Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/9O1Q-3Ywi0b25vTek4jn6aALJH8.roa
File: 9O1Q-3Ywi0b25vTek4jn6aALJH8.roa (raw, json)
Hash identifier: 9hRHI+r8i611pC+IiRqeXl+fIkiVZ4LVc9f7yiLG3X0=
Subject key identifier: F4:ED:50:FB:76:30:8B:46:F6:E6:F4:DE:93:88:E7:E9:A0:0B:24:7F
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01983C4FE2EE085C0241F2189DC25B620D60
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/9O1Q-3Ywi0b25vTek4jn6aALJH8.roa
Signing time: Thu 24 Jul 2025 12:02:05 +0000
ROA not before: Thu 24 Jul 2025 12:02:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 94.131.8.0/24 maxlen: 24
94.131.10.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
103.113.69.0/24 maxlen: 24
103.231.72.0/24 maxlen: 24
103.231.73.0/24 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.67.0/24 maxlen: 24
176.120.74.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
213.159.65.0/24 maxlen: 24
213.159.67.0/24 maxlen: 24
213.159.69.0/24 maxlen: 24
2a09:7c43::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a11:3803::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:4f:e2:ee:08:5c:02:41:f2:18:9d:c2:5b:62:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 24 12:02:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ed50fb76308b46f6e6f4de9388e7e9a00b247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:01:9f:78:94:df:4e:60:8a:84:ca:b0:63:
25:d1:c4:3c:e9:89:b9:79:23:30:03:50:b3:32:e7:
15:3e:c0:98:d0:d8:e7:f5:02:7f:24:91:7b:72:0d:
80:12:82:26:97:d3:77:ef:63:80:13:f6:ed:8c:cf:
5a:4a:1b:10:ab:9c:2b:f4:a8:90:e1:03:fb:df:b7:
7b:27:aa:7d:07:74:30:f5:ec:73:92:26:a4:4b:d8:
d8:69:88:f8:be:14:35:90:2d:6c:23:21:a1:d6:4b:
68:22:0b:81:59:0f:2c:cc:ce:e8:02:b1:d7:83:d3:
e8:dd:d1:f5:c1:22:d0:c3:b8:ad:d6:a3:71:28:98:
3a:70:46:c0:29:ae:41:a2:60:9a:15:06:19:0d:25:
d6:11:4b:64:e9:05:e1:fa:68:aa:86:7b:2c:79:17:
5a:54:08:f2:f8:d5:1e:3f:e0:88:c0:a1:95:a9:f6:
77:f2:c0:a2:d0:8c:90:de:4e:1a:02:01:83:ad:de:
82:0d:65:0d:a1:78:60:47:c9:da:29:2b:4f:e7:3e:
9c:26:ec:62:ef:96:6b:9e:2f:3e:e2:26:0c:bf:b2:
8e:99:80:6f:b9:1a:f0:ed:53:58:4c:d9:2f:88:72:
04:7b:2b:67:dd:66:f7:9c:e5:3d:ce:7c:8d:ec:ca:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:ED:50:FB:76:30:8B:46:F6:E6:F4:DE:93:88:E7:E9:A0:0B:24:7F
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/9O1Q-3Ywi0b25vTek4jn6aALJH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.8.0/24
94.131.10.0/24
94.131.13.0-94.131.14.255
94.131.96.0/24
94.131.104.0/24
94.131.117.0/24
103.113.69.0/24
103.231.72.0/23
146.19.170.0/24
176.120.67.0/24
176.120.74.0/24
185.242.84.0/24
213.159.65.0/24
