Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/xpr6j5qD5UdOagMSyrjdwDfXHto.roa
File: xpr6j5qD5UdOagMSyrjdwDfXHto.roa (raw, json)
Hash identifier: Mriecoo+rGC6VfC/mDPx2uqP6uBkHc2BL1+0p0xJdvM=
Subject key identifier: C6:9A:FA:8F:9A:83:E5:47:4E:6A:03:12:CA:B8:DD:C0:37:D7:1E:DA
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 019A29E8F02AC96431AA81451D832002559E
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/xpr6j5qD5UdOagMSyrjdwDfXHto.roa
Signing time: Tue 28 Oct 2025 08:22:03 +0000
ROA not before: Tue 28 Oct 2025 08:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198144
IP address blocks: 93.113.102.0/24 maxlen: 24
93.117.65.0/24 maxlen: 24
103.97.206.0/23 maxlen: 23
128.65.152.0/21 maxlen: 21
128.65.152.0/23 maxlen: 23
128.65.152.0/24 maxlen: 24
128.65.153.0/24 maxlen: 24
128.65.154.0/23 maxlen: 23
128.65.154.0/24 maxlen: 24
128.65.155.0/24 maxlen: 24
128.65.156.0/22 maxlen: 22
128.65.156.0/24 maxlen: 24
128.65.157.0/24 maxlen: 24
128.65.158.0/24 maxlen: 24
128.65.159.0/24 maxlen: 24
176.97.228.0/22 maxlen: 22
176.97.228.0/23 maxlen: 23
176.97.228.0/24 maxlen: 24
176.97.229.0/24 maxlen: 24
176.97.230.0/23 maxlen: 23
176.97.230.0/24 maxlen: 24
176.97.231.0/24 maxlen: 24
185.78.212.0/22 maxlen: 22
185.78.212.0/23 maxlen: 23
185.78.214.0/23 maxlen: 23
185.78.215.0/24 maxlen: 24
188.208.111.0/24 maxlen: 24
188.211.239.0/24 maxlen: 24
212.85.236.0/22 maxlen: 22
212.85.236.0/23 maxlen: 23
212.85.238.0/23 maxlen: 23
212.85.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:e8:f0:2a:c9:64:31:aa:81:45:1d:83:20:02:55:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Oct 28 08:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69afa8f9a83e5474e6a0312cab8ddc037d71eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:be:9b:67:1e:78:71:c3:c5:30:cb:79:b5:
49:d5:7c:d8:03:f1:f6:10:41:23:a2:d0:2c:86:05:
dc:b2:5c:fb:df:5f:03:f9:f5:0f:f2:98:74:2d:60:
00:17:67:f8:4a:96:ef:83:29:d1:26:c1:09:89:08:
15:21:dc:ba:3c:f5:82:ca:2d:b2:15:8b:53:7e:1a:
f0:7b:32:63:ba:4b:69:40:07:74:df:d4:9c:c9:db:
9e:71:aa:05:fb:62:d5:fe:ad:08:1d:7e:cf:32:bc:
53:92:2c:5d:db:62:ea:9c:77:f0:cf:ed:5e:1b:92:
5b:df:5f:c8:d1:a2:76:ed:cc:fd:ed:5a:c9:06:f2:
a7:e7:50:e4:0c:82:8a:6c:08:13:c7:4d:d4:c0:c2:
e0:a0:5b:ce:36:81:3e:73:38:f6:82:8e:82:6a:61:
59:ac:db:85:11:76:19:71:a5:d1:07:72:94:d0:f6:
94:c8:e1:17:20:4f:5e:5d:24:07:17:f6:94:c4:6f:
d1:75:06:f8:07:aa:a1:b6:5c:98:15:58:f0:e0:7a:
4e:ec:aa:e8:92:fa:90:d5:c5:05:21:20:e1:eb:b3:
1e:84:7c:ba:70:0b:2b:af:57:c7:82:21:c0:b3:e5:
46:f3:91:70:b2:df:41:13:0e:40:17:db:f7:93:f0:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9A:FA:8F:9A:83:E5:47:4E:6A:03:12:CA:B8:DD:C0:37:D7:1E:DA
