Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/i0SRNYFClBpsrpbhFOr7mlXd-Z0.roa
File: i0SRNYFClBpsrpbhFOr7mlXd-Z0.roa (raw, json)
Hash identifier: FXPbRklervmd45xmbEYe/MPOs8yYCmIiv2omfM8/Zyw=
Subject key identifier: 8B:44:91:35:81:42:94:1A:6C:AE:96:E1:14:EA:FB:9A:55:DD:F9:9D
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 019A2EC9B834DB041C47172B3A99F252E64F
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/i0SRNYFClBpsrpbhFOr7mlXd-Z0.roa
Signing time: Wed 29 Oct 2025 07:06:03 +0000
ROA not before: Wed 29 Oct 2025 07:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8262
IP address blocks: 82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
82.119.83.0/24 maxlen: 24
82.119.84.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
85.14.0.0/18 maxlen: 18
85.14.0.0/23 maxlen: 23
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.21.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
89.252.192.0/18 maxlen: 18
89.252.192.0/22 maxlen: 22
89.252.199.0/24 maxlen: 24
89.252.200.0/21 maxlen: 21
89.252.208.0/20 maxlen: 20
89.252.223.0/24 maxlen: 24
89.252.224.0/19 maxlen: 19
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
176.67.234.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
194.12.224.0/19 maxlen: 19
194.12.231.0/24 maxlen: 24
194.12.234.0/24 maxlen: 24
194.12.249.0/24 maxlen: 24
194.12.253.0/24 maxlen: 32
194.12.254.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:c9:b8:34:db:04:1c:47:17:2b:3a:99:f2:52:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Oct 29 07:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4491358142941a6cae96e114eafb9a55ddf99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:71:5a:cb:6c:62:a6:9f:8b:33:e0:56:33:
4c:1f:fe:8f:14:18:3a:64:2b:d0:0a:0d:82:03:da:
4f:01:0b:d6:9c:1e:0b:e0:bc:8e:ed:90:a7:49:af:
cc:ee:87:31:3b:58:fb:d9:bf:00:8c:93:44:19:21:
08:a2:74:51:9f:9f:17:be:9e:d6:21:46:08:7e:6d:
b0:33:20:1a:37:ed:9e:79:aa:d1:4d:9e:d6:ae:35:
32:0b:37:d2:31:56:2c:59:d6:6e:07:1c:4f:4d:2b:
dd:ed:b8:3c:45:68:d2:8c:11:50:75:f7:e2:f9:85:
03:b9:d3:33:f6:45:b9:2e:29:81:9e:8f:16:b9:20:
ac:e6:63:af:d2:ad:76:0e:c4:07:fe:6a:e5:52:71:
1a:70:78:9c:03:26:4b:b3:3d:54:39:ba:72:36:5c:
aa:c5:03:de:ad:32:f6:d0:50:17:32:ba:6d:52:89:
2a:e1:ba:b4:69:45:b5:9c:9d:08:7d:aa:d1:ce:b0:
43:1a:da:98:2f:78:b5:a5:8b:8d:11:12:ad:de:d2:
e7:44:fe:7f:1d:55:dc:f3:3a:64:32:ca:52:31:23:
eb:0b:e1:90:f3:09:c3:11:18:46:6b:c8:22:f9:25:
38:f7:c4:2e:eb:3f:b0:60:de:6b:9c:8c:65:4e:17:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:91:35:81:42:94:1A:6C:AE:96:E1:14:EA:FB:9A:55:DD:F9:9D
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/i0SRNYFClBpsrpbhFOr7mlXd-Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:7f:91:63:cc:93:5b:33:d6:f6:3a:30:ec:78:68:b9:9b:c4:
c1:1a:a1:fd:6b:2a:32:52:19:a9:c3:48:1f:ef:a6:a7:4b:51:
2d:0d:a1:ff:de:d0:07:ee:d7:5b:c5:62:db:b8:05:17:b0:a2:
b3:05:57:6c:36:2c:a6:4b:7f:93:2b:3c:3c:2e:a7:c2:b0:bc:
0c:f1:70:05:73:c0:e4:74:41:68:3b:8a:24:d8:d4:50:8b:26:
d1:e0:70:99:aa:72:2d:d5:97:db:0e:0c:42:7e:67:c7:5c:28:
8a:93:66:f1:50:33:df:b3:22:33:e0:ec:90:aa:70:24:59:c5:
4e:a9:56:fe:b0:ff:64:f0:47:d9:eb:48:bf:c5:c8:9d:1f:26:
63:a2:39:f1:ce:1d:2c:51:5c:d1:e7:d8:5e:b7:50:bd:77:b2:
86:ec:3d:f1:5f:f9:4e:e1:5a:69:95:40:cc:49:96:ec:48:2e:
3d:93:ba:31:f9:a9:88:7d:01:37:61:46:7d:41:d5:2a:8e:70:
85:48:64:de:17:08:42:11:71:89:d7:a4:c3:b0:78:89:cc:0f:
af:fc:76:86:f8:cd:a9:71:07:b3:b6:f9:ad:4b:d3:55:9c:f2:
0f:67:d9:f7:f4:49:3d:db:14:f5:d2:62:97:33:53:e3:c4:de:
31:cb:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:57 2025 by rpki-client