Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/SnM7m7qG2ZJCalJqCKmb0uUKeok.roa
File: SnM7m7qG2ZJCalJqCKmb0uUKeok.roa (raw, json)
Hash identifier: BZxllE2u/HvAn3BOTk6xGcqrBF8c6fHcaPJOniE+Bug=
Subject key identifier: 4A:73:3B:9B:BA:86:D9:92:42:6A:52:6A:08:A9:9B:D2:E5:0A:7A:89
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019A24D88CFF036760B271BDBBA0EE9AD254
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/SnM7m7qG2ZJCalJqCKmb0uUKeok.roa
Signing time: Mon 27 Oct 2025 08:46:02 +0000
ROA not before: Mon 27 Oct 2025 08:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58327
IP address blocks: 5.252.252.0/22 maxlen: 24
81.172.103.0/24 maxlen: 24
81.172.104.0/21 maxlen: 24
81.172.120.0/21 maxlen: 24
89.150.32.0/24 maxlen: 24
89.150.37.0/24 maxlen: 24
89.150.39.0/24 maxlen: 24
89.150.42.0/24 maxlen: 24
94.101.124.0/22 maxlen: 24
176.120.168.0/21 maxlen: 24
185.74.193.0/24 maxlen: 24
185.74.194.0/23 maxlen: 24
185.74.194.0/24 maxlen: 24
185.74.195.0/24 maxlen: 24
185.194.25.0/24 maxlen: 24
185.221.191.0/24 maxlen: 24
185.224.93.0/24 maxlen: 24
185.224.94.0/23 maxlen: 24
185.224.94.0/24 maxlen: 24
185.224.95.0/24 maxlen: 24
185.226.228.0/24 maxlen: 24
185.230.144.0/24 maxlen: 24
185.232.135.0/24 maxlen: 24
185.239.4.0/22 maxlen: 24
188.212.32.0/23 maxlen: 24
193.242.188.0/23 maxlen: 24
2a09:4e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:d8:8c:ff:03:67:60:b2:71:bd:bb:a0:ee:9a:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Oct 27 08:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a733b9bba86d992426a526a08a99bd2e50a7a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:17:27:bf:b2:71:3b:10:de:a4:76:bf:47:
2d:92:c1:48:f3:09:9c:38:a9:99:28:a6:94:1e:3c:
7c:a3:e9:81:c9:89:56:23:95:6e:5f:b5:1a:08:f2:
3d:e2:e8:76:ba:4e:c0:eb:09:49:3f:dc:f1:70:af:
06:b3:6b:92:43:1c:15:e8:08:8a:0f:5c:b9:d8:1e:
fe:c5:e1:dc:19:fd:27:ec:a8:b9:5f:0e:ef:9c:e4:
9e:28:7f:45:97:17:11:36:5e:7c:51:a9:95:cd:cc:
78:8e:b9:32:0a:fe:40:1e:e7:0c:ad:7e:bb:3f:50:
e4:62:55:94:81:8b:81:8b:de:3e:be:d3:18:22:be:
ba:f5:28:87:b1:e6:27:08:5a:ca:c6:df:4a:6f:44:
a3:8b:6b:4a:31:cb:25:1f:8e:ef:37:62:51:a6:e7:
61:4b:bf:d4:41:49:62:5b:d4:bf:06:4d:f6:6e:1f:
46:93:85:a5:c3:37:4a:17:95:ca:46:5c:8b:04:5f:
61:06:10:4e:98:de:77:f5:76:42:18:43:b0:0a:1d:
36:d8:93:e2:9e:80:a4:d4:2f:ec:fd:63:3e:17:96:
99:e1:71:15:55:2b:24:fc:fc:17:80:cd:1e:9b:5c:
d9:b2:00:b5:c9:4d:7b:66:a4:a5:4d:9d:2f:54:21:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:3B:9B:BA:86:D9:92:42:6A:52:6A:08:A9:9B:D2:E5:0A:7A:89
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/SnM7m7qG2ZJCalJqCKmb0uUKeok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.252.0/22
81.172.103.0-81.172.111.255
81.172.120.0/21
89.150.32.0/24
89.150.37.0/24
89.150.39.0/24
89.150.42.0/24
94.101.124.0/22
176.120.168.0/21
185.74.193.0-185.74.195.255
185.194.25.0/24
185.221.191.0/24
185.224.93.0-185.224.95.255
185.226.228.0/24
185.230.144.0/24
185.232.135.0/24
185.239.4.0/22
188.212.32.0/23
193.242.188.0/23
IPv6:
2a09:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
b7:18:03:bb:27:40:01:23:96:af:07:29:75:ad:8e:8a:d7:68:
d5:21:e2:bc:22:dd:4c:79:e7:28:11:40:d6:57:07:4d:09:6b:
ad:d5:78:55:c3:89:7d:62:7f:3e:01:64:52:33:5c:24:74:8a:
2b:b9:ae:9b:ae:52:59:3d:6b:07:b8:32:49:36:b0:5c:41:30:
22:08:31:34:56:67:0e:e4:7b:53:94:18:17:8f:9b:69:4b:53:
c4:77:c8:eb:16:ca:96:a6:70:bc:c9:fd:38:0e:84:75:12:fc:
e8:1a:c1:aa:c8:1c:46:55:fc:c4:bc:cd:4a:bf:7d:0c:ca:23:
ac:b2:d5:fc:10:91:1d:82:ba:ee:bc:82:fa:4e:18:c2:2e:da:
df:35:2d:a2:c7:43:32:13:69:62:0d:3c:da:2d:6d:89:df:e6:
2c:e3:c1:a6:cf:a7:84:e0:90:53:06:0a:18:b1:26:f5:38:f5:
61:8c:86:45:7f:f4:e9:81:ea:e0:4f:c4:9f:35:4a:c5:25:05:
a9:cf:ed:a0:a0:43:a6:c6:87:6e:77:0e:c7:df:9a:e0:d3:d1:
56:f5:1d:86:57:db:9e:72:28:09:0b:da:f9:23:c8:40:85:e8:
b2:98:c9:80:eb:59:a6:c1:81:a0:3d:7a:63:6e:8e:2a:3f:b0:
9c:ea:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:44:43 2025 by rpki-client