Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qw8SB0BUzhnJRXgdSlCZTXJDkPE.roa
File: Qw8SB0BUzhnJRXgdSlCZTXJDkPE.roa (raw, json)
Hash identifier: u/vtvt4MsPO6AqA8F3QFHngY65py2Bj0/lFtGPVy/lo=
Subject key identifier: 43:0F:12:07:40:54:CE:19:C9:45:78:1D:4A:50:99:4D:72:43:90:F1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A52E223FBAD28D3EB24EB629D4DBE4B07
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qw8SB0BUzhnJRXgdSlCZTXJDkPE.roa
Signing time: Wed 05 Nov 2025 07:19:03 +0000
ROA not before: Wed 05 Nov 2025 07:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.245.0/24 maxlen: 24
87.121.132.0/22 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.27.0/24 maxlen: 24
91.92.248.0/21 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.175.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.31.222.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.59.28.0/23 maxlen: 24
194.169.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:e2:23:fb:ad:28:d3:eb:24:eb:62:9d:4d:be:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 5 07:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=430f12074054ce19c945781d4a50994d724390f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:c2:88:a9:19:6a:74:a0:31:c9:0e:7f:ee:
e6:10:17:3e:a2:b3:de:77:15:f6:36:90:01:44:4e:
3c:eb:c9:24:2a:f6:a9:cc:27:bb:97:0b:e2:1a:fd:
ad:28:5f:7b:70:51:61:05:50:27:13:8c:dc:ca:ce:
14:4c:b6:84:f4:77:48:d3:76:6b:e6:e2:0d:f9:12:
72:5b:f4:18:02:5f:d7:84:ce:46:01:19:bb:33:95:
9e:18:44:3d:f4:31:3e:8a:1f:b8:39:de:d6:f1:9a:
66:11:32:fe:2d:b1:f7:8a:11:b7:fb:cd:04:57:d2:
f5:06:04:c4:64:cd:bf:43:3a:35:7c:9e:3a:46:5a:
ce:e2:53:00:46:07:a8:78:04:06:12:8d:28:10:f6:
99:59:44:30:d5:5b:1a:83:f1:3b:19:1d:27:81:72:
85:70:41:31:1e:c1:73:c2:f2:ed:a9:51:a1:c9:f2:
8d:56:ad:4f:72:4f:49:81:d1:c5:0b:43:c3:ab:6c:
30:99:a5:2e:6a:c6:0b:66:36:55:44:af:33:39:9d:
e1:a0:f5:30:d2:ff:5c:6c:4c:ca:a4:fd:99:e0:cc:
ad:b8:df:17:5f:41:31:c8:59:ea:43:28:6a:a2:eb:
58:f6:4b:27:ea:f3:6a:4f:f2:68:01:e6:00:63:03:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0F:12:07:40:54:CE:19:C9:45:78:1D:4A:50:99:4D:72:43:90:F1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qw8SB0BUzhnJRXgdSlCZTXJDkPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
45.151.90.0/24
81.161.238.0/24
82.115.211.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.245.0/24
87.121.132.0/22
87.121.165.0/24
91.92.27.0/24
91.92.248.0/21
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.173.0/24
94.156.175.0/24
141.98.1.0/24
178.215.239.0/24
193.25.216.0/24
193.222.98.0/24
194.31.222.0/24
194.55.186.0/24
194.59.28.0/23
194.169.175.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b3:f3:da:7a:56:8b:d4:fc:a2:5e:e4:8d:4c:c9:b2:07:7a:
c7:e9:e9:46:c3:cc:9a:47:d8:2a:ab:02:43:8e:40:d3:89:3d:
1e:b9:ac:67:5d:57:71:ee:db:97:14:a7:89:48:f3:4c:74:5e:
42:b5:5f:02:74:f6:f0:cd:c0:80:4a:9d:0f:65:76:33:aa:4b:
d2:33:1b:8e:f4:d1:dd:ef:9d:3d:b1:e6:cc:06:78:a4:94:8c:
bc:4e:e5:15:3c:5c:1e:bf:f2:f3:8d:c7:77:6c:1c:b3:7a:06:
bf:c9:ed:eb:98:d7:de:fa:50:91:74:c0:77:91:43:22:1f:4c:
6d:45:95:92:64:b2:50:5b:a4:e2:41:4c:75:5c:d0:26:5c:c7:
e8:f3:ae:8c:56:7d:41:80:13:7a:72:4c:ae:55:f7:96:f5:5f:
19:73:60:b7:ea:d6:c0:75:47:4e:5c:d9:80:ea:e4:c2:96:1a:
5f:0b:f6:ef:0e:99:fe:09:36:61:8b:90:a3:4f:10:36:2f:65:
ca:d7:28:cd:ea:39:51:c0:d2:09:0b:48:fd:0f:54:0e:9b:14:
b4:e4:fa:63:dc:9e:17:77:0e:cd:6d:2d:1a:b8:92:2c:67:e9:
cc:37:a2:1f:ad:02:77:ae:10:ed:c5:66:06:4b:1c:5c:72:fa:
79:e0:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:17:18 2025 by rpki-client