Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OOYtn23LoN8OEHgEw_Qf2xYNQC0.roa
File: OOYtn23LoN8OEHgEw_Qf2xYNQC0.roa (raw, json)
Hash identifier: DnY7eUMh13WOaQX5REtcrWHN9mHRo5grbXw5KmtWzZY=
Subject key identifier: 38:E6:2D:9F:6D:CB:A0:DF:0E:10:78:04:C3:F4:1F:DB:16:0D:40:2D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01976A1126A14FB4AD0159552C53627A1281
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OOYtn23LoN8OEHgEw_Qf2xYNQC0.roa
Signing time: Fri 13 Jun 2025 16:13:18 +0000
ROA not before: Fri 13 Jun 2025 16:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.216.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
82.153.231.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.76.0/22 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.154.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:11:26:a1:4f:b4:ad:01:59:55:2c:53:62:7a:12:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 13 16:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e62d9f6dcba0df0e107804c3f41fdb160d402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:65:a0:66:fa:92:68:6f:cc:d5:92:c0:dc:
79:96:46:91:b0:66:c5:ab:92:08:bf:0d:08:13:b6:
9d:b9:f9:0a:26:1f:94:b2:98:25:6b:95:c4:3b:7f:
e3:6e:6c:4a:e1:fb:4a:84:e7:3a:ec:16:f4:93:80:
17:29:f8:5e:04:68:ff:13:42:a6:16:9d:ae:1a:58:
d4:4f:e8:33:10:90:0b:32:c2:5e:06:c6:e2:50:ca:
55:5f:be:7a:d1:67:cf:09:e4:55:0b:15:c0:51:54:
65:0a:b4:73:62:53:20:3c:fe:18:5c:99:9d:12:e8:
fd:a1:1b:46:ae:65:68:a5:b9:5b:1b:93:7f:a2:17:
ac:d7:00:86:dd:63:b7:3e:32:b7:e8:e0:70:ea:06:
23:e3:74:a9:f2:9a:d2:e2:10:50:45:93:e8:43:90:
45:83:9f:05:7c:59:70:5a:53:08:07:4f:1c:83:d2:
1d:51:ef:e5:36:19:c2:06:2f:4d:c0:ee:de:c5:2c:
e0:58:1e:6a:9d:2c:a9:ae:aa:de:a0:12:ed:7e:13:
6d:d2:c8:3d:a4:d3:a1:52:6d:12:1b:2b:49:70:1a:
8a:b7:f4:31:39:f0:3d:06:71:86:59:2d:ae:ba:b7:
28:f8:4b:40:9a:b1:88:1c:1a:ef:0d:e5:be:2d:eb:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:2D:9F:6D:CB:A0:DF:0E:10:78:04:C3:F4:1F:DB:16:0D:40:2D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OOYtn23LoN8OEHgEw_Qf2xYNQC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.216.0/23
82.153.220.0/24
82.153.231.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.169.0/24
89.213.172.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.76.0-194.105.95.255
212.38.79.0/24
212.38.81.0/24
212.38.88.0/23
213.130.132.0/22
213.130.154.0/24
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
89:d0:76:88:14:a5:fd:10:17:d5:1b:f4:a2:d8:30:b1:d2:45:
