Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/gw967_dPAMH6gIdHYPFkGYPMwNU.roa
File: gw967_dPAMH6gIdHYPFkGYPMwNU.roa (raw, json)
Hash identifier: Z4TTdvly+MNjzEWd9PDkISqkzcOcaRd52bCsHo8zj5w=
Subject key identifier: 83:0F:7A:EF:F7:4F:00:C1:FA:80:87:47:60:F1:64:19:83:CC:C0:D5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019A4A676D01DDF0F4A8F7DF605EB9D2A7FD
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/gw967_dPAMH6gIdHYPFkGYPMwNU.roa
Signing time: Mon 03 Nov 2025 15:48:03 +0000
ROA not before: Mon 03 Nov 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.232.0/21 maxlen: 24
37.98.232.0/22 maxlen: 24
37.98.232.0/23 maxlen: 23
37.98.232.0/24 maxlen: 24
37.98.233.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.234.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 24
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
136.242.128.0/17 maxlen: 17
138.12.128.0/17 maxlen: 17
148.139.0.0/16 maxlen: 16
148.139.0.0/24 maxlen: 24
148.139.1.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.4.0/22 maxlen: 24
148.139.8.0/22 maxlen: 24
148.139.12.0/22 maxlen: 24
148.139.16.0/22 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.29.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 24
148.139.48.0/20 maxlen: 24
148.139.64.0/20 maxlen: 24
148.139.80.0/20 maxlen: 24
148.139.96.0/22 maxlen: 24
148.139.100.0/22 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.105.0/24 maxlen: 24
148.139.108.0/22 maxlen: 24
148.139.112.0/22 maxlen: 24
148.139.116.0/22 maxlen: 24
148.139.120.0/22 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.125.0/24 maxlen: 24
148.139.136.0/22 maxlen: 24
148.139.140.0/24 maxlen: 24
148.139.141.0/24 maxlen: 24
148.139.142.0/24 maxlen: 24
148.139.143.0/24 maxlen: 24
148.139.144.0/22 maxlen: 24
148.139.144.0/24 maxlen: 24
148.139.148.0/22 maxlen: 24
148.139.152.0/22 maxlen: 24
148.139.156.0/22 maxlen: 24
148.139.160.0/20 maxlen: 24
148.139.176.0/20 maxlen: 24
148.139.192.0/24 maxlen: 24
148.139.193.0/24 maxlen: 24
148.139.214.0/24 maxlen: 24
148.139.215.0/24 maxlen: 24
148.139.224.0/22 maxlen: 24
148.139.228.0/22 maxlen: 24
148.139.232.0/22 maxlen: 24
148.139.236.0/22 maxlen: 24
148.139.240.0/22 maxlen: 24
148.139.244.0/22 maxlen: 24
148.139.248.0/22 maxlen: 24
148.139.252.0/22 maxlen: 24
157.5.128.0/17 maxlen: 17
157.70.0.0/17 maxlen: 17
163.120.128.0/17 maxlen: 17
165.171.0.0/17 maxlen: 17
2a04:37c0::/29 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:3910::/48 maxlen: 48
2a04:37c0:3920::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:67:6d:01:dd:f0:f4:a8:f7:df:60:5e:b9:d2:a7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Nov 3 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=830f7aeff74f00c1fa80874760f1641983ccc0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:71:bb:57:b9:95:f1:36:30:44:b3:eb:1d:
6f:08:92:53:4f:dd:d1:1f:4c:9c:a4:fa:9e:c4:f4:
d8:70:48:39:49:2e:74:30:7e:d5:4c:ed:ba:b9:2d:
5c:16:92:e7:6b:a0:59:4f:e2:a1:64:77:69:de:82:
c4:c6:fd:fa:3c:bd:a8:1e:ad:f8:9a:36:e6:ca:bb:
9e:1a:e3:0d:6d:5a:17:ee:2a:07:9c:e1:3c:fc:71:
0d:a1:4a:d5:5c:de:74:51:41:40:57:04:53:2a:7e:
34:22:73:29:d1:06:eb:29:fa:63:e8:fb:38:7d:79:
5b:ed:1e:b9:24:cc:24:28:af:a8:bc:5c:66:db:13:
c5:e4:69:2c:6b:49:0e:1c:57:11:31:70:4f:c8:96:
fb:2f:bd:b9:0a:51:9a:9b:20:27:65:00:8f:6b:0e:
3d:03:0b:ca:a8:a6:e9:29:f5:bc:73:3d:e9:fb:b0:
73:b0:8e:a6:92:92:25:cc:ab:ba:15:10:c3:67:eb:
a3:26:c0:a9:50:2d:db:af:78:f5:b9:ef:a2:f0:ff:
de:57:df:8d:89:1c:07:27:e7:5d:86:13:03:23:d9:
6d:e5:82:03:58:1a:ef:63:3c:a2:7a:47:1c:1e:96:
5c:b8:ca:30:73:f0:c3:b9:d1:27:f2:d9:fe:e8:3b:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0F:7A:EF:F7:4F:00:C1:FA:80:87:47:60:F1:64:19:83:CC:C0:D5
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/gw967_dPAMH6gIdHYPFkGYPMwNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:00:6e:00:33:3c:60:9c:cd:96:90:8c:82:84:70:5e:fd:a3:
c1:ae:a2:f1:ec:7c:d9:4b:dc:f7:2c:5d:26:ae:ac:80:bc:a1:
f8:c3:60:91:b0:c1:e3:7c:9c:49:fa:d3:6d:9e:87:b9:3b:18:
e1:cc:1d:e5:5d:cb:15:3c:33:2c:58:32:fc:ea:4c:5b:bd:57:
68:73:da:78:28:0d:2c:ac:1a:16:fe:1a:bb:dd:7a:d3:87:f8:
80:18:95:5c:cf:ec:75:0a:a5:88:0e:b3:ac:32:28:ac:27:e7:
14:81:de:49:78:3c:cf:b7:33:b3:09:d7:bf:d3:e8:d8:b9:a4:
04:aa:32:be:e7:2a:d7:43:40:79:ac:1a:24:4c:88:84:e4:bf:
c3:62:34:3b:fd:4f:15:f0:18:11:1d:45:3a:1f:42:03:4e:6d:
b6:fb:fa:dd:7c:5c:c4:59:75:67:23:97:00:26:fd:75:7e:d8:
da:14:a1:d9:01:1c:61:c2:4a:b9:78:60:fc:b7:6d:2d:32:46:
d7:2b:81:a8:8e:74:2d:98:a2:22:21:b5:10:fa:be:f2:20:7f:
c9:a5:0c:ac:3f:66:96:70:4e:a3:16:60:a0:80:c1:46:ae:31:
c3:a5:b2:98:95:54:61:f4:98:18:b6:03:d9:5f:9e:52:f3:29:
ad:31:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:47 2025 by rpki-client