Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa
File: 2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa (raw, json)
Hash identifier: cCZE3JeNkWpHPZrQkRbXS7MTAFRrdoU+BJzK4LD0G4Y=
Subject key identifier: DB:39:1F:64:3C:2C:2F:B1:CD:53:62:D3:C8:80:D8:C4:70:71:53:A6
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019A25F2892387D233280AE25063B2E2F2F0
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa
Signing time: Mon 27 Oct 2025 13:54:03 +0000
ROA not before: Mon 27 Oct 2025 13:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 31.42.156.0/24 maxlen: 24
31.42.157.0/24 maxlen: 24
31.42.158.0/24 maxlen: 24
31.42.159.0/24 maxlen: 24
185.102.48.0/24 maxlen: 24
185.102.49.0/24 maxlen: 24
185.102.50.0/24 maxlen: 24
185.102.51.0/24 maxlen: 24
185.183.88.0/24 maxlen: 24
185.183.89.0/24 maxlen: 24
185.183.90.0/24 maxlen: 24
185.183.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f2:89:23:87:d2:33:28:0a:e2:50:63:b2:e2:f2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Oct 27 13:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db391f643c2c2fb1cd5362d3c880d8c4707153a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:03:54:33:68:fa:70:ec:a4:48:62:b3:37:
62:4c:e3:eb:c6:37:e8:1b:a6:f5:60:cb:29:e6:9f:
ca:cb:38:ea:e9:70:4e:37:13:1a:36:f3:76:f5:bc:
3b:d5:1f:ed:39:ce:bc:c9:91:f8:a6:f2:f8:d7:1e:
35:4e:7f:52:16:3b:82:da:d9:de:3b:8a:03:d9:87:
31:41:77:b0:48:cb:fc:8a:3e:25:2c:0c:fd:62:fc:
0d:c5:d6:2d:b2:d9:d3:31:ff:77:4f:fa:65:ac:da:
61:0b:ad:f4:99:a5:82:a1:1c:0b:6b:5d:c3:c1:10:
5b:53:73:16:b7:f3:de:20:61:8b:05:49:44:a5:02:
96:ef:d8:96:e9:52:62:c3:17:56:d5:4c:4a:23:8c:
aa:d8:48:7e:41:5e:5e:56:a7:0c:17:5c:24:08:f8:
4a:c3:7e:13:91:94:a9:c6:4d:a2:35:ca:a4:02:fe:
ec:c6:5d:c5:75:7b:b1:54:00:b2:52:b2:05:c6:7f:
d9:7d:af:73:19:ae:84:44:b3:7e:c1:5a:3b:bb:0f:
ac:57:63:03:88:9a:82:92:09:91:03:56:70:cf:e9:
59:e4:89:68:f0:34:11:79:73:ae:8d:47:df:ec:b5:
8d:86:fd:cd:b5:ac:08:56:ab:e7:9c:fd:e4:f2:d6:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:1F:64:3C:2C:2F:B1:CD:53:62:D3:C8:80:D8:C4:70:71:53:A6
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/2zkfZDwsL7HNU2LTyIDYxHBxU6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.156.0/22
185.102.48.0/22
185.183.88.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:ee:fb:e4:c9:6f:c7:84:0f:d7:a2:4e:e0:cb:12:1d:1d:3b:
8d:e3:d6:1c:cf:26:a0:0e:8e:93:01:9e:c5:1c:58:80:36:be:
40:0d:44:43:bd:90:a4:8c:33:81:9e:e4:43:72:dd:47:dc:d8:
70:b4:78:0f:4a:48:fb:00:6c:a7:95:18:a4:20:8e:8a:24:b9:
1f:ca:1a:6f:b2:e3:48:70:a5:15:8f:16:92:1f:20:bf:9b:80:
df:ce:65:85:7b:a8:89:97:74:90:74:29:8d:32:92:76:1c:9b:
55:ab:20:bc:2c:7e:da:5b:77:de:8e:44:f1:7b:f9:ee:fa:50:
12:2d:aa:5f:9f:15:4b:0c:29:b7:06:f5:26:a9:22:bd:fd:fa:
80:65:50:6f:83:ce:54:bd:64:37:4e:3a:e6:9b:b8:cd:85:56:
54:fb:f0:00:f0:34:fd:97:dc:35:aa:8a:48:04:c6:ca:70:a7:
d8:44:9c:3a:3f:6b:9f:8f:16:35:40:44:35:98:5a:ab:01:c4:
cb:24:d2:b3:fc:ac:13:e7:58:20:3e:fc:c2:3a:5f:2c:12:77:
86:3c:29:ef:98:f6:eb:f5:70:0a:02:f8:5f:2d:1b:3c:3d:fa:
36:c4:8f:a0:16:87:09:98:7d:12:a2:37:d7:8a:11:31:5d:e2:
bb:ad:8b:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZol8okjh9IzKAriUGOy4vLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjUxMDI3MTM1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjM5MWY2NDNjMmMyZmIxY2Q1MzYyZDNjODgwZDhjNDcwNzE1M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/0DVDNo+nDspEhiszdiTOPrxjfo
G6b1YMsp5p/Kyzjq6XBONxMaNvN29bw71R/tOc68yZH4pvL41x41Tn9SFjuC2tne
O4oD2YcxQXewSMv8ij4lLAz9YvwNxdYtstnTMf93T/plrNphC630maWCoRwLa13D
wRBbU3MWt/PeIGGLBUlEpQKW79iW6VJiwxdW1UxKI4yq2Eh+QV5eVqcMF1wkCPhK
w34TkZSpxk2iNcqkAv7sxl3FdXuxVACyUrIFxn/Zfa9zGa6ERLN+wVo7uw+sV2MD
iJqCkgmRA1Zwz+lZ5Ilo8DQReXOujUff7LWNhv3NtawIVqvnnP3k8tYthwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNs5H2Q8LC+xzVNi08iA2MRwcVOmMB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvMnprZlpEd3NMN0hOVTJMVHlJRFl4SEJ4VTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHyqcAwQC
uWYwAwQCubdYMA0GCSqGSIb3DQEBCwUAA4IBAQDN7vvkyW/HhA/Xok7gyxIdHTuN
49YczyagDo6TAZ7FHFiANr5ADURDvZCkjDOBnuRDct1H3NhwtHgPSkj7AGynlRik
II6KJLkfyhpvsuNIcKUVjxaSHyC/m4DfzmWFe6iJl3SQdCmNMpJ2HJtVqyC8LH7a
W3fejkTxe/nu+lASLapfnxVLDCm3BvUmqSK9/fqAZVBvg85UvWQ3Tjrmm7jNhVZU
+/AA8DT9l9w1qopIBMbKcKfYRJw6P2ufjxY1QEQ1mFqrAcTLJNKz/KwT51ggPvzC
Ol8sEneGPCnvmPbr9XAKAvhfLRs8Pfo2xI+gFocJmH0SojfXihExXeK7rYtN
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:09 2025 by rpki-client