Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/iqAmm6mmiz5aGKiZtZxJEqNWNi8.roa
File: iqAmm6mmiz5aGKiZtZxJEqNWNi8.roa (raw, json)
Hash identifier: QuD+iN0q/ipydpZuVRSOXyL8EcM2ow2eAM+Ezo2Keq0=
Subject key identifier: 8A:A0:26:9B:A9:A6:8B:3E:5A:18:A8:99:B5:9C:49:12:A3:56:36:2F
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019A30812C463D4CDAED8A9E89635F02396A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/iqAmm6mmiz5aGKiZtZxJEqNWNi8.roa
Signing time: Wed 29 Oct 2025 15:06:03 +0000
ROA not before: Wed 29 Oct 2025 15:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.109.0/24 maxlen: 24
95.215.110.0/23 maxlen: 23
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:81:2c:46:3d:4c:da:ed:8a:9e:89:63:5f:02:39:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 29 15:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aa0269ba9a68b3e5a18a899b59c4912a356362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:69:98:d2:2e:be:5c:05:15:7d:4b:2f:3e:
b5:40:bf:de:2d:ed:39:2a:70:19:75:36:a7:7c:e4:
bc:84:51:0b:db:7f:2f:3d:7f:af:a2:91:ff:90:8d:
61:8e:f6:b5:b8:88:f9:25:9a:66:72:e4:c4:2d:67:
87:1b:0a:74:5b:c1:60:05:1f:fb:23:ea:64:e7:f7:
31:9d:82:26:95:fa:33:6c:f8:ca:f1:81:4d:e2:a8:
72:d6:63:b4:01:a2:57:5a:b8:b2:3f:42:4c:01:7b:
a1:02:aa:2f:85:8e:32:a5:46:7a:44:0f:28:24:34:
11:5f:a3:d9:a2:23:75:4d:f2:61:7c:f4:3c:3b:bc:
fb:4d:e3:a4:3b:7c:c5:20:33:6b:99:78:d3:ec:f3:
34:c5:0a:f0:0d:ec:2c:e5:09:cc:ed:5f:e3:8f:59:
bd:8e:17:3e:27:69:b8:20:5d:8e:0b:72:14:8a:6e:
9d:07:aa:ca:45:23:43:b1:2e:18:f7:b8:e8:86:dd:
81:67:fd:12:f7:a6:d2:7a:6b:97:ba:29:59:6f:c3:
73:84:94:ab:db:4e:d7:0a:c9:b4:0a:c4:6d:7a:1b:
45:89:ac:6a:8d:10:b1:3c:cd:a8:8f:f6:5f:76:0d:
a3:af:09:58:e7:38:d2:bb:57:39:c7:08:0d:7c:a0:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A0:26:9B:A9:A6:8B:3E:5A:18:A8:99:B5:9C:49:12:A3:56:36:2F
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/iqAmm6mmiz5aGKiZtZxJEqNWNi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
8f:73:d8:44:ce:4e:7a:16:8b:74:6d:51:75:fb:d8:25:a6:ae:
32:fb:a2:86:2a:06:97:f6:6e:29:95:2d:ce:48:04:fa:90:a5:
6b:ee:ad:c9:eb:ed:86:48:39:e4:3e:23:c8:06:69:a7:52:12:
6d:f1:88:70:df:04:42:55:62:9c:7f:2c:15:e8:99:18:9c:82:
a0:33:29:77:bd:2c:8a:fc:ed:b8:74:b6:d3:a9:b3:6d:68:c2:
8c:dd:5d:24:ef:4f:dc:c8:16:9b:5d:f8:33:92:4c:d2:b9:30:
8d:b9:a6:3d:01:d6:bf:b8:70:e5:af:b9:6d:b3:ee:54:50:ca:
50:90:a1:5a:57:26:ae:1d:cf:7c:cb:33:54:66:2e:84:f2:b8:
ff:87:1f:bb:b5:2f:c7:50:4b:f6:6c:2e:49:f4:b2:09:91:75:
17:d0:06:7f:10:cb:b4:cd:9e:66:dc:68:6b:e3:dc:84:15:37:
1d:e6:64:01:26:78:6d:e7:cc:7f:ba:21:20:e2:ba:62:83:42:
78:09:bd:61:57:34:f8:42:d2:12:a9:47:b1:e7:d5:0c:8a:0f:
9e:5b:21:96:a1:cd:d1:7a:bd:ec:42:7e:d3:73:69:e5:74:2d:
66:b0:fd:bf:31:dc:c8:d9:f8:31:6a:dc:ad:71:73:ba:3d:c8:
90:69:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:22:17 2025 by rpki-client