Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/sL1-Q2O-t3CxPyajS-CayckTLPk.roa
File: sL1-Q2O-t3CxPyajS-CayckTLPk.roa (raw, json)
Hash identifier: 2Y3FCx92CAPaq9q5ReYfA1KFXn/p9yK499L78Belc+c=
Subject key identifier: B0:BD:7E:43:63:BE:B7:70:B1:3F:26:A3:4B:E0:9A:C9:C9:13:2C:F9
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 019A0F92FF63FCC0FE0E2F8DBBA5B513EA33
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/sL1-Q2O-t3CxPyajS-CayckTLPk.roa
Signing time: Thu 23 Oct 2025 05:38:02 +0000
ROA not before: Thu 23 Oct 2025 05:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42781
IP address blocks: 80.184.3.0/24 maxlen: 24
80.184.9.0/24 maxlen: 24
80.184.10.0/24 maxlen: 24
80.184.11.0/24 maxlen: 24
80.184.12.0/23 maxlen: 23
80.184.17.0/24 maxlen: 24
80.184.19.0/24 maxlen: 24
80.184.21.0/24 maxlen: 24
80.184.24.0/22 maxlen: 22
80.184.29.0/24 maxlen: 24
80.184.55.0/24 maxlen: 24
80.184.56.0/24 maxlen: 24
80.184.77.0/24 maxlen: 24
80.184.85.0/24 maxlen: 24
80.184.95.0/24 maxlen: 24
80.184.107.0/24 maxlen: 24
80.184.109.0/24 maxlen: 24
80.184.110.0/24 maxlen: 24
80.184.117.0/24 maxlen: 24
80.184.120.0/22 maxlen: 22
80.184.124.0/24 maxlen: 24
80.184.125.0/24 maxlen: 24
80.184.127.0/24 maxlen: 24
80.184.135.0/24 maxlen: 24
80.184.140.0/23 maxlen: 23
80.184.144.0/22 maxlen: 22
80.184.148.0/22 maxlen: 22
80.184.165.0/24 maxlen: 24
80.184.190.0/24 maxlen: 24
80.184.200.0/24 maxlen: 24
80.184.204.0/22 maxlen: 22
80.184.216.0/22 maxlen: 22
80.184.221.0/24 maxlen: 24
80.184.224.0/22 maxlen: 22
80.184.229.0/24 maxlen: 24
80.184.245.0/24 maxlen: 24
158.94.180.0/23 maxlen: 23
158.94.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:92:ff:63:fc:c0:fe:0e:2f:8d:bb:a5:b5:13:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Oct 23 05:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0bd7e4363beb770b13f26a34be09ac9c9132cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:79:5c:d5:72:dd:40:9f:53:f5:38:0e:5b:
1c:58:6f:67:5e:48:24:3b:a7:78:92:6b:06:36:3b:
40:93:1b:86:1a:98:e0:32:8c:d6:61:01:79:cf:f0:
0f:6a:63:5a:45:c2:d0:cf:17:34:24:56:05:cb:c6:
81:38:9c:64:ac:20:88:8f:77:bc:d6:56:7c:35:1a:
b5:d9:83:c5:a5:51:1d:68:91:86:cb:43:5a:de:89:
1c:6c:51:b3:05:a6:cf:a4:a7:d8:2b:dc:b9:3b:e9:
7f:78:d3:83:04:08:e8:37:b3:90:b4:41:5b:ab:54:
24:cd:ec:eb:74:15:ff:2e:58:91:61:0d:7c:d4:7f:
51:36:16:09:01:77:f2:49:95:d5:36:00:fc:6a:b2:
89:b2:5c:62:2d:be:e8:e4:0b:f2:c3:60:98:6b:3f:
97:50:df:81:bc:37:1d:94:ef:9e:73:a1:db:25:f5:
a9:5f:6f:72:c2:46:02:b1:21:d2:9e:f3:9c:ce:62:
0b:23:5d:51:bb:9c:e3:99:95:f0:86:be:3a:be:b6:
58:0b:5e:e2:64:79:b6:a5:d1:ad:3f:b0:6b:7f:6c:
29:e5:34:0e:07:e6:24:25:d4:f2:67:fe:d4:f2:6b:
3b:35:3d:ee:05:bc:12:13:b7:4b:a6:d2:cb:24:f8:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:7E:43:63:BE:B7:70:B1:3F:26:A3:4B:E0:9A:C9:C9:13:2C:F9
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/sL1-Q2O-t3CxPyajS-CayckTLPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.184.3.0/24
80.184.9.0-80.184.13.255
80.184.17.0/24
80.184.19.0/24
80.184.21.0/24
80.184.24.0/22
80.184.29.0/24
80.184.55.0-80.184.56.255
80.184.77.0/24
80.184.85.0/24
80.184.95.0/24
80.184.107.0/24
80.184.109.0-80.184.110.255
80.184.117.0/24
80.184.120.0-80.184.125.255
80.184.127.0/24
80.184.135.0/24
80.184.140.0/23
80.184.144.0/21
80.184.165.0/24
80.184.190.0/24
80.184.200.0/24
80.184.204.0/22
80.184.216.0/22
80.184.221.0/24
80.184.224.0/22
80.184.229.0/24
80.184.245.0/24
158.94.180.0/23
Signature Algorithm: sha256WithRSAEncryption
00:e9:73:83:d1:71:f8:8c:89:40:70:c5:f2:4b:6e:0d:c6:93:
a5:95:bd:55:37:92:f2:de:80:bd:8f:9a:2b:78:ac:40:0b:b2:
5d:d7:d1:6f:80:1c:c7:02:b4:f1:8b:93:7e:88:2f:e5:5e:69:
c7:39:ac:eb:10:1d:4e:31:f4:81:d7:c8:6d:3c:18:8f:6f:70:
ec:8f:4c:be:d6:27:df:57:7c:2f:75:24:21:5c:3c:b9:72:4f:
f2:2f:e9:73:67:9b:66:d8:1a:02:1d:3b:3d:8b:90:e3:1f:d4:
5f:8c:ad:b3:3b:62:df:67:03:bf:b3:2f:59:64:76:a7:c8:3c:
62:43:71:6e:03:b5:74:67:88:42:75:a9:8e:5e:2c:f7:29:ef:
61:9c:3c:60:02:bf:b3:f4:bd:83:cc:b9:48:e9:0a:97:df:49:
d9:66:15:1c:3c:a6:9c:e9:b9:90:27:7b:a6:bc:c1:3c:18:41:
ed:80:40:02:9e:e5:df:95:bd:0a:72:0f:ff:34:63:42:9e:7e:
26:cf:42:45:b3:31:28:e4:0e:ac:5e:a4:70:90:8b:6d:c5:c0:
0f:59:ce:35:85:3d:31:4b:c0:01:30:7c:fd:a6:d1:a4:e4:30:
3b:9c:fc:bb:f8:98:6e:8c:2d:2d:e3:ef:09:b8:4d:80:f8:40:
ac:a6:a7:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:35:09 2025 by rpki-client