Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/i9UroOeG3v0LQXKmV9ahi8I0w0c.roa
File: i9UroOeG3v0LQXKmV9ahi8I0w0c.roa (raw, json)
Hash identifier: WzgmOp30C9OQ/f6QU939qr7xdVO2Usi3fvlLxJ7jHeY=
Subject key identifier: 8B:D5:2B:A0:E7:86:DE:FD:0B:41:72:A6:57:D6:A1:8B:C2:34:C3:47
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019A39EA175F766F344715561AD5383225A2
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/i9UroOeG3v0LQXKmV9ahi8I0w0c.roa
Signing time: Fri 31 Oct 2025 10:57:13 +0000
ROA not before: Fri 31 Oct 2025 10:57:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 375
IP address blocks: 131.207.0.0/17 maxlen: 17
192.49.0.0/21 maxlen: 21
192.49.9.0/24 maxlen: 24
192.49.10.0/24 maxlen: 24
192.49.13.0/24 maxlen: 24
192.49.19.0/24 maxlen: 24
192.49.20.0/24 maxlen: 24
192.49.22.0/24 maxlen: 24
192.49.33.0/24 maxlen: 24
192.49.36.0/22 maxlen: 22
192.49.40.0/21 maxlen: 21
192.49.48.0/22 maxlen: 22
192.49.52.0/23 maxlen: 23
192.49.55.0/24 maxlen: 24
192.49.56.0/21 maxlen: 21
192.49.64.0/22 maxlen: 22
192.49.68.0/24 maxlen: 24
192.49.70.0/23 maxlen: 23
192.49.72.0/23 maxlen: 23
192.49.72.0/24 maxlen: 24
192.49.78.0/24 maxlen: 24
192.49.81.0/24 maxlen: 24
192.49.86.0/23 maxlen: 23
192.49.88.0/23 maxlen: 23
192.49.90.0/24 maxlen: 24
192.49.91.0/24 maxlen: 24
192.49.92.0/22 maxlen: 22
192.49.96.0/20 maxlen: 20
192.49.112.0/22 maxlen: 22
192.49.117.0/24 maxlen: 24
192.49.119.0/24 maxlen: 24
192.49.120.0/22 maxlen: 22
192.49.124.0/23 maxlen: 23
192.49.126.0/24 maxlen: 24
192.49.128.0/22 maxlen: 22
192.49.133.0/24 maxlen: 24
192.49.134.0/24 maxlen: 24
192.49.136.0/23 maxlen: 23
192.49.139.0/24 maxlen: 24
192.49.140.0/23 maxlen: 23
192.49.142.0/24 maxlen: 24
192.49.144.0/24 maxlen: 24
192.49.146.0/24 maxlen: 24
192.49.148.0/22 maxlen: 22
192.49.152.0/21 maxlen: 21
192.49.160.0/21 maxlen: 21
192.49.168.0/23 maxlen: 23
192.49.170.0/24 maxlen: 24
192.49.173.0/24 maxlen: 24
192.49.174.0/23 maxlen: 23
192.49.176.0/20 maxlen: 20
192.49.192.0/18 maxlen: 18
2a03:9b80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:ea:17:5f:76:6f:34:47:15:56:1a:d5:38:32:25:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Oct 31 10:57:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bd52ba0e786defd0b4172a657d6a18bc234c347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:f8:6e:ae:f6:e3:56:4e:ad:1a:db:54:2b:
13:b8:74:af:b2:19:fb:13:c6:a5:e0:b5:99:1d:68:
30:e4:9e:8b:e6:43:e6:9b:08:ef:c0:48:8c:f1:20:
87:56:fc:cd:e5:79:2b:fd:74:0e:02:6e:a1:85:c5:
5e:ce:96:49:2d:01:91:b4:69:79:90:73:5a:07:12:
4a:cf:67:76:75:f5:d9:39:f4:74:d5:81:e6:c0:98:
94:db:18:f4:e7:0e:a4:6b:cb:ae:91:d9:92:6c:f6:
d2:23:ba:15:14:be:d9:c6:d1:9a:1d:78:5a:5c:31:
fb:77:b5:22:bc:e5:fc:47:86:8d:62:eb:5b:95:0d:
26:24:10:61:49:1d:70:42:d9:37:85:7b:51:8f:37:
60:ac:42:28:a5:98:bb:6b:dd:c6:a0:05:3e:eb:43:
00:0f:97:a6:17:eb:46:fc:cf:fa:56:f9:15:d5:ed:
e7:30:d2:a1:31:30:82:df:42:16:bf:09:6e:58:1d:
43:36:ba:86:0c:66:73:08:ac:81:0a:43:d7:9f:cb:
b3:ec:48:6f:f5:c0:6d:31:cd:73:e6:30:78:46:45:
2a:64:6b:d3:ad:d7:96:cb:48:8e:8c:69:04:9e:9e:
a9:49:14:55:95:56:95:4a:f5:b8:08:ae:71:b9:35:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D5:2B:A0:E7:86:DE:FD:0B:41:72:A6:57:D6:A1:8B:C2:34:C3:47
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/i9UroOeG3v0LQXKmV9ahi8I0w0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.207.0.0/17
192.49.0.0/21
192.49.9.0-192.49.10.255
192.49.13.0/24
192.49.19.0-192.49.20.255
192.49.22.0/24
192.49.33.0/24
192.49.36.0-192.49.53.255
192.49.55.0-192.49.68.255
192.49.70.0-192.49.73.255
192.49.78.0/24
192.49.81.0/24
192.49.86.0-192.49.115.255
192.49.117.0/24
192.49.119.0-192.49.126.255
192.49.128.0/22
192.49.133.0-192.49.134.255
192.49.136.0/23
192.49.139.0-192.49.142.255
192.49.144.0/24
192.49.146.0/24
192.49.148.0-192.49.170.255
192.49.173.0-192.49.255.255
IPv6:
2a03:9b80::/34
Signature Algorithm: sha256WithRSAEncryption
4e:90:96:2e:04:16:aa:ef:b1:58:30:72:1f:b9:93:e2:f4:53:
7f:7a:f0:37:f1:f1:43:ee:34:94:fa:1b:57:b5:4c:bf:1e:7b:
e2:9c:c2:11:58:02:94:11:8c:e9:8d:0a:13:90:42:d9:2d:db:
e6:49:51:68:07:4d:61:93:f7:99:30:df:b7:09:4f:1d:cc:37:
63:19:6e:34:00:b7:9d:55:09:e6:ef:7a:fc:77:b6:20:36:35:
2e:e8:db:93:42:24:e2:d5:16:88:91:4e:cf:d4:aa:ed:aa:05:
5b:86:31:ec:a2:84:2c:bc:b5:68:5f:8b:4d:d7:72:ea:53:1f:
aa:b0:fa:3a:63:86:50:99:ea:97:a4:13:be:13:2a:23:35:18:
50:b5:e6:6f:c8:ca:40:dc:7d:c4:c4:ce:42:28:fa:ed:26:27:
35:35:cf:9e:bf:bc:c6:d4:7a:fa:ae:a0:06:53:30:55:dd:07:
39:18:ad:d4:d6:9c:3b:c8:5b:c1:5d:0b:55:95:0f:22:0a:59:
ae:b0:f4:69:78:5a:bb:57:87:60:d6:a5:fe:df:22:4f:ea:c0:
af:61:e9:3e:1d:88:9e:90:fe:88:8f:30:7d:d2:f3:55:c4:3a:
7e:ac:74:54:3b:1b:3e:b7:03:01:ad:11:59:94:e1:61:af:60:
cb:a9:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:05 2025 by rpki-client