Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/25NziVTx-Lz9txTSQZBkSrAUGTw.roa
File: 25NziVTx-Lz9txTSQZBkSrAUGTw.roa (raw, json)
Hash identifier: 4eHXeIS/+/q1uLQaBtoURFO7E/Md64lid2PQOJ70S4g=
Subject key identifier: DB:93:73:89:54:F1:F8:BC:FD:B7:14:D2:41:90:64:4A:B0:14:19:3C
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019A0990E96153AA81739F1F94FEC7BFA56F
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/25NziVTx-Lz9txTSQZBkSrAUGTw.roa
Signing time: Wed 22 Oct 2025 01:38:03 +0000
ROA not before: Wed 22 Oct 2025 01:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33651
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
36.255.215.0/24 maxlen: 24
45.67.141.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
103.216.197.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
2a0c:1900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:90:e9:61:53:aa:81:73:9f:1f:94:fe:c7:bf:a5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 22 01:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db93738954f1f8bcfdb714d24190644ab014193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:55:67:98:49:f4:8c:d2:5e:e3:22:aa:27:
40:99:0e:d5:60:19:3b:4f:0b:83:ed:88:be:54:86:
81:75:ee:83:2d:2f:c3:c6:57:9e:f5:ed:c4:1b:b8:
6d:e6:cd:30:05:05:60:72:b2:30:b0:4d:3c:dd:d2:
9f:11:75:13:63:7e:9d:eb:cd:b5:b6:ce:24:fb:cd:
e9:70:0d:56:b7:be:22:52:a0:d4:eb:b7:5d:98:de:
8e:17:00:fa:ed:24:3c:9f:ff:29:1e:c5:a7:db:52:
b9:ef:06:52:72:88:ca:70:6f:26:e3:e3:f7:a0:82:
ee:a1:05:82:d0:81:c2:e3:b2:03:2a:51:58:27:f0:
88:36:47:8b:4b:1b:26:3f:13:a0:04:4f:68:ec:5f:
12:e4:ce:57:50:bd:a1:86:5c:05:7d:7b:d1:e6:a0:
11:ca:29:de:47:e6:1f:b8:2e:02:c0:82:14:69:89:
73:79:2e:af:9c:a8:fd:00:8c:29:8d:49:90:40:94:
eb:91:53:3f:52:41:2d:c6:c4:52:c9:58:4f:f7:5a:
98:31:e3:90:8c:38:4f:4f:6f:4a:94:3d:83:54:8f:
0c:1e:98:83:25:93:12:63:6a:37:a2:cd:69:40:3b:
7f:4b:e1:8c:f9:22:b8:c5:ee:d6:7a:0d:4d:05:be:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:73:89:54:F1:F8:BC:FD:B7:14:D2:41:90:64:4A:B0:14:19:3C
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/25NziVTx-Lz9txTSQZBkSrAUGTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/24
5.182.193.0-5.182.195.255
36.255.215.0/24
45.67.141.0/24
63.246.129.0/24
63.246.148.0/24
63.246.152.0/24
63.246.159.0/24
78.31.206.0/24
103.216.197.0/24
149.126.13.0/24
162.218.89.0/24
185.201.41.0/24
185.201.43.0/24
IPv6:
2a0c:1900::/29
Signature Algorithm: sha256WithRSAEncryption
87:5e:16:09:a9:1c:f0:19:22:63:c8:8b:32:47:31:1a:d4:72:
2d:d5:13:d5:2b:3f:2a:1f:d8:39:13:ff:a6:ad:2b:15:5e:c8:
d7:11:64:61:72:68:9e:ee:48:a5:71:6c:be:c0:56:57:5b:f8:
22:0b:94:0b:d0:9d:f9:03:24:02:a8:38:12:aa:f8:e8:41:d6:
e8:2b:32:83:70:df:d2:8f:bf:4f:3b:1c:17:22:7e:a1:b0:c3:
bf:22:6a:ec:d9:3a:5b:a4:5e:b3:03:0b:5a:1e:97:3c:a8:39:
16:81:b1:4c:f9:d7:fe:aa:12:9d:4b:71:5c:77:69:bb:b7:ba:
cb:2f:f9:1b:87:b2:14:2c:22:ee:18:8e:0d:e8:51:a1:4f:6d:
e4:ab:7c:47:d9:54:58:86:1c:25:ee:34:5a:7f:0f:60:98:0b:
82:66:af:a3:01:b5:2d:ae:f4:f0:d1:22:5b:36:54:ae:c7:12:
ee:0f:77:ef:ed:96:4d:bd:f2:35:51:76:34:b8:00:97:5b:06:
33:ab:60:dc:67:29:6a:77:ad:fc:68:2a:b6:e3:0e:fa:c1:a3:
3a:e2:c4:24:8b:9e:0a:5b:72:24:82:61:a4:72:6d:1f:f6:98:
95:9c:d1:8b:d4:bd:d4:fc:c2:85:d2:d9:86:b3:e5:40:27:eb:
39:a2:b9:3d
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAZoJkOlhU6qBc58flP7Hv6VvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUxMDIyMDEzODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjkzNzM4OTU0ZjFmOGJjZmRiNzE0ZDI0MTkwNjQ0YWIwMTQxOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDBVZ5hJ9IzSXuMiqidAmQ7VYBk7
TwuD7Yi+VIaBde6DLS/Dxlee9e3EG7ht5s0wBQVgcrIwsE083dKfEXUTY36d6821
ts4k+83pcA1Wt74iUqDU67ddmN6OFwD67SQ8n/8pHsWn21K57wZScojKcG8m4+P3
oILuoQWC0IHC47IDKlFYJ/CINkeLSxsmPxOgBE9o7F8S5M5XUL2hhlwFfXvR5qAR
yineR+YfuC4CwIIUaYlzeS6vnKj9AIwpjUmQQJTrkVM/UkEtxsRSyVhP91qYMeOQ
jDhPT29KlD2DVI8MHpiDJZMSY2o3os1pQDt/S+GM+SK4xe7Weg1NBb7PLwIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFNuTc4lU8fi8/bcU0kGQZEqwFBk8MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvMjVOemlWVHgtTHo5dHhUU1FaQmtTckFVR1R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAAW2ujAM
AwQABbbBAwQCBbbAAwQAJP/XAwQALUONAwQAP/aBAwQAP/aUAwQAP/aYAwQAP/af
AwQATh/OAwQAZ9jFAwQAlX4NAwQAotpZAwQAuckpAwQAuckrMA0EAgACMAcDBQMq
DBkAMA0GCSqGSIb3DQEBCwUAA4IBAQCHXhYJqRzwGSJjyIsyRzEa1HIt1RPVKz8q
H9g5E/+mrSsVXsjXEWRhcmie7kilcWy+wFZXW/giC5QL0J35AyQCqDgSqvjoQdbo
KzKDcN/Sj79POxwXIn6hsMO/Imrs2TpbpF6zAwtaHpc8qDkWgbFM+df+qhKdS3Fc
d2m7t7rLL/kbh7IULCLuGI4N6FGhT23kq3xH2VRYhhwl7jRafw9gmAuCZq+jAbUt
rvTw0SJbNlSuxxLuD3fv7ZZNvfI1UXY0uACXWwYzq2DcZylqd638aCq24w76waM6
4sQki54KW3IkgmGkcm0f9piVnNGL1L3U/MKF0tmGs+VAJ+s5ork9
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:56 2025 by rpki-client