Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/7y0HEBKtThwqpVnMqjdVrnLEi4E.roa
File: 7y0HEBKtThwqpVnMqjdVrnLEi4E.roa (raw, json)
Hash identifier: 6/V4tWszZ+0oUo8YJ4mg3Pxu2rzylnwMTQjo5zLhoNg=
Subject key identifier: EF:2D:07:10:12:AD:4E:1C:2A:A5:59:CC:AA:37:55:AE:72:C4:8B:81
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019A2E06B63E39FA7344BEA8D3776AA9A6C9
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/7y0HEBKtThwqpVnMqjdVrnLEi4E.roa
Signing time: Wed 29 Oct 2025 03:33:03 +0000
ROA not before: Wed 29 Oct 2025 03:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60246
IP address blocks: 80.72.20.0/23 maxlen: 32
80.72.24.0/23 maxlen: 32
85.198.120.0/21 maxlen: 32
92.118.72.0/23 maxlen: 32
95.174.96.0/20 maxlen: 32
95.174.112.0/21 maxlen: 32
95.174.120.0/24 maxlen: 32
95.174.123.0/24 maxlen: 32
95.174.124.0/22 maxlen: 32
178.212.139.0/24 maxlen: 32
178.248.0.0/22 maxlen: 32
178.248.4.0/23 maxlen: 23
185.9.184.0/24 maxlen: 32
185.9.186.0/23 maxlen: 32
185.230.240.0/23 maxlen: 32
185.230.242.0/24 maxlen: 32
2a00:8740::/46 maxlen: 128
2a00:8740:10::/44 maxlen: 128
2a00:8740:20::/44 maxlen: 128
2a00:8740:30::/44 maxlen: 128
2a00:8740:100::/48 maxlen: 128
2a00:8740:110::/47 maxlen: 128
2a00:8740:112::/48 maxlen: 128
2a00:8740:201::/48 maxlen: 128
2a00:8740:ff00::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:06:b6:3e:39:fa:73:44:be:a8:d3:77:6a:a9:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Oct 29 03:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef2d071012ad4e1c2aa559ccaa3755ae72c48b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:5d:62:0d:49:79:5c:aa:8a:e7:34:b1:ed:
8b:9c:95:1a:81:be:11:fd:7a:0a:55:e7:ef:b2:60:
ed:a0:4b:1c:d5:92:e3:2b:39:56:98:ec:84:87:ed:
84:41:07:3b:37:80:d6:a3:b3:97:ff:f0:fc:79:41:
a5:9d:ac:b7:88:28:07:02:46:00:a4:3f:60:66:8d:
f5:1f:82:3e:ce:81:c3:e4:a1:b4:12:67:d6:dd:d6:
1b:da:9b:45:ff:23:55:67:31:62:f3:52:7e:64:bb:
fc:3d:bf:9d:f2:65:65:26:47:bc:49:1b:3a:dc:24:
1b:12:33:41:98:5c:0d:7d:b8:43:d3:43:10:cd:9e:
5a:ad:da:21:fe:63:ff:5e:56:9f:a3:89:84:86:a8:
57:09:a6:0e:ba:af:af:7d:18:54:fa:bc:a9:49:d2:
e2:e3:25:6c:25:ff:b2:61:f9:a4:91:27:dc:ab:49:
a3:9a:ee:71:e3:68:83:4e:0c:37:6d:f9:4b:0b:ed:
b0:2f:91:7c:2a:bb:5c:8f:60:13:3d:48:a9:fb:43:
01:6f:a6:ed:c4:b5:04:16:40:52:71:ac:48:d9:80:
e9:55:b0:c3:8b:6f:a1:8f:ed:06:be:e4:e9:0f:44:
31:24:65:dd:a8:27:8d:64:84:1d:e2:89:12:f2:53:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2D:07:10:12:AD:4E:1C:2A:A5:59:CC:AA:37:55:AE:72:C4:8B:81
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/7y0HEBKtThwqpVnMqjdVrnLEi4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.20.0/23
80.72.24.0/23
85.198.120.0/21
92.118.72.0/23
95.174.96.0-95.174.120.255
