Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/ROD80653_T-MkjTmqYTdP5M1LUg.roa
File: ROD80653_T-MkjTmqYTdP5M1LUg.roa (raw, json)
Hash identifier: lOnwVxDIfeJwEQvoT4QPCm3NmWmOEk6KMpexVgqv54Y=
Subject key identifier: 44:E0:FC:D3:AE:77:FD:3F:8C:92:34:E6:A9:84:DD:3F:93:35:2D:48
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 019A356947E37F8AB4C219827EA735D413EF
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/ROD80653_T-MkjTmqYTdP5M1LUg.roa
Signing time: Thu 30 Oct 2025 13:58:03 +0000
ROA not before: Thu 30 Oct 2025 13:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202448
IP address blocks: 2.56.212.0/24 maxlen: 24
2.56.213.0/24 maxlen: 24
2.56.214.0/24 maxlen: 24
2.56.215.0/24 maxlen: 24
31.14.238.0/24 maxlen: 24
31.222.229.0/24 maxlen: 24
45.137.148.0/24 maxlen: 32
45.137.149.0/24 maxlen: 24
45.137.150.0/24 maxlen: 24
45.137.151.0/24 maxlen: 24
45.153.184.0/24 maxlen: 24
45.153.185.0/24 maxlen: 24
45.153.186.0/24 maxlen: 24
45.153.187.0/24 maxlen: 24
62.3.32.0/24 maxlen: 24
84.238.132.0/24 maxlen: 24
86.105.252.0/24 maxlen: 24
86.106.181.0/24 maxlen: 24
86.107.197.0/24 maxlen: 24
89.38.128.0/24 maxlen: 24
89.38.129.0/24 maxlen: 24
89.38.130.0/24 maxlen: 24
89.38.131.0/24 maxlen: 24
89.38.135.0/24 maxlen: 32
89.43.33.0/24 maxlen: 24
91.227.40.0/24 maxlen: 24
91.227.41.0/24 maxlen: 24
91.236.195.0/24 maxlen: 24
91.250.248.0/24 maxlen: 32
91.250.249.0/24 maxlen: 32
93.114.128.0/24 maxlen: 24
93.114.133.0/24 maxlen: 24
93.115.16.0/24 maxlen: 24
93.115.17.0/24 maxlen: 24
93.115.18.0/24 maxlen: 24
93.115.19.0/24 maxlen: 24
93.115.20.0/24 maxlen: 24
93.115.21.0/24 maxlen: 24
93.115.22.0/24 maxlen: 24
93.115.23.0/24 maxlen: 24
94.176.182.0/24 maxlen: 24
94.231.205.0/24 maxlen: 24
95.169.192.0/24 maxlen: 24
95.169.201.0/24 maxlen: 24
95.169.204.0/24 maxlen: 24
95.169.205.0/24 maxlen: 24
178.157.82.0/24 maxlen: 24
178.157.90.0/24 maxlen: 24
178.157.91.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
185.96.163.0/24 maxlen: 24
185.170.212.0/24 maxlen: 24
185.170.213.0/24 maxlen: 24
185.170.214.0/24 maxlen: 24
185.170.215.0/24 maxlen: 24
185.177.73.0/24 maxlen: 24
185.234.52.0/24 maxlen: 32
185.243.214.0/24 maxlen: 32
185.243.215.0/24 maxlen: 24
188.212.124.0/24 maxlen: 24
188.212.125.0/24 maxlen: 24
193.24.232.0/24 maxlen: 24
193.24.233.0/24 maxlen: 24
193.24.234.0/24 maxlen: 24
193.24.235.0/24 maxlen: 24
193.201.15.0/24 maxlen: 24
194.26.213.0/24 maxlen: 24
194.32.76.0/24 maxlen: 24
194.32.77.0/24 maxlen: 24
194.32.78.0/24 maxlen: 24
194.32.79.0/24 maxlen: 24
194.63.145.0/24 maxlen: 24
194.99.20.0/24 maxlen: 24
194.99.21.0/24 maxlen: 24
194.99.22.0/24 maxlen: 24
194.99.23.0/24 maxlen: 24
195.14.9.0/24 maxlen: 24
2a05:8280::/32 maxlen: 32
2a09:cd40::/32 maxlen: 32
2a09:cd41::/32 maxlen: 32
2a09:cd42::/32 maxlen: 32
2a09:cd43::/32 maxlen: 32
2a09:cd44::/32 maxlen: 32
2a09:cd45::/32 maxlen: 32
2a09:cd46::/32 maxlen: 32
2a0c:b9c0::/32 maxlen: 32
