Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/sG6LQp_gQ94ODISJjZUd2s3wp-s.roa
File: sG6LQp_gQ94ODISJjZUd2s3wp-s.roa (raw, json)
Hash identifier: BwAZqLpT7OhVUlTGHfY2WKqDcBZLalSsu2uZKqZNG2s=
Subject key identifier: B0:6E:8B:42:9F:E0:43:DE:0E:0C:84:89:8D:95:1D:DA:CD:F0:A7:EB
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 0198600FDC7DD6549A039C6FE4938A9ED831
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/sG6LQp_gQ94ODISJjZUd2s3wp-s.roa
Signing time: Thu 31 Jul 2025 10:38:28 +0000
ROA not before: Thu 31 Jul 2025 10:38:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208677
IP address blocks: 31.40.248.0/23 maxlen: 23
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
37.44.198.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
45.132.176.0/22 maxlen: 22
45.136.146.0/23 maxlen: 23
45.151.30.0/23 maxlen: 23
45.155.204.0/23 maxlen: 23
46.16.36.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
46.253.132.0/24 maxlen: 24
62.233.43.0/24 maxlen: 24
82.202.136.0/21 maxlen: 21
82.202.156.0/22 maxlen: 22
84.54.56.0/22 maxlen: 22
85.208.85.0/24 maxlen: 24
85.208.86.0/23 maxlen: 23
85.208.209.0/24 maxlen: 24
85.208.210.0/23 maxlen: 23
85.209.149.0/24 maxlen: 24
85.209.150.0/23 maxlen: 23
85.235.82.0/23 maxlen: 24
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
88.218.65.0/24 maxlen: 24
88.218.66.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
94.158.22.0/23 maxlen: 23
95.174.88.0/21 maxlen: 21
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
152.89.196.0/24 maxlen: 24
176.108.240.0/20 maxlen: 20
176.109.96.0/20 maxlen: 20
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
185.234.11.0/24 maxlen: 24
185.241.57.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
192.144.28.0/24 maxlen: 24
193.42.116.0/23 maxlen: 23
193.105.4.0/24 maxlen: 24
193.163.94.0/24 maxlen: 24
193.201.8.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
194.26.228.0/24 maxlen: 24
194.50.72.0/24 maxlen: 24
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
213.171.24.0/21 maxlen: 21
213.178.153.0/24 maxlen: 24
213.178.154.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:0f:dc:7d:d6:54:9a:03:9c:6f:e4:93:8a:9e:d8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Jul 31 10:38:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b06e8b429fe043de0e0c84898d951ddacdf0a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:05:6c:89:d1:ad:ff:fc:37:9b:d9:41:aa:
54:24:0d:e2:3e:71:5b:80:c7:de:26:66:78:9d:03:
44:40:0f:9b:9d:fe:96:35:96:55:7d:eb:e7:c3:6e:
86:ea:a1:cd:6b:4b:00:90:4f:33:f9:b0:6b:63:af:
ea:2f:bb:40:8e:29:02:fb:67:3d:fd:c4:75:d2:05:
bc:26:c3:08:c3:4e:81:82:33:28:f6:9c:a7:32:ff:
61:16:2d:b7:98:a3:8e:f1:e7:0b:dd:98:cb:d5:e7:
be:74:9e:87:b0:0a:e1:db:17:f8:3e:b7:45:d4:8b:
8f:e9:b7:b6:be:1e:6b:84:a8:16:ae:5c:6f:e0:56:
69:d7:e2:31:b5:49:02:9a:80:70:24:52:06:9b:e5:
83:a1:22:3f:23:9e:69:01:1f:a2:89:c5:c2:d4:6e:
a8:31:cb:ed:2a:30:d3:c1:2a:3c:5e:e6:6b:fe:ad:
66:e3:ce:77:44:cb:e0:a1:29:db:f4:0e:8e:2a:7f:
a7:17:63:83:d3:5c:33:9b:9c:ec:ea:aa:bd:3c:88:
d3:cb:80:f1:38:e4:94:94:e2:ed:7c:68:66:56:9c:
4a:4b:77:e3:52:4a:f0:a0:02:69:cf:02:09:63:64:
99:93:1f:73:aa:41:5b:9e:5e:a6:db:54:1b:28:f1:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:8B:42:9F:E0:43:DE:0E:0C:84:89:8D:95:1D:DA:CD:F0:A7:EB
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/sG6LQp_gQ94ODISJjZUd2s3wp-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/23
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.44.196.0-37.44.198.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
45.132.176.0/22
45.136.146.0/23
45.151.30.0/23
45.155.204.0/23
46.16.36.0/24
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
46.253.132.0/24
62.233.43.0/24
82.202.136.0/21
82.202.156.0/22
84.54.56.0/22
85.208.85.0-85.208.87.255
85.208.209.0-85.208.211.255
85.209.149.0-85.209.151.255
85.235.82.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
88.218.65.0-88.218.67.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.224.86.0/23
94.139.252.0/22
94.158.22.0/23
95.174.88.0/21
141.101.151.0-141.101.152.255
141.101.201.0/24
152.89.196.0/24
176.108.240.0/20
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
185.234.11.0/24
185.241.57.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
192.144.28.0/24
193.42.116.0/23
193.105.4.0/24
193.163.94.0/24
193.201.8.0/24
194.5.92.0/23
194.26.228.0/24
194.50.72.0/24
194.113.34.0/23
195.128.152.0/24
213.171.24.0/21
213.178.153.0-213.178.154.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
78:f7:b8:1c:cc:a0:37:34:05:a8:63:20:b0:f0:fe:19:6e:4d:
6d:89:8b:e5:c6:aa:13:96:b4:4b:4c:2d:f5:59:78:48:2c:17:
87:44:f7:27:de:e4:f9:36:2b:f2:fa:f9:d3:31:d9:30:87:27:
8e:88:9c:cd:73:3c:eb:90:2e:da:94:a5:4c:ac:b6:db:fa:4e:
1e:91:cc:b9:d1:64:85:b9:a7:db:52:a6:d8:04:ab:10:36:b3:
02:29:f0:af:00:71:ac:03:c7:32:b1:3d:fb:89:f3:ab:58:29:
45:48:32:d3:d8:7e:7d:7f:43:3b:fc:d1:4a:46:69:6f:dd:67:
3d:e1:68:20:19:fc:c9:e2:10:8a:b6:e5:63:81:e8:cf:49:ef:
72:45:d7:ea:21:ca:be:a2:e7:e6:53:2a:e5:5a:d1:c1:b5:be:
81:f6:6c:ea:29:03:75:35:07:c9:6a:4d:c4:ff:1d:9f:f3:8a:
b9:ad:0f:25:eb:e2:28:06:09:b8:37:87:64:61:ce:2b:3c:e2:
4f:5a:f8:c1:72:c3:18:bb:c0:00:7c:fa:dd:82:0b:64:1f:b4:
62:73:85:aa:84:88:9e:4f:d0:68:15:39:e1:07:a2:cf:22:b3:
3a:91:7b:1a:96:d7:88:c9:22:77:13:ce:5c:01:b1:ad:fb:2f:
2c:04:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:43 2025 by rpki-client