95.174.123.0-95.174.127.255
178.212.139.0/24
178.248.0.0-178.248.5.255
185.9.184.0/24
185.9.186.0/23
185.230.240.0-185.230.242.255
IPv6:
2a00:8740::/46
2a00:8740:10::-2a00:8740:3f:ffff:ffff:ffff:ffff:ffff
2a00:8740:100::/48
2a00:8740:110::-2a00:8740:112:ffff:ffff:ffff:ffff:ffff
2a00:8740:201::/48
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
37:92:a5:7e:a2:e7:86:6d:47:9b:93:70:a9:a5:56:2d:30:a1:
96:b6:c2:7d:09:71:33:9f:b9:2c:d7:a4:a0:41:3e:8c:94:31:
c9:fa:d1:91:2d:97:29:8c:83:7c:67:5e:1a:8e:c9:17:25:07:
62:c1:3e:c5:2e:d2:bd:1d:0e:a6:b6:0a:af:2e:c2:f3:b3:81:
5d:8f:6c:eb:20:8c:12:1c:d5:71:bc:ea:f3:83:82:35:45:83:
9e:78:4a:7e:2f:9d:20:c0:ea:0a:df:ee:e9:8d:ad:d5:d4:5f:
6b:68:3c:4d:52:f3:17:22:9c:37:96:80:00:d4:f1:6d:1b:2a:
7d:5e:0d:65:f9:47:bf:78:ae:1f:cb:1b:3c:02:ff:3d:ef:09:
64:16:e4:cd:24:54:90:da:81:f5:21:8b:eb:58:8a:3a:70:88:
40:71:32:84:f6:42:4d:c4:fe:db:06:d8:8c:45:84:cb:62:e1:
bd:bd:07:a3:88:3c:e7:3d:cc:f8:b2:38:61:c4:9c:e9:0d:cf:
dc:00:2c:39:6b:36:92:3d:68:e1:c3:bc:78:9f:42:bb:ac:3c:
fc:d2:fe:12:0e:e6:d7:6a:75:73:3f:b3:3a:5b:46:14:05:3b:
b0:88:b8:0f:46:f1:00:4f:00:44:50:18:e5:90:b1:fd:6b:b1:
07:e2:a7:68
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZouBrY+OfpzRL6o03dqqabJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjUxMDI5MDMzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjJkMDcxMDEyYWQ0ZTFjMmFhNTU5Y2NhYTM3NTVhZTcyYzQ4YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA035dYg1JeVyqiuc0se2LnJUagb4R
/XoKVefvsmDtoEsc1ZLjKzlWmOyEh+2EQQc7N4DWo7OX//D8eUGlnay3iCgHAkYA
pD9gZo31H4I+zoHD5KG0EmfW3dYb2ptF/yNVZzFi81J+ZLv8Pb+d8mVlJke8SRs6
3CQbEjNBmFwNfbhD00MQzZ5ardoh/mP/Xlafo4mEhqhXCaYOuq+vfRhU+rypSdLi
4yVsJf+yYfmkkSfcq0mjmu5x42iDTgw3bflLC+2wL5F8Krtcj2ATPUip+0MBb6bt
xLUEFkBScaxI2YDpVbDDi2+hj+0GvuTpD0QxJGXdqCeNZIQd4okS8lOS8wIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFO8tBxASrU4cKqVZzKo3Va5yxIuBMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvN3kwSEVCS3RUaHdxcFZuTXFqZFZybkxFaTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTBnBAIAATBhAwQBUEgU
AwQBUEgYAwQDVcZ4AwQBXHZIMAwDBAVfrmADBABfrngwDAMEAF+uewMEB1+uAAME
ALLUizALAwMDsvgDBAGy+AQDBAC5CbgDBAG5CbowDAMEBLnm8AMEALnm8jBSBAIA
AjBMAwcCKgCHQAAAMBIDBwQqAIdAABADBwYqAIdAAAADBwAqAIdAAQAwEgMHBCoA
h0ABEAMHACoAh0ABEgMHACoAh0ACAQMHACoAh0D/ADANBgkqhkiG9w0BAQsFAAOC
AQEAN5KlfqLnhm1Hm5NwqaVWLTChlrbCfQlxM5+5LNekoEE+jJQxyfrRkS2XKYyD
fGdeGo7JFyUHYsE+xS7SvR0OprYKry7C87OBXY9s6yCMEhzVcbzq84OCNUWDnnhK
fi+dIMDqCt/u6Y2t1dRfa2g8TVLzFyKcN5aAANTxbRsqfV4NZflHv3iuH8sbPAL/
Pe8JZBbkzSRUkNqB9SGL61iKOnCIQHEyhPZCTcT+2wbYjEWEy2Lhvb0Ho4g85z3M
+LI4YcSc6Q3P3AAsOWs2kj1o4cO8eJ9Cu6w8/NL+Eg7m12p1cz+zOltGFAU7sIi4
D0bxAE8ARFAY5ZCx/WuxB+KnaA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:14 2025 by rpki-client