Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qj1qPGu9_HSWHOgP0_7d-_S2Wwo.roa
File: qj1qPGu9_HSWHOgP0_7d-_S2Wwo.roa (raw, json)
Hash identifier: hWAbqoNHnKUwiVPGsK+UZIVw/J4iBfO+h3WMYwx5rP0=
Subject key identifier: AA:3D:6A:3C:6B:BD:FC:74:96:1C:E8:0F:D3:FE:DD:FB:F4:B6:5B:0A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019A390F1D85C4678F869CB09FD611565E87
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qj1qPGu9_HSWHOgP0_7d-_S2Wwo.roa
Signing time: Fri 31 Oct 2025 06:58:03 +0000
ROA not before: Fri 31 Oct 2025 06:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.57.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.147.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.20.0/23 maxlen: 23
217.156.41.0/24 maxlen: 24
217.156.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:0f:1d:85:c4:67:8f:86:9c:b0:9f:d6:11:56:5e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 31 06:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3d6a3c6bbdfc74961ce80fd3feddfbf4b65b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:e4:d3:15:dd:1b:9e:38:e5:6f:03:41:d3:
c7:1a:bd:53:f9:2c:9d:bd:de:cc:b6:1e:66:b0:a5:
f7:07:79:cf:a1:73:42:d0:c6:8b:96:9e:d8:60:e4:
e8:4b:2a:b0:8f:de:d2:6b:97:ee:62:5f:6c:fe:6f:
2f:9d:77:db:05:5c:a3:f8:0b:e2:47:90:d9:22:b6:
a8:dc:cb:d5:aa:e3:50:ea:06:3d:f7:19:63:67:70:
ab:eb:ed:0d:e1:cd:57:fb:14:3f:be:94:b1:02:b2:
50:e2:62:7b:57:b1:d0:da:01:99:d2:44:bb:f1:2a:
05:7d:82:d4:9f:2e:2d:12:35:b6:d7:34:42:15:b6:
f3:9d:b9:75:08:5b:8a:d6:b3:17:64:41:53:51:21:
89:ee:4e:b1:60:f7:d9:77:21:85:35:f4:c1:85:b4:
87:83:77:ad:c5:3f:ed:f6:a0:4b:f9:4c:61:44:83:
e7:5e:29:5b:0c:41:87:62:9a:69:7b:40:ee:84:e8:
5f:4d:3f:a2:c8:90:06:cb:2e:a7:19:d5:af:cf:cc:
08:d1:9b:8f:ca:0b:32:10:bd:bc:8e:ff:1f:f9:0e:
bc:22:eb:15:53:c1:15:81:b9:12:15:de:46:ec:f7:
5b:6c:1d:20:67:99:d5:ac:d9:60:95:09:ed:be:05:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:6A:3C:6B:BD:FC:74:96:1C:E8:0F:D3:FE:DD:FB:F4:B6:5B:0A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qj1qPGu9_HSWHOgP0_7d-_S2Wwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.57.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.147.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.20.0/23
217.156.41.0/24
217.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c3:21:a3:57:b8:0c:8f:78:33:59:a9:94:6b:2a:e2:aa:55:
fa:a3:94:b0:73:ab:09:eb:4e:1a:27:95:6d:bd:b6:ae:97:c5:
42:ea:72:59:3f:29:c7:ee:b7:75:0f:54:85:fa:b4:78:bf:13:
93:b3:2a:11:33:4e:75:cf:ff:c5:8f:2c:db:c6:97:ca:7e:1a:
5e:74:94:c8:dd:d4:56:48:8c:1e:cf:b9:c5:95:d8:84:66:da:
bd:d2:3b:dd:72:3b:ce:70:69:34:0d:42:d9:73:21:e3:f5:98:
cf:87:4b:ac:0e:02:b1:b5:9f:ba:1d:9e:3d:ed:25:77:21:8a:
c0:5a:4e:93:bb:65:7c:41:1f:96:c6:e7:0b:f3:ee:7b:a5:56:
2c:f4:04:33:f9:aa:5c:49:aa:1f:00:d0:b0:ae:9f:90:a6:61:
4f:36:79:fd:7f:5b:4b:f1:d5:b0:cc:a2:c6:16:40:44:65:9e:
3f:b7:91:f6:8a:14:d0:f2:80:d9:97:94:07:9d:9f:4e:24:d9:
d0:de:28:37:bb:28:1f:c9:da:da:c3:44:74:e5:94:43:15:1e:
f2:bc:55:bd:9e:11:31:9a:ea:a4:4c:3f:18:6e:97:89:a1:31:
10:64:8e:0b:aa:45:a4:8e:89:3e:01:de:3e:1f:d6:27:9f:22:
ff:dc:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:10 2025 by rpki-client