Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/gF9AtOV4y334nPzJwa1xKq8JRBY.roa
File: gF9AtOV4y334nPzJwa1xKq8JRBY.roa (raw, json)
Hash identifier: tci0tO4mIXI8f6KCjuDjM6OxpiRuy66iIvz6gSiWjns=
Subject key identifier: 80:5F:40:B4:E5:78:CB:7D:F8:9C:FC:C9:C1:AD:71:2A:AF:09:44:16
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01987F0769CC6A374E75FD736F4A1532E687
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/gF9AtOV4y334nPzJwa1xKq8JRBY.roa
Signing time: Wed 06 Aug 2025 10:57:28 +0000
ROA not before: Wed 06 Aug 2025 10:57:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 24
37.230.172.0/22 maxlen: 24
37.230.188.0/22 maxlen: 24
45.133.96.0/22 maxlen: 24
46.21.244.0/22 maxlen: 24
51.250.0.0/17 maxlen: 24
62.84.112.0/20 maxlen: 24
84.201.128.0/18 maxlen: 24
84.252.128.0/20 maxlen: 24
89.169.128.0/18 maxlen: 24
89.232.188.0/22 maxlen: 24
92.255.1.0/24 maxlen: 24
92.255.3.0/24 maxlen: 24
92.255.13.0/24 maxlen: 24
93.77.160.0/19 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.240.0/20 maxlen: 24
130.193.32.0/19 maxlen: 24
158.160.0.0/16 maxlen: 24
178.154.192.0/18 maxlen: 24
185.206.164.0/22 maxlen: 24
185.216.194.0/23 maxlen: 24
193.32.216.0/22 maxlen: 24
194.247.51.0/24 maxlen: 24
213.165.192.0/19 maxlen: 24
217.28.224.0/20 maxlen: 24
217.198.168.0/21 maxlen: 24
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:07:69:cc:6a:37:4e:75:fd:73:6f:4a:15:32:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Aug 6 10:57:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805f40b4e578cb7df89cfcc9c1ad712aaf094416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:63:cb:9f:73:37:ea:72:66:34:b4:46:89:
d0:33:6a:92:76:63:23:8a:e0:0b:ba:0d:a5:ab:7b:
e0:26:1b:84:70:c8:c8:14:b6:65:93:90:65:7f:78:
6d:0c:f6:34:bd:0a:37:ce:64:db:97:c7:9d:a2:f0:
a8:60:86:10:15:6d:77:f9:b0:75:05:b8:3d:65:82:
84:aa:83:9d:97:46:04:c1:a6:e0:89:3f:a6:e9:6f:
d2:36:56:97:ed:e9:a8:b5:ad:b8:a5:0d:74:75:64:
18:c9:c0:19:20:50:19:54:da:8b:d7:a0:b5:3f:9a:
32:88:fe:9f:21:ba:12:bd:7b:10:3e:d2:fe:76:01:
8e:6d:63:18:26:83:43:7c:6d:61:36:b4:a9:88:a9:
3a:18:8b:a4:59:06:7f:d4:b2:ea:82:c0:ce:8d:35:
4d:aa:5d:44:04:09:b5:eb:25:32:e5:b3:14:a6:89:
32:4a:d5:d2:01:e7:f7:b2:45:c0:0b:45:ab:4f:e2:
9b:82:5d:56:fb:43:21:8f:e0:31:6f:ae:2b:1c:57:
28:4f:c6:3a:31:a8:5e:e0:f8:71:cf:ba:d5:2c:e4:
fa:41:01:7f:50:32:76:be:fe:c4:7e:42:bf:4c:34:
36:26:1b:5f:91:5b:ce:c9:50:ae:c5:90:05:16:e0:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:40:B4:E5:78:CB:7D:F8:9C:FC:C9:C1:AD:71:2A:AF:09:44:16
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/gF9AtOV4y334nPzJwa1xKq8JRBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
46.21.244.0/22
51.250.0.0/17
62.84.112.0/20
84.201.128.0/18
84.252.128.0/20
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
92.255.13.0/24
93.77.160.0/19
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.247.51.0/24
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:16:6f:e5:69:14:46:8d:cb:1f:40:29:c3:21:d4:24:f7:13:
ab:85:6d:85:76:10:0c:e8:db:12:e1:00:a3:48:8a:6e:4b:2b:
58:97:7f:32:98:38:40:96:52:a5:d7:c2:5f:93:56:54:32:7f:
47:a9:a2:9d:31:4d:7f:10:36:da:a3:57:64:e3:80:ee:d7:fb:
56:75:26:16:a6:7b:f6:73:0e:0b:8b:de:50:44:fd:65:15:3c:
f6:da:2c:28:10:fb:0a:a3:b1:67:bd:cc:80:c6:d5:d3:fb:2f:
0b:22:77:eb:63:34:e7:ef:64:d4:18:7d:62:ea:96:fb:ad:a9:
1c:f3:6a:fc:e0:5f:e7:ec:c8:1d:6c:d4:c2:cc:03:d8:51:2d:
25:39:7b:27:92:40:a0:20:0a:b6:3e:97:f6:72:7c:b0:09:be:
b2:4f:0d:57:a4:93:fe:4c:6b:c8:bb:ad:5d:58:40:94:2e:dc:
ba:d7:a8:b0:e1:22:6f:4f:a8:59:0e:e2:6c:dc:67:90:5a:d3:
0f:1b:50:7a:52:e3:f1:07:fa:42:8f:7c:d8:df:92:80:cb:9e:
ce:38:62:e0:f7:ae:e8:05:2a:12:01:0d:c1:3b:6c:fb:87:95:
e8:89:0a:14:68:56:f7:2f:00:28:7d:f8:95:d9:64:5b:52:10:
b3:f6:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:18 2025 by rpki-client