Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BRjI3rntp8kNVUoqdcX1gVcsa3s.roa
File: BRjI3rntp8kNVUoqdcX1gVcsa3s.roa (raw, json)
Hash identifier: 9K9z/V0wnUu7Q7Yzvu1Tua+t84AA3XUIBJefCQfKeAU=
Subject key identifier: 05:18:C8:DE:B9:ED:A7:C9:0D:55:4A:2A:75:C5:F5:81:57:2C:6B:7B
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 019A36173A8D41EDA50AAC6021294B84F002
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BRjI3rntp8kNVUoqdcX1gVcsa3s.roa
Signing time: Thu 30 Oct 2025 17:08:03 +0000
ROA not before: Thu 30 Oct 2025 17:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.213.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
185.23.215.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.178.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
213.152.190.0/24 maxlen: 24
2a00:1678:127::/48 maxlen: 48
2a00:1678:a2b::/48 maxlen: 48
2a00:1678:1122::/48 maxlen: 48
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:f113::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:17:3a:8d:41:ed:a5:0a:ac:60:21:29:4b:84:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Oct 30 17:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0518c8deb9eda7c90d554a2a75c5f581572c6b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:d3:c9:4b:4a:be:0b:2d:b9:ca:98:5e:d7:
8f:b2:ba:71:8b:5c:f0:d4:a1:64:18:4a:bf:a5:ac:
8d:d3:e0:01:f1:84:66:10:8a:d1:58:2f:fb:dc:05:
b3:86:41:da:ca:e4:ff:52:c7:8c:94:7d:01:f6:e2:
11:7e:b9:fb:a0:0d:60:68:38:3c:14:c1:8b:40:1c:
bf:a1:d0:0a:e7:4b:b8:2b:e6:7b:0a:ee:d0:8f:95:
49:ab:c0:39:65:14:6f:ff:c5:f1:a7:22:b7:a5:b5:
68:1d:99:ab:78:14:96:34:31:8f:43:4b:c3:49:fa:
f5:7c:15:06:38:1e:48:f2:36:4a:36:49:01:72:13:
1d:7b:f3:f4:60:80:c4:d5:b6:1d:97:65:a4:cb:cd:
53:07:ac:97:65:0c:78:16:c4:fb:e4:e9:ca:d3:e8:
74:ff:12:40:81:1c:85:8c:f6:99:b6:31:54:4a:97:
9f:d5:4d:ad:5f:cd:67:75:da:ec:d4:01:b2:cc:f8:
df:b0:41:a0:53:79:14:f4:92:3c:1c:3b:93:89:b3:
96:db:6c:ad:bc:e9:1a:de:7c:13:71:ec:29:6c:3b:
1e:41:0f:64:c8:e9:62:59:1e:a1:1c:ce:1e:35:5e:
9a:e5:99:3c:36:d3:5e:ba:13:fe:51:83:9d:bf:58:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:18:C8:DE:B9:ED:A7:C9:0D:55:4A:2A:75:C5:F5:81:57:2C:6B:7B
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BRjI3rntp8kNVUoqdcX1gVcsa3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.97.0-109.202.104.255
109.202.106.0-109.202.109.255
109.202.111.0/24
109.232.224.0/21
134.19.176.0/20
185.23.213.0-185.23.215.255
188.95.49.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0-213.152.178.255
213.152.180.0-213.152.191.255
IPv6:
2a00:1678:127::/48
2a00:1678:a2b::/48
2a00:1678:1122::/48
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:f113::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
11:fc:34:bb:c8:fc:d3:21:24:15:f3:bf:c2:66:3f:81:2e:ad:
ee:18:4f:7d:8a:c9:37:05:ab:5c:50:b7:05:8a:0b:c6:72:df:
cc:bf:db:2f:ef:9b:5f:cf:b8:d3:f0:9c:cf:3a:7e:c3:99:2c:
98:97:d1:d1:b3:a8:20:59:9e:e2:c1:60:53:83:3a:4e:0b:08:
6a:1e:e8:10:19:db:b8:eb:ae:35:aa:a0:19:61:14:b8:ef:21:
a8:ff:5c:11:f3:64:03:59:f0:ce:69:9d:7a:65:53:fc:4e:b6:
4b:57:f5:a8:c6:26:46:c5:65:ea:01:f6:43:9a:4a:a4:80:9d:
b8:52:cc:2d:73:58:cc:9c:ec:ca:0a:81:6d:68:5e:02:d2:21:
83:97:c2:04:15:2e:7e:29:f3:2e:63:7c:07:88:43:99:26:53:
6d:4b:89:d9:e1:48:d5:c2:9b:c5:d5:7a:c3:6c:f5:ea:e4:c1:
d2:a6:c9:cf:f4:ab:82:f0:5c:37:41:52:f6:76:f6:ce:03:1e:
a6:55:3a:ee:c6:9e:2f:71:d6:10:d5:14:50:30:21:9c:66:4b:
8a:4e:98:a9:0b:ff:f7:c2:15:08:12:ec:14:a7:0b:d4:f7:14:
5a:57:a3:a6:3b:eb:43:3a:02:c4:04:9d:c1:b9:5b:29:05:15:
67:54:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:19:20 2025 by rpki-client