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/xpr6j5qD5UdOagMSyrjdwDfXHto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.102.0/24
93.117.65.0/24
103.97.206.0/23
128.65.152.0/21
176.97.228.0/22
185.78.212.0/22
188.208.111.0/24
188.211.239.0/24
212.85.236.0/22
Signature Algorithm: sha256WithRSAEncryption
96:78:f2:83:58:f8:cc:64:d7:d9:54:4b:5a:7b:22:4e:c4:b0:
13:53:a5:ee:6e:4e:9e:cc:64:8f:1b:97:e3:fc:d5:1a:9e:c6:
e2:28:c1:bf:f6:08:6a:17:bf:23:b0:5e:25:04:ec:db:55:52:
4e:b1:e5:d3:d6:6e:1b:d0:35:aa:da:43:8f:06:b9:a1:4f:cb:
ea:18:3c:8b:9d:2b:15:fe:7d:2d:cf:a5:06:66:f8:bc:f8:ff:
cf:00:23:b3:c3:be:f3:b6:e6:89:23:19:2b:b7:c2:4f:e9:1e:
ff:d6:38:bf:e7:f4:45:75:d3:c4:05:c3:c4:f3:0f:be:0b:b5:
d5:ab:28:a0:95:85:83:a9:69:af:40:df:55:cf:59:16:f4:dc:
7a:ac:bd:b3:68:7a:f2:35:3b:36:63:8a:d1:5a:7f:53:41:c7:
b1:65:9a:28:b2:1b:57:08:38:e6:5f:44:bc:1f:cd:72:11:a3:
36:87:38:75:10:b4:b8:46:9b:a7:88:4f:e2:d6:3f:21:06:de:
35:70:37:b1:c5:0a:28:86:83:85:23:e3:55:56:a5:ef:46:f7:
3a:7a:7e:da:d4:4b:fb:16:f6:15:cf:c9:2c:8a:88:b7:81:d2:
90:e5:8f:43:56:9c:37:66:51:21:22:8b:e3:43:52:c7:40:6c:
7c:e4:0c:70
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZop6PAqyWQxqoFFHYMgAlWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2VkN2U5Zjk4YTFmMTk3NWVlOWZiY2IwOTVjM2FkZmEy
OGFlYzAwHhcNMjUxMDI4MDgyMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjlhZmE4ZjlhODNlNTQ3NGU2YTAzMTJjYWI4ZGRjMDM3ZDcxZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEO+m2ceeHHDxTDLebVJ1XzYA/H2
EEEjotAshgXcslz7318D+fUP8ph0LWAAF2f4SpbvgynRJsEJiQgVIdy6PPWCyi2y
FYtTfhrwezJjuktpQAd039ScyduecaoF+2LV/q0IHX7PMrxTkixd22LqnHfwz+1e
G5Jb31/I0aJ27cz97VrJBvKn51DkDIKKbAgTx03UwMLgoFvONoE+czj2go6CamFZ
rNuFEXYZcaXRB3KU0PaUyOEXIE9eXSQHF/aUxG/RdQb4B6qhtlyYFVjw4HpO7Kro
kvqQ1cUFISDh67MehHy6cAsrr1fHgiHAs+VG85Fwst9BEw5AF9v3k/AGUQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFMaa+o+ag+VHTmoDEsq43cA31x7aMB8GA1UdIwQY
MBaAFFh+1+n5ih8Zde6fvLCVw636KK7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2Yzct
MGE5ZTNjYjRkYzEzLzEveHByNmo1cUQ1VWRPYWdNU3lyamR3RGZYSHRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2YzctMGE5ZTNjYjRkYzEz
LzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAXXFmAwQA
XXVBAwQBZ2HOAwQDgEGYAwQCsGHkAwQCuU7UAwQAvNBvAwQAvNPvAwQC1FXsMA0G
CSqGSIb3DQEBCwUAA4IBAQCWePKDWPjMZNfZVEtaeyJOxLATU6Xubk6ezGSPG5fj
/NUansbiKMG/9ghqF78jsF4lBOzbVVJOseXT1m4b0DWq2kOPBrmhT8vqGDyLnSsV
/n0tz6UGZvi8+P/PACOzw77ztuaJIxkrt8JP6R7/1ji/5/RFddPEBcPE8w++C7XV
qyiglYWDqWmvQN9Vz1kW9Nx6rL2zaHryNTs2Y4rRWn9TQcexZZooshtXCDjmX0S8
H81yEaM2hzh1ELS4RpuniE/i1j8hBt41cDexxQoohoOFI+NVVqXvRvc6en7a1Ev7
FvYVz8ksioi3gdKQ5Y9DVpw3ZlEhIovjQ1LHQGx85Axw
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:46:26 2025 by rpki-client