Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ywLmNtjH1kLsSKwDgDMZLVz_1i0.roa
File: ywLmNtjH1kLsSKwDgDMZLVz_1i0.roa (raw, json)
Hash identifier: UwGTzvTZ1E9x6JNJAm3G6gHMEd9F3tFUjO7xfJuuAhw=
Subject key identifier: CB:02:E6:36:D8:C7:D6:42:EC:48:AC:03:80:33:19:2D:5C:FF:D6:2D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019A170F3343F4F0FF15C426D4CBDD972B1B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ywLmNtjH1kLsSKwDgDMZLVz_1i0.roa
Signing time: Fri 24 Oct 2025 16:31:03 +0000
ROA not before: Fri 24 Oct 2025 16:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 78.135.72.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
188.132.141.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.163.0/24 maxlen: 24
188.132.171.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.203.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:0f:33:43:f4:f0:ff:15:c4:26:d4:cb:dd:97:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 24 16:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb02e636d8c7d642ec48ac038033192d5cffd62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:49:61:31:ef:54:b1:e6:62:04:b7:1b:a3:
c5:21:da:e2:b9:6e:d5:d2:61:a3:ea:a2:0a:01:61:
fe:66:16:2a:c9:46:47:bb:17:f3:de:2a:b5:d5:d9:
97:2d:ea:34:95:44:3f:b9:09:f9:16:3a:9b:b6:8c:
29:2e:08:6b:61:38:8c:1f:ea:16:e1:21:41:91:6a:
ab:7b:e0:aa:cb:d1:a7:40:42:20:d9:9a:8a:93:ba:
05:f3:0c:5b:d7:d9:84:72:50:c1:ee:a0:6d:95:e0:
be:23:1f:e2:18:14:4f:87:89:dc:a1:8a:03:4f:f7:
74:c1:df:ef:9d:f7:d4:d6:62:b7:a4:59:4c:b6:46:
38:d8:43:0a:51:c1:09:e6:20:c6:a6:2b:95:ae:90:
14:c1:a3:2c:70:be:d2:00:a8:53:50:56:a5:ba:ea:
df:6c:d0:d7:f0:8c:32:ff:f0:aa:c5:4a:40:e7:85:
4b:18:88:e7:61:45:e5:67:65:72:4f:ea:5d:28:e4:
b1:b7:4a:2e:a0:9d:43:7f:c9:dc:e3:26:df:dd:52:
11:30:c2:94:99:34:97:5e:44:f1:b0:01:e0:ee:2d:
f4:06:51:37:e0:eb:8a:eb:30:47:62:af:56:f9:59:
e2:4e:f9:19:ae:75:ac:b5:eb:a3:44:ba:b6:1d:47:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:02:E6:36:D8:C7:D6:42:EC:48:AC:03:80:33:19:2D:5C:FF:D6:2D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ywLmNtjH1kLsSKwDgDMZLVz_1i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
78.135.74.0/24
78.135.78.0/24
78.135.81.0/24
78.135.88.0/24
188.132.141.0/24
188.132.146.0/24
188.132.152.0/24
188.132.163.0/24
188.132.171.0/24
188.132.189.0/24
188.132.191.0/24
188.132.203.0/24
188.132.212.0/23
188.132.216.0/23
188.132.229.0/24
188.132.236.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
15:0e:8b:6a:91:bd:77:d8:e8:cd:c0:2d:5d:18:47:c7:1f:32:
85:80:c2:8a:9a:b4:c7:7c:47:bf:02:4a:2a:fb:6a:01:01:19:
de:5c:b6:c0:35:c0:85:fe:4b:42:76:36:cc:70:38:48:54:0e:
7e:07:81:28:28:31:2b:b1:6d:ac:83:ed:7c:49:f6:88:00:68:
f3:7d:8b:fa:1a:57:d1:56:52:83:9e:86:e8:88:1c:31:5b:bd:
77:7e:d0:e0:30:f5:b9:b6:1f:58:23:ac:59:42:a6:46:a2:02:
17:a4:38:29:7b:85:e9:9d:46:07:23:53:5b:1a:ba:a9:b2:e7:
d0:53:56:ef:69:47:96:e6:a9:bf:b1:4e:70:96:d4:b5:58:d8:
af:2f:34:e8:c6:39:da:56:d7:b4:32:ce:d4:6f:7d:1c:20:05:
96:02:59:c4:ec:3d:61:b4:bd:67:b4:7f:22:7b:8c:c5:99:3a:
45:e7:46:6d:f3:d9:33:97:f1:c2:ed:54:de:e3:01:82:17:b8:
76:fc:61:4e:ca:4a:76:23:79:08:75:82:90:07:39:57:62:2e:
fa:32:70:e5:c0:01:57:fd:34:d8:f7:51:99:7f:08:29:7f:68:
92:da:5a:17:ab:7e:52:9b:02:58:61:00:8e:33:1e:f7:1d:35:
ae:75:c4:1b
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZoXDzND9PD/FcQm1MvdlysbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUxMDI0MTYzMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjAyZTYzNmQ4YzdkNjQyZWM0OGFjMDM4MDMzMTkyZDVjZmZkNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAdJYTHvVLHmYgS3G6PFIdriuW7V
0mGj6qIKAWH+ZhYqyUZHuxfz3iq11dmXLeo0lUQ/uQn5FjqbtowpLghrYTiMH+oW
4SFBkWqre+Cqy9GnQEIg2ZqKk7oF8wxb19mEclDB7qBtleC+Ix/iGBRPh4ncoYoD
T/d0wd/vnffU1mK3pFlMtkY42EMKUcEJ5iDGpiuVrpAUwaMscL7SAKhTUFaluurf
bNDX8Iwy//CqxUpA54VLGIjnYUXlZ2VyT+pdKOSxt0ouoJ1Df8nc4ybf3VIRMMKU
mTSXXkTxsAHg7i30BlE34OuK6zBHYq9W+VniTvkZrnWsteujRLq2HUccJwIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFMsC5jbYx9ZC7EisA4AzGS1c/9YtMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEveXdMbU50akgxa0xzU0t3RGdETVpMVnpfMWkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAE6H
SAMEAE6HSgMEAE6HTgMEAE6HUQMEAE6HWAMEALyEjQMEALyEkgMEALyEmAMEALyE
owMEALyEqwMEALyEvQMEALyEvwMEALyEywMEAbyE1AMEAbyE2AMEALyE5QMEALyE
7AMEANRENzAMAwQA1EQ7AwQA1EQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAVDotqkb13
2OjNwC1dGEfHHzKFgMKKmrTHfEe/Akoq+2oBARneXLbANcCF/ktCdjbMcDhIVA5+
B4EoKDErsW2sg+18SfaIAGjzfYv6GlfRVlKDnoboiBwxW713ftDgMPW5th9YI6xZ
QqZGogIXpDgpe4XpnUYHI1NbGrqpsufQU1bvaUeW5qm/sU5wltS1WNivLzToxjna
Vte0Ms7Ub30cIAWWAlnE7D1htL1ntH8ie4zFmTpF50Zt89kzl/HC7VTe4wGCF7h2
/GFOykp2I3kIdYKQBzlXYi76MnDlwAFX/TTY91GZfwgpf2iS2loXq35SmwJYYQCO
Mx73HTWudcQb
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:51 2025 by rpki-client