Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0YfrBr_7bu45Q9bWzPWHjfC7Yxk.roa
File: 0YfrBr_7bu45Q9bWzPWHjfC7Yxk.roa (raw, json)
Hash identifier: G1eeMdx+iF1ivE/psfr0M1GNW19t4zNyToujCE/IEI4=
Subject key identifier: D1:87:EB:06:BF:FB:6E:EE:39:43:D6:D6:CC:F5:87:8D:F0:BB:63:19
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 019A29E19D61047017FBE3BB35DEA5EC4E54
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0YfrBr_7bu45Q9bWzPWHjfC7Yxk.roa
Signing time: Tue 28 Oct 2025 08:14:03 +0000
ROA not before: Tue 28 Oct 2025 08:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.41.0/24 maxlen: 24
148.253.42.0/24 maxlen: 24
148.253.44.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.50.0/24 maxlen: 24
148.253.60.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.63.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.241.0/24 maxlen: 24
148.253.244.0/24 maxlen: 24
148.253.245.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.77.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.110.0/24 maxlen: 24
163.171.119.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.143.0/24 maxlen: 24
163.171.149.0/24 maxlen: 24
163.171.153.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.217.0/24 maxlen: 24
163.171.218.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.227.0/24 maxlen: 24
163.171.230.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.234.0/24 maxlen: 24
163.171.235.0/24 maxlen: 24
163.171.237.0/24 maxlen: 24
163.171.244.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
185.27.230.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
2a01:53c0:ffe7::/48 maxlen: 48
2a01:53c0:fff2::/48 maxlen: 48
2a01:53c0:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:e1:9d:61:04:70:17:fb:e3:bb:35:de:a5:ec:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Oct 28 08:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d187eb06bffb6eee3943d6d6ccf5878df0bb6319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:e8:c7:1c:79:22:7d:68:1e:da:75:43:89:
09:65:85:c0:5c:40:6d:9d:e9:60:dd:ad:22:9f:7f:
3e:98:45:72:c2:1b:aa:35:f9:e3:bb:02:94:10:59:
71:07:b4:86:85:df:98:9b:1a:45:30:60:c6:fd:6f:
56:f0:01:dd:89:39:62:1c:92:2a:50:e2:30:73:1e:
04:39:18:89:02:78:69:fc:77:d6:9e:cb:00:a6:3d:
32:26:06:cb:a0:3a:ae:cf:6b:42:ca:84:07:89:dc:
87:37:f6:22:67:66:a5:4d:04:96:61:83:50:16:7a:
ce:7b:a5:a0:fd:af:2b:42:4e:ed:e5:f5:f2:28:b4:
32:6e:7a:37:f9:f4:82:69:48:23:03:30:e2:80:08:
11:50:68:ea:40:20:82:bf:c7:bb:bb:31:bf:00:1c:
2f:3c:02:f6:fd:57:98:e8:e5:f0:95:0b:06:04:e8:
01:68:22:b3:92:5e:d5:57:99:cc:85:21:90:6c:c9:
12:cb:43:ba:63:16:01:02:4a:3e:db:a9:44:bc:a8:
25:ef:4f:2d:34:4c:06:9d:d3:a2:4c:4e:6b:3f:1e:
6b:f7:78:44:09:08:41:fc:05:ee:86:d8:14:b6:92:
b3:43:8b:c9:bb:c8:86:22:e7:b5:45:8f:42:c0:5b:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:EB:06:BF:FB:6E:EE:39:43:D6:D6:CC:F5:87:8D:F0:BB:63:19
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0YfrBr_7bu45Q9bWzPWHjfC7Yxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.205.0/24
91.202.200.0/24
93.188.132.0/24
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.41.0-148.253.42.255
148.253.44.0/24
148.253.47.0/24
148.253.50.0/24
148.253.60.0/22
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.241.0/24
148.253.244.0-148.253.246.255
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.77.0/24
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.110.0/24
163.171.119.0/24
163.171.126.0/24
163.171.143.0/24
163.171.149.0/24
163.171.153.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.215.0-163.171.218.255
163.171.222.0/24
163.171.224.0/23
163.171.227.0/24
163.171.230.0/23
163.171.234.0/23
163.171.237.0/24
163.171.244.0/24
163.171.249.0/24
163.171.252.0/24
185.27.230.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ffc6::/48
2a01:53c0:ffe7::/48
2a01:53c0:fff2::/48
2a01:53c0:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
b4:99:8d:c3:06:df:9e:7f:b0:dc:ca:42:5b:53:28:27:5c:e8:
38:55:63:9f:23:91:0e:b5:b5:b8:91:1e:16:85:ee:3e:a1:1f:
38:7a:60:f2:48:46:d1:79:ce:e1:8f:86:51:2a:02:05:00:a5:
cb:42:1f:5b:dd:66:48:34:cb:2b:ae:6b:d2:86:93:86:08:a8:
62:1d:81:a3:28:ff:e7:bc:56:f8:ac:df:7e:6c:cd:ac:63:58:
0b:e4:45:fa:53:84:86:57:96:36:c4:40:ac:e0:34:d4:b9:1c:
d7:15:60:8f:8a:9e:b0:1a:9c:8e:44:c5:b2:49:c2:4a:6d:df:
9e:0e:bc:4b:e3:29:f1:0a:30:f5:4a:cb:95:7b:c0:5c:60:08:
f3:0a:8b:af:d2:1a:6f:4b:7f:cf:06:30:01:f2:21:d0:c3:e2:
d7:db:f7:72:a2:6e:07:45:f1:0b:9a:ed:55:ec:c6:05:12:29:
9f:00:5b:ca:74:49:c6:18:06:c9:5b:af:56:ab:d8:a2:f1:5d:
d8:22:eb:57:ca:a2:92:39:5b:8a:ea:11:93:d0:4f:a5:b7:9f:
55:e3:0b:7b:0d:34:46:c4:50:80:3f:19:3e:92:bb:ca:72:87:
a4:7d:35:53:67:4a:13:6c:97:70:1b:c9:77:df:82:a4:5d:01:
f2:2b:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:55 2025 by rpki-client