:bb:ed:f9:2a:
81:4c:e3:75:e4:76:f7:59:8d:a5:03:b2:dd:8d:aa:
2f:e6:4b:16:47:df:e8:42:8a:98:e7:59:11:c8:65:
28:f3:75:6e:23:3d:5c:57:87:f5:af:d3:4c:83:25:
5e:f1:00:7b:ab:f0:ab:d2:c4:5c:64:80:a1:6a:e2:
4c:f8:6d:fc:8e:5c:55:0f:f0:6c:e1:cf:f7:39:88:
47:36:5f:f6:07:85:64:a7:c9:9e:a7:6a:14:04:92:
06:13:5e:67:20:19:d1:5e:1f:ad:f7:b0:6b:24:92:
1b:6c:48:c3:54:60:55:b1:a2:62:df:14:58:0e:9b:
d0:34:28:cf:6b:86:7a:15:c4:f8:9e:e4:b3:b0:c5:
0b:1f:74:d1:3b:e6:5d:9c:91:35:24:25:e5:76:e0:
9c:d0:1f:b0:16:09:c1:58:69:d8:1c:a0:fe:d7:79:
1e:6c:3d:27:41:94:7e:0f:9b:14:ab:c4:26:84:60:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:C4:21:EA:A8:04:AA:F0:64:92:5E:0F:32:8C:29:45:F0:BB:17
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/th7EIeqoBKrwZJJeDzKMKUXwuxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
95.215.56.0/24
107.161.154.0/24
121.127.37.0/24
148.253.208.0/21
185.28.84.0/23
185.56.162.0/24
194.164.245.0/24
199.83.103.0/24
202.181.148.0/24
202.181.188.0/24
203.31.40.0/24
IPv6:
2a13:d200::-2a13:d201:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:27:66:db:47:48:98:9a:85:64:a9:c1:73:61:e1:40:4b:73:
c7:b2:50:b4:bb:83:59:dd:55:8d:2f:66:72:4c:a8:6f:e5:4d:
a4:c4:39:c2:e6:4c:b9:31:cb:81:2f:02:d5:1b:1a:39:d2:0e:
41:87:73:0f:91:78:2d:0b:90:9c:58:ec:29:4c:0c:96:68:44:
90:79:48:00:08:71:71:e8:59:79:5d:ba:b8:c4:94:ac:cc:b1:
ad:c4:cc:d2:bb:01:51:58:06:4a:37:03:71:6a:18:21:53:39:
5a:33:dc:09:a6:95:93:10:91:a5:4e:57:65:16:bc:8c:2f:f5:
13:e7:9f:75:ce:c6:1c:cb:16:bc:22:f7:c3:81:bd:ed:07:c1:
ce:62:07:c2:13:c5:7e:c6:45:2c:b0:6c:ab:a6:ba:a5:de:72:
94:dc:c4:f2:76:45:4c:cd:b7:66:93:91:44:d5:72:f4:42:c8:
37:78:84:2b:c0:87:02:0a:6b:78:e3:b0:76:b7:0b:f2:02:b1:
89:97:d6:6f:46:bd:9b:af:5e:42:3e:5a:1b:85:e5:d4:57:81:
2e:02:c4:8e:02:3c:55:c2:65:87:1d:8f:ee:3e:a7:82:c5:bd:
c7:92:32:bd:c5:32:98:d6:61:a4:68:8d:93:10:f7:d2:bb:55:
4a:d9:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:23 2025 by rpki-client