2a0c:b9c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:69:47:e3:7f:8a:b4:c2:19:82:7e:a7:35:d4:13:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Oct 30 13:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44e0fcd3ae77fd3f8c9234e6a984dd3f93352d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:5a:b9:92:56:9a:8c:41:e2:04:3c:51:33:
00:d7:b0:b6:87:1c:39:b6:72:cf:4b:c4:eb:e6:12:
7d:5e:63:07:98:71:89:3a:94:5d:41:a0:e9:96:75:
af:04:ba:f6:3d:0e:75:86:61:2e:d6:6e:f0:de:55:
92:50:c7:c9:32:59:f4:13:d4:e1:83:c9:3e:fd:07:
93:07:0b:41:3b:9c:b0:ca:26:89:95:50:72:38:e0:
cf:46:52:fe:b8:0c:10:68:cf:f1:63:de:a3:9f:9c:
e4:16:41:40:8e:2c:8d:46:72:fd:9a:bc:b4:c9:08:
c4:ce:cf:08:d2:32:0d:b7:ea:8d:09:10:03:6a:34:
77:25:90:af:bd:32:3e:b5:f6:43:13:12:cd:a7:c2:
1b:a6:e6:f4:84:fd:14:19:87:50:c0:f4:e2:63:6b:
f9:35:62:30:04:d0:13:c6:0f:51:bb:27:77:33:8d:
fc:16:51:25:d9:50:ed:29:6d:22:46:88:77:67:85:
c6:9e:05:5f:ea:26:4a:71:a3:58:1d:3d:2d:b9:ec:
a9:56:63:48:dd:12:5b:c7:59:ab:81:83:06:89:b4:
2f:8f:26:1c:ff:6c:0a:ea:46:69:1f:52:ee:5c:d5:
34:7b:72:06:30:e0:04:43:c1:aa:db:93:5c:7a:2c:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:FC:D3:AE:77:FD:3F:8C:92:34:E6:A9:84:DD:3F:93:35:2D:48
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/ROD80653_T-MkjTmqYTdP5M1LUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.212.0/22
31.14.238.0/24
31.222.229.0/24
45.137.148.0/22
45.153.184.0/22
62.3.32.0/24
84.238.132.0/24
86.105.252.0/24
86.106.181.0/24
86.107.197.0/24
89.38.128.0/22
89.38.135.0/24
89.43.33.0/24
91.227.40.0/23
91.236.195.0/24
91.250.248.0/23
93.114.128.0/24
93.114.133.0/24
93.115.16.0/21
94.176.182.0/24
94.231.205.0/24
95.169.192.0/24
95.169.201.0/24
95.169.204.0/23
178.157.82.0/24
178.157.90.0/23
178.215.237.0/24
185.96.163.0/24
185.170.212.0/22
185.177.73.0/24
185.234.52.0/24
185.243.214.0/23
188.212.124.0/23
193.24.232.0/22
193.201.15.0/24
194.26.213.0/24
194.32.76.0/22
194.63.145.0/24
194.99.20.0/22
195.14.9.0/24
IPv6:
2a05:8280::/32
2a09:cd40::-2a09:cd46:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:b9c0::/31
Signature Algorithm: sha256WithRSAEncryption
6c:2f:a8:47:05:bc:fe:93:51:d9:e3:41:67:d5:ef:51:09:b0:
d9:79:ee:f0:e4:a1:f3:45:a7:4e:9d:6c:90:93:d6:18:cb:80:
eb:51:f8:24:60:b8:c4:67:24:f3:b2:fc:01:01:4d:fd:5c:76:
e9:b7:28:50:cc:b8:26:9b:ad:03:cc:2d:74:af:be:36:c4:88:
eb:9d:df:32:d5:96:e2:13:ba:e5:2c:a9:08:a4:d9:76:5d:d2:
62:62:5f:b0:37:24:12:b1:de:69:90:8c:9f:ff:57:29:f1:d9:
bd:4f:51:07:d7:ad:7b:c0:ee:dc:ab:c9:25:2d:31:15:23:65:
7a:40:26:4e:b8:b1:c1:64:64:36:34:9f:f8:12:04:57:8c:7f:
9e:54:3d:c1:ff:b7:bc:d2:c7:a8:c7:73:17:3d:6b:e6:f9:6c:
fc:7c:d0:10:d8:27:c3:8e:ec:2f:f9:55:2b:19:ba:de:46:5b:
3c:f6:26:9c:97:af:88:e1:e8:b9:44:76:3e:73:e9:5c:24:80:
b6:ea:5a:92:dc:44:99:a7:db:23:65:d9:0d:6f:41:42:71:3f:
19:eb:ca:b4:9f:22:9e:c0:a3:c2:4b:2f:e0:8a:32:54:10:2b:
b5:d4:d3:36:cc:18:fe:fc:f1:79:6c:07:0e:4a:b8:94:46:c9:
af:9c:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:53 2025 by rpki-client