Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gd8911RXOycXfLt_GbO94OcybyA.roa
File: gd8911RXOycXfLt_GbO94OcybyA.roa (raw, json)
Hash identifier: S3b9dZLHp+WSxxNzkqREHL/mrmsr8ju7ZzGRovWNt+g=
Subject key identifier: 81:DF:3D:D7:54:57:3B:27:17:7C:BB:7F:19:B3:BD:E0:E7:32:6F:20
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199851F45F7D00366E48CF576EEDB0270B6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gd8911RXOycXfLt_GbO94OcybyA.roa
Signing time: Fri 26 Sep 2025 08:24:03 +0000
ROA not before: Fri 26 Sep 2025 08:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.76.0/23 maxlen: 24
82.152.79.0/24 maxlen: 24
82.152.86.0/23 maxlen: 24
82.152.88.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.38.0/24 maxlen: 24
82.153.56.0/24 maxlen: 24
82.153.61.0/24 maxlen: 24
82.153.83.0/24 maxlen: 24
82.153.84.0/24 maxlen: 24
82.153.152.0/24 maxlen: 24
82.153.186.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.239.0/24 maxlen: 24
89.213.54.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
89.213.232.0/23 maxlen: 24
89.213.234.0/23 maxlen: 24
89.213.236.0/23 maxlen: 24
109.176.27.0/24 maxlen: 24
109.176.32.0/21 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.56.0/21 maxlen: 24
109.176.235.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:1f:45:f7:d0:03:66:e4:8c:f5:76:ee:db:02:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 26 08:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81df3dd754573b27177cbb7f19b3bde0e7326f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:18:78:85:55:9a:ce:17:e0:e3:3f:38:3e:
f4:70:0a:2b:85:fc:2a:f2:9a:b7:0c:6b:91:18:25:
69:bb:eb:5b:f5:b2:b4:f7:d5:7e:e1:e6:19:09:88:
9c:6f:bd:10:c4:0e:2c:39:32:f7:58:35:e1:26:d6:
de:70:65:3c:68:40:e6:56:85:3d:0a:ae:64:31:06:
a2:eb:7a:b5:e0:84:39:13:17:93:a0:28:83:12:30:
ab:ce:cf:78:09:c7:8f:6b:14:3b:89:48:99:27:a4:
32:f3:5c:f5:cb:da:15:97:e6:57:94:e7:82:e1:80:
d5:d7:e3:bb:53:36:9e:c0:b0:37:2f:bc:b2:93:5d:
e5:77:f1:77:32:a8:ee:65:49:8a:ee:f6:9a:0f:20:
0a:e3:49:cc:83:b2:50:00:43:8e:73:5d:8c:73:ad:
05:fb:40:13:be:d8:30:0d:84:35:a8:5a:20:19:f2:
8e:12:89:35:24:9a:53:66:ef:39:a0:a4:d0:6f:3c:
b8:a6:8b:04:e5:77:1b:52:ff:c5:32:03:2f:81:93:
ab:4c:3a:74:af:34:ef:e6:97:45:24:5a:a4:13:9a:
e9:8e:f1:d2:59:24:c9:48:0a:c7:44:da:d3:d9:2c:
40:aa:ca:94:91:73:19:6a:96:13:70:c8:be:b6:0c:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DF:3D:D7:54:57:3B:27:17:7C:BB:7F:19:B3:BD:E0:E7:32:6F:20
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gd8911RXOycXfLt_GbO94OcybyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0-82.152.77.255
82.152.79.0/24
