Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/FkdMBqbfdch6CFhxD4QwLgELMKU.roa
File: FkdMBqbfdch6CFhxD4QwLgELMKU.roa (raw, json)
Hash identifier: wdLh3ZrKjP6g2Oc4Gepc/YnCstfM0S94slpL4xRfAig=
Subject key identifier: 16:47:4C:06:A6:DF:75:C8:7A:08:58:71:0F:84:30:2E:01:0B:30:A5
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 0199B91F005B2068F36AFC9EAC4E57612748
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/FkdMBqbfdch6CFhxD4QwLgELMKU.roa
Signing time: Mon 06 Oct 2025 10:44:00 +0000
ROA not before: Mon 06 Oct 2025 10:44:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13285
IP address blocks: 2.96.0.0/13 maxlen: 24
62.3.192.0/18 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/13 maxlen: 24
81.1.64.0/18 maxlen: 24
81.6.192.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.170.0.0/17 maxlen: 24
81.178.0.0/15 maxlen: 24
82.133.0.0/17 maxlen: 24
83.67.0.0/16 maxlen: 24
84.43.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
89.168.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
91.146.112.0/21 maxlen: 24
92.10.0.0/15 maxlen: 24
92.12.0.0/14 maxlen: 24
92.16.0.0/12 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
185.173.116.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.112.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
212.1.128.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
213.208.64.0/18 maxlen: 24
217.8.0.0/19 maxlen: 24
217.68.128.0/20 maxlen: 24
2001:7e0::/32 maxlen: 32
2001:4a00::/27 maxlen: 27
2a00:4340::/32 maxlen: 32
2a0b:db00::/29 maxlen: 29
2a0b:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:1f:00:5b:20:68:f3:6a:fc:9e:ac:4e:57:61:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Oct 6 10:44:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16474c06a6df75c87a0858710f84302e010b30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:1f:0a:35:ce:49:09:f9:67:f1:8f:52:9e:
f5:66:0a:c4:c3:79:24:4e:6d:44:46:58:29:32:9e:
03:81:90:b4:8b:96:70:03:e3:c1:97:e3:85:34:dd:
26:a2:e4:88:dc:f2:69:87:04:36:74:34:20:2f:79:
6b:94:c8:e6:db:15:5e:ea:20:2f:76:b5:bf:bb:34:
a3:5d:dd:c3:17:ea:42:4f:7a:d3:22:f5:0e:b8:b2:
12:46:5d:f2:7f:33:e0:ae:7a:9a:95:af:6d:8f:31:
b3:c1:27:69:8d:21:13:c0:b7:bc:d0:82:63:0b:e3:
4d:b1:10:b5:e5:8d:eb:fc:85:22:fe:92:aa:96:99:
9d:7e:02:8b:a8:06:b3:20:13:2b:d5:f6:62:fb:31:
4a:52:bb:d4:df:df:55:b5:f5:6e:89:ef:5f:52:81:
c9:9e:ec:1b:83:9c:23:d1:0b:38:ae:47:c1:fc:34:
b5:ca:0a:3c:74:06:2d:74:c7:23:61:bf:eb:9a:e7:
b3:db:89:db:3e:ed:41:d4:93:2b:4d:d4:a8:e5:8b:
ec:4d:db:57:bb:d6:ee:2e:f0:15:87:5a:ba:29:2c:
fe:84:98:1b:12:b8:dd:de:c3:3d:68:60:ff:02:15:
5d:a1:a6:ad:0d:ff:30:27:dc:df:00:b6:b4:60:a9:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:4C:06:A6:DF:75:C8:7A:08:58:71:0F:84:30:2E:01:0B:30:A5
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/FkdMBqbfdch6CFhxD4QwLgELMKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.77.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
91.146.112.0/21
92.10.0.0-92.31.255.255
145.255.240.0/21
185.24.12.0/22
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
IPv6:
2001:7e0::/32
2001:4a00::/27
2a00:4340::/32
2a0b:db00::/29
2a0b:e900::/29
Signature Algorithm: sha256WithRSAEncryption
60:38:93:5d:c7:de:af:ab:e3:c9:8d:e5:4b:97:56:b1:9e:00:
e5:f1:ea:f1:25:4b:d2:c7:1a:45:7b:77:7e:97:19:e3:e9:54:
fb:b2:78:ec:56:30:7b:ef:30:df:31:4e:d6:8c:28:80:88:f4:
b0:b9:41:07:a2:da:e2:81:dc:31:a5:40:8e:0a:fe:9c:2f:83:
18:8e:5b:a2:3e:44:8d:5c:00:81:1a:a0:d8:3c:e3:6f:82:b1:
3f:d3:8d:6a:6f:79:53:76:88:e3:5e:f9:bb:8b:a3:fa:78:c5:
1f:e4:06:8c:ca:55:66:6f:29:8c:1f:73:85:dd:f6:c8:c8:5f:
35:34:36:e1:d7:0a:c1:84:8d:3d:c7:4c:0b:cc:01:55:b8:bc:
d1:16:2a:63:ea:21:82:b4:97:39:de:bb:97:28:66:f6:2d:20:
b2:3d:ff:10:a2:c5:19:9c:77:f4:a8:5e:2d:c1:76:12:47:6d:
c9:a6:98:25:8b:8e:eb:8b:b2:bf:ee:f3:ec:fe:42:23:d5:25:
24:e1:38:5d:b7:53:02:10:a0:1b:58:20:02:ec:1e:68:ff:a9:
88:5a:fa:7d:f7:7c:f3:d7:24:b1:e5:78:78:2a:8a:dd:58:fd:
1b:84:44:6b:ed:93:87:df:09:73:a6:f4:7f:cf:17:30:51:73:
5d:1a:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:55 2025 by rpki-client