Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/H6VCMPZt4N3Kunln9a3Mlo4bXvg.roa
File: H6VCMPZt4N3Kunln9a3Mlo4bXvg.roa (raw, json)
Hash identifier: VEp5C+2m6nUwD5BidsWoXkpCNXESmRUDyLPsmQbse48=
Subject key identifier: 1F:A5:42:30:F6:6D:E0:DD:CA:BA:79:67:F5:AD:CC:96:8E:1B:5E:F8
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019A2560F8F25FDBEA25FFB016E8226793AE
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/H6VCMPZt4N3Kunln9a3Mlo4bXvg.roa
Signing time: Mon 27 Oct 2025 11:15:03 +0000
ROA not before: Mon 27 Oct 2025 11:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 5.154.252.0/24 maxlen: 24
5.154.253.0/24 maxlen: 24
5.157.129.0/24 maxlen: 24
91.225.12.0/24 maxlen: 24
91.225.13.0/24 maxlen: 24
178.157.72.0/24 maxlen: 24
178.157.73.0/24 maxlen: 24
178.157.74.0/24 maxlen: 24
178.157.75.0/24 maxlen: 24
178.157.92.0/24 maxlen: 24
178.157.102.0/24 maxlen: 24
178.157.103.0/24 maxlen: 24
178.157.104.0/24 maxlen: 24
178.157.105.0/24 maxlen: 24
188.74.132.0/24 maxlen: 24
188.74.133.0/24 maxlen: 24
188.74.134.0/24 maxlen: 24
188.74.135.0/24 maxlen: 24
188.74.136.0/24 maxlen: 24
188.74.137.0/24 maxlen: 24
188.74.138.0/24 maxlen: 24
188.74.139.0/24 maxlen: 24
188.74.168.0/24 maxlen: 24
188.74.169.0/24 maxlen: 24
188.119.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:60:f8:f2:5f:db:ea:25:ff:b0:16:e8:22:67:93:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Oct 27 11:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa54230f66de0ddcaba7967f5adcc968e1b5ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:5e:d7:71:b9:34:62:fe:a1:b4:bc:f5:d0:
97:d9:f0:d3:1e:99:aa:69:32:b5:ab:88:54:7c:70:
ea:5d:4c:83:6d:8e:3c:9b:21:9a:7e:2e:54:6b:f8:
bc:d3:d2:17:43:05:c8:98:b0:8a:6a:c1:55:c4:14:
6f:a6:79:bd:f1:ef:59:0e:d3:05:ba:be:c7:b1:b2:
dc:cc:ea:9a:6e:d3:0e:cd:4a:00:15:7c:32:01:0a:
d0:2b:e0:85:87:4f:f4:20:e6:1e:ba:b4:00:72:ea:
37:bd:cb:7f:a5:35:53:36:f0:ae:b0:5f:7f:b1:7a:
57:cb:f1:ee:b1:28:3a:b8:f5:c5:15:10:f8:b3:dd:
38:b0:b8:f0:08:22:97:33:1c:d0:0e:50:e0:e6:3c:
4d:85:29:1e:e0:a3:23:66:39:9e:2d:9b:6e:2e:5b:
06:34:bf:77:cb:90:1e:e6:09:ad:a1:b3:93:ed:02:
5e:2a:15:eb:71:15:8d:d7:04:9d:e0:cc:59:67:93:
a3:1b:81:9e:0b:d9:7e:dc:f6:ef:1a:8b:2d:66:f6:
ed:a5:80:84:05:42:1a:6e:13:7e:c2:25:e2:8b:52:
10:a4:9f:83:5d:12:ca:84:6e:45:f9:10:9c:ce:1d:
bf:9d:71:9f:21:5d:97:6e:0c:0d:c3:ac:35:53:e2:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:42:30:F6:6D:E0:DD:CA:BA:79:67:F5:AD:CC:96:8E:1B:5E:F8
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/H6VCMPZt4N3Kunln9a3Mlo4bXvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.252.0/23
5.157.129.0/24
91.225.12.0/23
178.157.72.0/22
178.157.92.0/24
178.157.102.0-178.157.105.255
188.74.132.0-188.74.139.255
188.74.168.0/23
188.119.188.0/24
Signature Algorithm: sha256WithRSAEncryption
66:27:7f:b6:2c:3a:9d:63:6c:e5:78:9d:ec:d4:ce:36:4c:12:
f7:cd:43:6e:87:91:1a:fc:0e:34:0c:38:72:19:b3:c2:a7:14:
92:f7:7f:94:72:7f:30:66:50:09:f6:48:6d:40:d6:3e:bf:f1:
f7:b8:04:6d:37:14:27:5f:e2:37:c5:7f:d3:f6:63:92:c1:58:
ec:ff:1f:8a:47:4a:84:8d:d7:71:9a:01:04:c8:a4:59:4d:1a:
94:c9:29:46:a2:36:64:52:a7:1d:a2:8b:8f:fc:eb:60:30:24:
3a:ef:cc:95:22:5c:2b:50:5e:e2:b6:86:a5:98:98:25:eb:7e:
95:92:fe:61:ca:c8:c2:ba:a4:69:bd:24:a2:d0:3e:cc:b5:64:
e1:97:14:38:59:63:42:5e:a5:f4:fc:16:0a:6c:50:c8:91:2a:
15:ab:1f:15:7d:91:ea:32:ef:0d:2f:a4:4f:ec:ea:9f:d6:8c:
7f:e1:43:37:27:b0:29:37:d3:46:92:6d:69:d5:12:de:5f:49:
42:7f:21:33:b2:bb:8b:39:bc:f8:29:33:59:52:de:77:e1:4c:
48:37:b7:27:fd:da:ca:8f:9b:40:67:a0:f1:70:d3:55:ea:72:
5e:21:83:18:ae:8e:40:ab:6f:d7:78:6d:67:b1:b4:27:25:de:
b2:62:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:16 2025 by rpki-client