19:53:a9:49:b9:b6:f1:1c:42:f6:8e:03:e6:5d:e8:e3:96:72:
69:52:75:48:01:b8:5a:d8:35:99:57:72:d6:c6:94:46:20:df:
91:70:4e:96:91:03:31:5a:5a:de:ea:e6:e5:7a:40:fb:c0:a4:
c4:34:6f:a1:30:00:58:0d:ad:d1:91:1f:71:26:32:71:0b:62:
9d:67:f8:46:ac:56:ec:9a:cf:25:4c:2f:ff:86:51:5a:05:d0:
e4:56:22:e4:89:c1:6e:c9:4d:58:a6:88:be:b4:bb:d1:ce:d1:
f4:02:cb:a6:8a:4f:e4:cc:56:65:50:cd:cd:a1:ff:c4:c6:4b:
55:bb:f5:0e:89:69:bd:4b:46:27:41:70:08:2e:5d:05:34:d4:
3b:c8:6c:58:7f:38:87:f6:8c:33:41:50:d0:36:29:69:72:e7:
16:dd:db:0a:2d:a7:55:58:e1:2f:40:45:99:36:bd:d0:c8:38:
00:9d:d7:c7:79:c2:a3:a9:e6:12:24:48:bb:78:ef:4b:a6:44:
eb:c7:8e:db:f9:c7:b0:2c:2c:1a:0d:f4:10:00:9b:df:5d:45:
13:be:47:8a:81:06:82:59:aa:a7:fc:29:2f:2d:f6:56:e9:76:
04:c0:b3:52
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAZdqESahT7StAVlVLFNiehKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNjEzMTYxMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGU2MmQ5ZjZkY2JhMGRmMGUxMDc4MDRjM2Y0MWZkYjE2MGQ0MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0VloGb6kmhvzNWSwNx5lkaRsGbF
q5IIvw0IE7adufkKJh+Uspgla5XEO3/jbmxK4ftKhOc67Bb0k4AXKfheBGj/E0Km
Fp2uGljUT+gzEJALMsJeBsbiUMpVX7560WfPCeRVCxXAUVRlCrRzYlMgPP4YXJmd
Euj9oRtGrmVopblbG5N/ohes1wCG3WO3PjK36OBw6gYj43Sp8prS4hBQRZPoQ5BF
g58FfFlwWlMIB08cg9IdUe/lNhnCBi9NwO7exSzgWB5qnSyprqreoBLtfhNt0sg9
pNOhUm0SGytJcBqKt/QxOfA9BnGGWS2uurco+EtAmrGIHBrvDeW+Lev6+QIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFDjmLZ9ty6DfDhB4BMP0H9sWDUAtMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvT09ZdG4yM0xvTjhPRUhnRXdfUWYyeFlOUUMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAFEFvQMEAFKYCAMEAVKYsAMEAFKZRQMEAlKZiAMEAVKZ2AMEAFKZ3AMEAFKZ
5wMEAFKZ/wMEAVnVLDAMAwQBWdUyAwQCWdU4AwQAWdWEAwQAWdWLAwQAWdWPMAwD
BABZ1ZEDBABZ1ZIwDAMEAlnVlAMEBVnVgAMEAFnVogMEAFnVpAMEAFnVqTAMAwQC
WdWsAwQAWdWwAwQAWdW1AwQAWdW3AwQAWdW/MAwDBAJZ1cQDBARZ1cAwDAMEAlnV
5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEALllLzAMAwQCwmlMAwQF
wmlAAwQA1CZPAwQA1CZRAwQB1CZYAwQC1YKEAwQA1YKaAwQA1ZgrAwQC1dI0AwQA
1drTAwQC1dr0MAwDBADZkUEDBADZkUIDBAPZkUgwDQYJKoZIhvcNAQELBQADggEB
AInQdogUpf0QF9Ub9KLYMLHSRRlTqUm5tvEcQvaOA+Zd6OOWcmlSdUgBuFrYNZlX
ctbGlEYg35FwTpaRAzFaWt7q5uV6QPvApMQ0b6EwAFgNrdGRH3EmMnELYp1n+Eas
VuyazyVML/+GUVoF0ORWIuSJwW7JTVimiL60u9HO0fQCy6aKT+TMVmVQzc2h/8TG
S1W79Q6Jab1LRidBcAguXQU01DvIbFh/OIf2jDNBUNA2KWly5xbd2wotp1VY4S9A
RZk2vdDIOACd18d5wqOp5hIkSLt470umROvHjtv5x7AsLBoN9BAAm99dRRO+R4qB
BoJZqqf8KS8t9lbpdgTAs1I=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:07:12 2025 by rpki-client