213.159.67.0/24
213.159.69.0/24
IPv6:
2a09:7c43::/32
2a0b:cf43::/32
2a11:3803::/32
2a11:3c01::/32
2a11:4c00::/32
2a11:4c04::/32
2a11:7e06::/32
2a14:3081::/32
2a14:3086::/32
Signature Algorithm: sha256WithRSAEncryption
46:12:e7:43:e7:92:16:57:70:1f:4f:ed:90:5c:6e:10:ae:76:
c8:46:a6:3a:9d:a6:c4:21:a3:39:ef:1c:1a:4d:10:40:e1:f7:
37:dd:a6:49:13:52:13:f5:44:a7:7e:21:c3:ae:4a:5a:09:5b:
72:b9:bb:b9:fa:bc:81:c5:4a:02:d0:d9:a8:90:cc:90:96:c1:
31:21:4d:5e:be:6b:28:88:e3:a6:ea:23:0b:fe:df:9f:b9:ae:
a0:2a:b1:59:f2:d5:fe:8c:96:e7:e0:13:ba:3b:f8:2f:a8:a6:
23:45:48:97:60:4a:9f:7b:42:ad:4b:7f:fe:85:47:70:b2:5c:
ce:2e:12:e1:24:4d:c9:2e:3f:a5:ab:83:1f:52:d8:2f:ce:6d:
18:89:94:13:bc:58:a3:9a:6f:5e:61:b7:53:ff:e4:df:b9:0b:
94:b7:da:b8:aa:7f:e0:d3:73:2d:4a:db:d7:56:e3:88:7c:01:
f4:ed:26:e2:55:bd:30:ab:e1:f8:76:48:3d:aa:4e:52:20:3b:
38:ba:bb:61:df:83:8d:82:8d:81:43:98:54:9f:fb:28:da:36:
c0:14:f7:fe:25:e9:0a:1a:f1:e7:a8:56:e3:37:1f:98:8f:21:
66:30:1e:21:ff:87:a2:b8:5b:72:5c:f1:43:d9:f7:f9:57:e9:
66:7c:3e:60
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZg8T+LuCFwCQfIYncJbYg1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjUwNzI0MTIwMjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGVkNTBmYjc2MzA4YjQ2ZjZlNmY0ZGU5Mzg4ZTdlOWEwMGIyNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W4Bn3iU305gioTKsGMl0cQ86Ym5
eSMwA1CzMucVPsCY0Njn9QJ/JJF7cg2AEoIml9N372OAE/btjM9aShsQq5wr9KiQ
4QP737d7J6p9B3Qw9exzkiakS9jYaYj4vhQ1kC1sIyGh1ktoIguBWQ8szM7oArHX
g9Po3dH1wSLQw7it1qNxKJg6cEbAKa5BomCaFQYZDSXWEUtk6QXh+miqhnsseRda
VAjy+NUeP+CIwKGVqfZ38sCi0IyQ3k4aAgGDrd6CDWUNoXhgR8naKStP5z6cJuxi
75Zrni8+4iYMv7KOmYBvuRrw7VNYTNkviHIEeytn3Wb3nOU9znyN7MpMxwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPTtUPt2MItG9ub03pOI5+mgCyR/MB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvOU8xUS0zWXdpMGIyNXZUZWs0am42YUFMSkg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTBoBAIAATBiAwQAXoMI
AwQAXoMKMAwDBABegw0DBABegw4DBABeg2ADBABeg2gDBABeg3UDBABncUUDBAFn
50gDBACSE6oDBACweEMDBACweEoDBAC58lQDBADVn0EDBADVn0MDBADVn0UwRQQC
AAIwPwMFACoJfEMDBQAqC89DAwUAKhE4AwMFACoRPAEDBQAqEUwAAwUAKhFMBAMF
ACoRfgYDBQAqFDCBAwUAKhQwhjANBgkqhkiG9w0BAQsFAAOCAQEARhLnQ+eSFldw
H0/tkFxuEK52yEamOp2mxCGjOe8cGk0QQOH3N92mSRNSE/VEp34hw65KWglbcrm7
ufq8gcVKAtDZqJDMkJbBMSFNXr5rKIjjpuojC/7fn7muoCqxWfLV/oyW5+ATujv4
L6imI0VIl2BKn3tCrUt//oVHcLJczi4S4SRNyS4/pauDH1LYL85tGImUE7xYo5pv
XmG3U//k37kLlLfauKp/4NNzLUrb11bjiHwB9O0m4lW9MKvh+HZIPapOUiA7OLq7
Yd+DjYKNgUOYVJ/7KNo2wBT3/iXpChrx56hW4zcfmI8hZjAeIf+HorhbclzxQ9n3
+VfpZnw+YA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:36 2025 by rpki-client