Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k3F7cuGWhE8ni0Yo3mmbtkFG5Bg.roa
File: k3F7cuGWhE8ni0Yo3mmbtkFG5Bg.roa (raw, json)
Hash identifier: 1ALihs3JFYgqoJGPmR0sLNLhGv+YjkeZA4jzZJFGKwc=
Subject key identifier: 93:71:7B:72:E1:96:84:4F:27:8B:46:28:DE:69:9B:B6:41:46:E4:18
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A4F2E9249EB92472847788C9ED725963C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k3F7cuGWhE8ni0Yo3mmbtkFG5Bg.roa
Signing time: Tue 04 Nov 2025 14:04:03 +0000
ROA not before: Tue 04 Nov 2025 14:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.245.0/24 maxlen: 24
87.121.132.0/22 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.27.0/24 maxlen: 24
91.92.248.0/21 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.37.0/24 maxlen: 32
93.123.64.0/24 maxlen: 32
93.123.109.0/24 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.175.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.31.222.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.59.28.0/23 maxlen: 24
194.169.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2e:92:49:eb:92:47:28:47:78:8c:9e:d7:25:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 4 14:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93717b72e196844f278b4628de699bb64146e418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:8d:98:2e:27:e6:19:01:85:22:a3:3c:ad:
a2:fb:5f:0c:d5:89:5c:a0:6f:67:32:c4:c3:57:a8:
87:69:ed:b7:01:b4:1e:88:db:18:fe:45:25:3b:0f:
69:eb:af:42:9a:c0:14:98:4e:b2:e2:71:7d:49:cd:
01:ce:85:17:22:c6:f3:68:0c:7b:8b:80:3f:0d:4e:
3f:4c:70:d9:94:23:ca:33:04:18:a4:65:d3:ef:b1:
1b:17:10:8c:7e:1f:a9:11:17:20:9c:fb:82:c3:f8:
7d:91:b7:d9:56:3d:03:c9:0f:6a:01:6f:46:bc:e8:
4a:fc:4e:b8:1d:bb:08:c7:42:2c:a7:5d:d6:32:76:
94:8e:02:b1:da:0c:b3:f6:a3:1c:75:5a:53:f3:6b:
a0:d1:29:7d:ec:14:46:25:3a:f8:17:f7:d6:39:ba:
41:72:fc:03:6d:cf:8a:d1:d7:69:67:a6:10:dd:80:
49:9c:51:b5:48:f5:29:f2:25:86:9e:26:68:c7:83:
64:07:9a:9b:ff:db:45:03:4d:55:9e:d0:f4:53:1b:
4c:33:ae:04:62:d8:73:64:76:05:f8:41:79:59:a5:
7c:2d:cb:59:a4:33:b8:63:94:e8:60:20:26:20:75:
5d:c3:ad:d4:1e:9c:7f:6c:eb:a7:0c:d8:b0:78:69:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:7B:72:E1:96:84:4F:27:8B:46:28:DE:69:9B:B6:41:46:E4:18
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k3F7cuGWhE8ni0Yo3mmbtkFG5Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
45.151.90.0/24
81.161.238.0/24
82.115.211.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.245.0/24
87.121.132.0/22
87.121.165.0/24
91.92.27.0/24
91.92.248.0/21
92.119.196.0/23
92.249.50.0/24
93.123.37.0/24
93.123.64.0/24
93.123.109.0/24
94.154.173.0/24
94.156.175.0/24
141.98.1.0/24
178.215.239.0/24
193.25.216.0/24
193.222.98.0/24
194.31.222.0/24
194.55.186.0/24
194.59.28.0/23
194.169.175.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
89:bb:5e:7c:d4:43:3a:c6:86:f9:b6:dc:26:f8:64:12:73:96:
cc:69:48:b2:ad:9a:c6:70:b9:f7:6d:74:d7:8c:27:b3:c1:3e:
71:48:5d:9f:87:fd:54:71:a0:d9:dc:c8:2e:c9:74:77:1e:36:
0a:20:67:18:d2:79:21:5e:15:02:32:a5:42:c7:00:75:a2:e7:
b8:e0:21:6d:92:62:27:88:54:af:3d:7a:18:d2:99:7b:cb:13:
ae:1c:de:3f:8c:04:f6:a3:51:0f:db:96:a7:3d:82:67:37:38:
f1:a9:0b:3e:89:53:b0:20:8b:73:c8:ce:75:ec:71:72:d1:3c:
46:63:ec:95:65:fd:a4:6b:89:f5:eb:4c:e8:60:6e:68:a9:68:
35:db:a3:87:43:2f:08:13:91:bb:25:aa:df:0f:4d:a0:05:c6:
5b:6f:46:0b:d2:cd:78:d1:76:28:f0:8f:49:fa:b8:cb:b7:5f:
83:64:82:cc:4d:7a:ac:9b:98:f9:ca:30:de:b5:71:e8:bd:3e:
17:20:f3:52:1d:4c:e8:52:09:8b:06:81:a5:b5:87:56:d4:69:
47:57:b8:53:cb:c2:6e:82:75:c4:fa:51:4b:5b:c1:fa:47:d7:
2e:f9:df:ea:0e:7a:ab:e6:b3:9b:5c:94:bf:4c:42:02:2d:99:
45:a6:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:15 2025 by rpki-client