Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7dmi1a45ZaAAy3HEjMNXWHHvkKw.roa
File: 7dmi1a45ZaAAy3HEjMNXWHHvkKw.roa (raw, json)
Hash identifier: L55ON8b7Kwoz76ckPbRcO7uxpeHSRRLgpmvl7PijtBU=
Subject key identifier: ED:D9:A2:D5:AE:39:65:A0:00:CB:71:C4:8C:C3:57:58:71:EF:90:AC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A26FC09E58479E82EDD2FE970E044139F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7dmi1a45ZaAAy3HEjMNXWHHvkKw.roa
Signing time: Mon 27 Oct 2025 18:44:03 +0000
ROA not before: Mon 27 Oct 2025 18:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.188.0/24 maxlen: 24
144.31.189.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.222.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:fc:09:e5:84:79:e8:2e:dd:2f:e9:70:e0:44:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 18:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd9a2d5ae3965a000cb71c48cc3575871ef90ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:4d:1a:de:48:8f:f4:8d:36:5f:48:ad:ba:
98:84:40:0b:b4:10:1d:8b:e9:de:4c:6c:d0:9d:69:
38:ea:5e:ac:59:ae:16:ae:70:6b:08:45:75:0b:f6:
ec:ba:91:a2:51:a5:73:34:04:5a:11:b2:7f:6c:79:
e5:ee:56:50:88:ba:8d:07:bb:4a:ea:13:66:d5:5c:
d8:af:87:05:41:67:a8:06:10:b3:be:6f:2b:56:39:
de:54:12:1b:3d:a8:33:17:e0:e3:b2:0c:05:68:ff:
15:78:a5:e4:09:4f:99:33:8e:59:6e:f8:4c:a9:6a:
de:08:76:90:f2:f6:12:e2:d5:d9:a0:fb:79:73:f2:
5f:cc:59:73:4d:3f:e2:7c:08:58:c2:3f:2d:f1:f5:
1f:00:8b:aa:2c:65:8b:a0:2a:e8:e2:15:6d:d9:37:
4c:5a:c7:01:e0:ff:76:ce:1c:f9:e8:f4:d3:af:9a:
c7:92:4a:a9:52:03:e8:b0:82:c5:ec:71:5f:bd:b2:
86:74:d9:00:6a:74:91:16:11:07:c5:9e:ff:57:6c:
de:5c:e5:5c:bd:e7:ae:ed:8e:08:df:14:6e:ff:0c:
35:58:21:c7:a8:f3:0a:6a:4e:9a:69:b4:65:3d:c5:
25:d8:2c:b3:05:44:cd:16:cb:96:e2:ab:88:51:0b:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:A2:D5:AE:39:65:A0:00:CB:71:C4:8C:C3:57:58:71:EF:90:AC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7dmi1a45ZaAAy3HEjMNXWHHvkKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.82.0/23
144.31.93.0/24
144.31.188.0/23
144.31.213.0-144.31.219.255
144.31.222.0/24
185.170.153.0-185.170.154.255
193.23.200.0-193.23.202.255
Signature Algorithm: sha256WithRSAEncryption
15:73:f4:fd:8d:47:a3:8d:d1:b5:11:51:1b:df:96:ec:d1:cf:
cb:4a:73:69:98:e9:72:90:60:d9:88:a1:46:59:c5:c8:0f:fd:
67:fb:db:63:a7:c9:97:b8:e2:fe:c7:37:8c:16:c3:39:b3:fe:
26:08:fa:f9:01:a0:c0:dd:3c:54:dc:71:5d:95:f1:0e:1c:b2:
9f:0f:e5:75:3d:37:56:5a:cb:fc:11:ea:36:6c:6a:1d:61:23:
6f:3a:2b:9d:26:7e:3a:14:0d:b8:c6:96:33:f0:fc:97:0a:aa:
61:cf:5c:ea:dc:0a:06:3e:ef:57:81:7a:a0:e6:4e:1f:a4:dd:
1e:9e:4b:78:ff:e9:d1:ef:61:1f:cb:56:c1:24:db:f3:57:6b:
9a:03:b4:29:11:8e:cc:3f:6a:63:6f:80:26:c3:01:6e:67:a4:
f7:94:f3:db:85:92:6a:16:d4:0f:11:74:dd:84:82:e7:f5:2c:
ea:b8:1d:14:cf:3f:01:e7:08:17:3a:a8:71:a3:01:a6:89:44:
e4:ab:97:8e:44:3e:24:39:fd:25:f9:55:e2:0f:4e:b1:1d:3c:
59:2f:ed:fb:b6:69:d0:d2:dd:29:fe:30:69:ec:3a:67:2b:29:
e5:55:a3:96:fd:eb:5c:7d:22:3a:a2:c2:c4:c8:5e:4a:0a:c6:
11:01:29:6e
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZom/AnlhHnoLt0v6XDgRBOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUxMDI3MTg0NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQ5YTJkNWFlMzk2NWEwMDBjYjcxYzQ4Y2MzNTc1ODcxZWY5MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEVNGt5Ij/SNNl9IrbqYhEALtBAd
i+neTGzQnWk46l6sWa4WrnBrCEV1C/bsupGiUaVzNARaEbJ/bHnl7lZQiLqNB7tK
6hNm1VzYr4cFQWeoBhCzvm8rVjneVBIbPagzF+DjsgwFaP8VeKXkCU+ZM45ZbvhM
qWreCHaQ8vYS4tXZoPt5c/JfzFlzTT/ifAhYwj8t8fUfAIuqLGWLoCro4hVt2TdM
WscB4P92zhz56PTTr5rHkkqpUgPosILF7HFfvbKGdNkAanSRFhEHxZ7/V2zeXOVc
veeu7Y4I3xRu/ww1WCHHqPMKak6aabRlPcUl2CyzBUTNFsuW4quIUQtWCQIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFO3ZotWuOWWgAMtxxIzDV1hx75CsMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvN2RtaTFhNDVaYUFBeTNIRWpNTlhXSEh2a0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiMAwDBABAvFkD
BABAvFoDBABAvGIDBABAvH8DBABN72sDBAGQH1IDBACQH10DBAGQH7wwDAMEAJAf
1QMEApAf2AMEAJAf3jAMAwQAuaqZAwQAuaqaMAwDBAPBF8gDBADBF8owDQYJKoZI
hvcNAQELBQADggEBABVz9P2NR6ON0bURURvfluzRz8tKc2mY6XKQYNmIoUZZxcgP
/Wf722OnyZe44v7HN4wWwzmz/iYI+vkBoMDdPFTccV2V8Q4csp8P5XU9N1Zay/wR
6jZsah1hI286K50mfjoUDbjGljPw/JcKqmHPXOrcCgY+71eBeqDmTh+k3R6eS3j/
6dHvYR/LVsEk2/NXa5oDtCkRjsw/amNvgCbDAW5npPeU89uFkmoW1A8RdN2Eguf1
LOq4HRTPPwHnCBc6qHGjAaaJROSrl45EPiQ5/SX5VeIPTrEdPFkv7fu2adDS3Sn+
MGnsOmcrKeVVo5b961x9IjqiwsTIXkoKxhEBKW4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:15 2025 by rpki-client