Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/RgaWFiRFDAayyVG_Z9AIPT1MMZo.roa
File: RgaWFiRFDAayyVG_Z9AIPT1MMZo.roa (raw, json)
Hash identifier: YH48TeYg9Yf1bfvyMBSVb5xUh3j6na8VomUspmp0pss=
Subject key identifier: 46:06:96:16:24:45:0C:06:B2:C9:51:BF:67:D0:08:3D:3D:4C:31:9A
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019A4F0587A254FA65294F3647FB6F6CD84B
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/RgaWFiRFDAayyVG_Z9AIPT1MMZo.roa
Signing time: Tue 04 Nov 2025 13:19:13 +0000
ROA not before: Tue 04 Nov 2025 13:19:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
46.189.116.0/24 maxlen: 24
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/19 maxlen: 19
83.135.128.0/19 maxlen: 20
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.244.224.0/19 maxlen: 19
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.160.0/20 maxlen: 20
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.0.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/20 maxlen: 20
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.112.0/22 maxlen: 22
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.216.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.0.0/18 maxlen: 18
94.134.64.0/18 maxlen: 23
94.134.89.0/24 maxlen: 24
94.134.128.0/17 maxlen: 23
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:05:87:a2:54:fa:65:29:4f:36:47:fb:6f:6c:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Nov 4 13:19:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4606961624450c06b2c951bf67d0083d3d4c319a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:98:51:10:ed:8b:04:16:76:28:d1:1e:c7:
10:c0:88:e5:ae:03:5d:97:61:96:ef:db:be:d9:fc:
8e:14:12:4b:8d:2d:70:94:ad:e8:3f:7e:68:c3:5e:
03:4c:62:54:8c:df:8f:57:f4:63:71:07:6a:b2:85:
cc:45:d4:e6:85:7c:c7:a4:03:32:e5:15:46:19:e5:
61:5b:ba:9d:6a:7a:32:1a:ed:77:f1:b6:c7:e7:c1:
1a:c7:93:fe:4c:4a:50:28:ee:6c:d7:a9:76:01:4c:
8b:67:b4:26:6a:0d:e2:81:0a:c2:e6:7a:8f:d6:d7:
84:35:a5:c3:d1:4d:0b:91:06:a8:3c:c9:89:af:48:
98:0f:09:2c:9d:b5:07:00:c1:4d:fe:ad:50:e4:01:
87:25:b5:80:0f:42:3c:81:4f:52:bb:7f:95:9e:95:
ea:71:ba:2b:15:10:2d:1e:5e:bb:3b:6c:40:63:b5:
8e:17:e6:2f:e4:2b:3b:f0:5e:3d:60:d2:0c:4d:fe:
cb:7d:77:8c:e3:8b:7b:bf:9c:d3:f9:d7:ec:71:d8:
66:b9:5e:9e:52:ee:e9:98:64:20:0b:a5:dc:03:47:
7e:49:1b:25:b6:d5:44:90:c3:99:41:c4:8d:7a:a9:
a5:bf:57:36:d7:ea:93:3f:b9:70:68:3a:cd:de:c1:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:96:16:24:45:0C:06:B2:C9:51:BF:67:D0:08:3D:3D:4C:31:9A
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/RgaWFiRFDAayyVG_Z9AIPT1MMZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
7e:98:c0:6d:38:81:13:e4:38:1c:9a:2f:a0:c4:e4:39:ea:02:
35:dc:54:1e:45:e4:17:75:85:28:fb:eb:15:d8:9d:be:52:d8:
a3:c0:1c:1c:b2:a4:22:81:86:69:13:ae:38:b0:77:fb:8b:59:
12:c4:1c:ba:f9:6e:e1:9b:cc:1f:04:29:23:df:b9:82:a2:d9:
55:a5:ee:f8:37:77:e8:88:0b:00:c6:40:e3:e8:0c:2c:c2:84:
a1:ee:4e:2b:84:9a:53:94:4e:98:1e:79:51:a7:d7:e0:dd:f6:
85:90:d0:99:82:99:69:00:fe:0d:3d:2c:46:71:48:d5:2c:5b:
59:ae:2a:9a:fd:bb:dd:7f:ad:99:5b:cf:0a:6d:84:3d:a4:44:
68:d7:85:8f:a8:92:d1:67:2f:7b:ee:38:3d:06:39:69:b3:0f:
08:32:76:b5:7e:02:9a:09:d6:ce:03:de:04:5e:6c:e3:37:53:
d5:1c:2d:47:26:76:f3:a9:a1:18:d1:d2:e3:22:c5:79:1b:66:
87:25:25:f9:7d:80:74:56:3b:23:d8:12:03:89:fc:64:d4:2c:
0e:99:93:7d:39:d0:4a:ac:aa:c5:e7:d5:27:04:d0:f7:53:a6:
ee:db:a8:69:da:f7:a4:e1:f4:0a:7d:30:62:b2:4b:9a:0a:8e:
d8:39:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:17 2025 by rpki-client