Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/MENkdArxSbvGxb2FDpAhSzvxqkI.roa
File: MENkdArxSbvGxb2FDpAhSzvxqkI.roa (raw, json)
Hash identifier: G2DKIb9WwWdrYl9OGQhSWlK/zqRziOZqJZrGam5Hnjc=
Subject key identifier: 30:43:64:74:0A:F1:49:BB:C6:C5:BD:85:0E:90:21:4B:3B:F1:AA:42
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01976379D43F39C6C9392D2F40B2D7D0557F
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/MENkdArxSbvGxb2FDpAhSzvxqkI.roa
Signing time: Thu 12 Jun 2025 09:30:17 +0000
ROA not before: Thu 12 Jun 2025 09:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 24
37.230.172.0/22 maxlen: 24
37.230.188.0/22 maxlen: 24
45.133.96.0/22 maxlen: 24
46.21.244.0/22 maxlen: 24
51.250.0.0/17 maxlen: 24
62.84.112.0/20 maxlen: 24
84.201.128.0/18 maxlen: 24
84.252.128.0/20 maxlen: 24
89.169.128.0/18 maxlen: 24
89.232.188.0/22 maxlen: 24
92.255.1.0/24 maxlen: 24
92.255.3.0/24 maxlen: 24
93.77.160.0/19 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.240.0/20 maxlen: 24
130.193.32.0/19 maxlen: 24
158.160.0.0/16 maxlen: 24
178.154.192.0/18 maxlen: 24
185.206.164.0/22 maxlen: 24
185.216.194.0/23 maxlen: 24
193.32.216.0/22 maxlen: 24
213.165.192.0/19 maxlen: 24
217.28.224.0/20 maxlen: 24
217.198.168.0/21 maxlen: 24
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:79:d4:3f:39:c6:c9:39:2d:2f:40:b2:d7:d0:55:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jun 12 09:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=304364740af149bbc6c5bd850e90214b3bf1aa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:56:19:e6:92:ba:95:77:57:3f:0e:24:1d:
43:68:5f:6f:62:7a:df:a7:18:de:f5:7f:7d:f0:b3:
85:c6:b9:d2:4e:e8:77:50:34:45:32:39:17:9c:6a:
e8:ce:38:9c:b7:7b:54:da:54:60:e2:96:7a:25:9a:
65:1f:ad:ac:42:21:f2:92:76:8a:7f:0c:fa:df:f3:
b1:56:eb:36:03:f8:a9:8f:94:be:fb:51:e5:8e:92:
f9:54:ea:dc:82:1c:2b:63:b1:5f:32:78:ce:b2:bd:
bc:a8:03:08:03:06:8d:d2:6a:7c:8a:7d:75:6a:ae:
73:77:89:30:6f:0b:3e:a9:74:a5:ea:4a:df:58:73:
30:0f:df:d3:60:d3:04:21:5c:d7:2c:9d:36:33:89:
58:21:2d:20:31:a1:f7:34:14:e7:f3:f3:13:96:d5:
1b:db:cf:0b:50:15:6a:7d:a1:d3:ff:d1:7e:cb:18:
e5:89:ea:d9:68:8a:07:84:48:a4:59:0f:a9:59:2c:
89:74:8b:9f:3c:6c:52:cf:38:cc:8f:54:b5:a0:ca:
8a:6b:81:21:cc:f5:6a:19:14:90:04:07:30:64:55:
f6:e9:f8:59:f3:65:8e:2a:59:d4:69:d3:11:56:51:
25:95:49:e7:9d:65:35:d2:85:e1:74:99:5e:02:fc:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:64:74:0A:F1:49:BB:C6:C5:BD:85:0E:90:21:4B:3B:F1:AA:42
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/MENkdArxSbvGxb2FDpAhSzvxqkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
46.21.244.0/22
51.250.0.0/17
62.84.112.0/20
84.201.128.0/18
84.252.128.0/20
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
93.77.160.0/19
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:bf:90:e4:5f:3c:ac:99:4f:db:a3:c7:45:dd:b4:f9:e3:6e:
9f:78:83:82:59:3d:61:25:65:ef:e3:38:0d:66:05:36:a5:d2:
b9:23:75:32:fa:47:ff:8a:3c:c8:2f:e5:da:d8:54:c7:7e:c7:
0a:a5:68:f6:9a:49:90:bd:b8:dc:e9:e9:ed:1a:0c:0d:77:0f:
f3:e5:88:cb:eb:30:77:07:58:2a:70:0a:c5:8f:40:63:d5:be:
2b:05:56:e5:80:68:4a:bb:b4:27:8d:ff:b7:73:3d:2e:6e:64:
2c:86:62:64:12:b3:95:93:fc:e8:c1:46:d8:10:9a:24:77:3d:
f0:4b:77:ef:25:22:01:78:3c:56:f9:ce:f4:de:f5:15:f2:2e:
4e:c4:1d:83:ad:df:b0:22:e7:c9:99:dd:fd:f5:43:b1:74:0b:
65:86:dd:d1:a9:7b:65:91:cb:4c:65:aa:73:7b:67:45:4c:9f:
54:42:8b:86:dd:4b:e0:1f:fc:2d:65:35:b5:5a:3b:6f:df:0a:
54:0d:da:91:17:a4:cc:4c:37:26:d7:af:05:ec:2a:d5:2d:d4:
bd:8e:79:d6:af:16:ad:48:09:37:1d:3f:e9:6f:2b:10:5e:85:
20:32:2f:bd:99:38:5e:f6:0f:64:f0:8f:fe:d3:42:01:f1:a8:
8f:e7:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:14:53 2025 by rpki-client