82.152.86.0-82.152.88.255
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.38.0/24
82.153.56.0/24
82.153.61.0/24
82.153.83.0-82.153.84.255
82.153.152.0/24
82.153.186.0/24
82.153.201.0/24
82.153.239.0/24
89.213.54.0/24
89.213.98.0/24
89.213.159.0/24
89.213.161.0/24
89.213.232.0-89.213.237.255
109.176.27.0/24
109.176.32.0/19
109.176.235.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
213.218.231.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fc:01:8a:bb:e2:af:f7:62:3e:24:b5:eb:d4:94:f8:cf:63:
5c:d6:4f:3b:39:60:13:57:ad:18:50:2e:34:2f:2c:6d:9e:4f:
f9:49:a0:bb:be:a0:06:07:1c:2a:dc:b1:76:7d:f7:00:e3:8d:
95:f6:f4:a0:5f:31:42:06:59:a2:d4:b1:95:4f:71:81:68:db:
76:b5:dc:3c:36:1b:8f:7e:83:af:bd:bc:33:6b:a7:fe:49:81:
78:c5:67:76:c4:c5:c8:39:e6:58:40:13:0f:af:e1:2d:72:87:
ff:c4:89:61:91:dc:96:7c:65:4f:71:9d:d2:c9:0c:48:99:76:
f9:7a:56:23:d4:9d:37:72:60:e7:62:60:69:5b:01:d8:13:70:
d3:fe:a9:6d:0a:10:eb:e6:81:81:4d:e4:53:ab:b1:27:18:99:
09:8b:10:49:ba:6d:e8:a7:09:97:2f:74:68:b6:a0:e0:28:a4:
32:17:eb:16:6c:b8:41:c4:cd:5b:98:fa:2e:e6:9c:dc:c0:03:
5d:3d:17:4c:9b:45:f3:9d:6e:f5:a0:69:b9:bf:49:f8:07:54:
f2:5b:36:99:6b:00:d3:fc:ac:82:c7:75:44:02:9e:5a:f1:2c:
48:85:61:30:91:c7:df:9c:ce:19:06:42:75:21:ab:0e:be:ed:
a0:10:3b:45
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAZmFH0X30ANm5Iz1du7bAnC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTI2MDgyNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWRmM2RkNzU0NTczYjI3MTc3Y2JiN2YxOWIzYmRlMGU3MzI2ZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KcYeIVVms4X4OM/OD70cAorhfwq
8pq3DGuRGCVpu+tb9bK099V+4eYZCYicb70QxA4sOTL3WDXhJtbecGU8aEDmVoU9
Cq5kMQai63q14IQ5ExeToCiDEjCrzs94CcePaxQ7iUiZJ6Qy81z1y9oVl+ZXlOeC
4YDV1+O7UzaewLA3L7yyk13ld/F3MqjuZUmK7vaaDyAK40nMg7JQAEOOc12Mc60F
+0ATvtgwDYQ1qFogGfKOEok1JJpTZu85oKTQbzy4posE5XcbUv/FMgMvgZOrTDp0
rzTv5pdFJFqkE5rpjvHSWSTJSArHRNrT2SxAqsqUkXMZapYTcMi+tgwyawIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFIHfPddUVzsnF3y7fxmzveDnMm8gMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ2Q4OTExUlhPeWNYZkx0X0diTzk0T2N5YnlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYwDAME
AFKYOQMEAFKYOgMEAFKYSTAMAwQAUphLAwQBUphMAwQAUphPMAwDBAFSmFYDBABS
mFgDBABSmG0DBABSmOIDBABSmPADBABSmPMDBABSmSYDBABSmTgDBABSmT0wDAME
AFKZUwMEAFKZVAMEAFKZmAMEAFKZugMEAFKZyQMEAFKZ7wMEAFnVNgMEAFnVYgME
AFnVnwMEAFnVoTAMAwQDWdXoAwQBWdXsAwQAbbAbAwQFbbAgAwQAbbDrAwQA1YKC
AwQA1YKVAwQA1drWAwQA1drnMA0GCSqGSIb3DQEBCwUAA4IBAQAX/AGKu+Kv92I+
JLXr1JT4z2Nc1k87OWATV60YUC40Lyxtnk/5SaC7vqAGBxwq3LF2ffcA442V9vSg
XzFCBlmi1LGVT3GBaNt2tdw8NhuPfoOvvbwza6f+SYF4xWd2xMXIOeZYQBMPr+Et
cof/xIlhkdyWfGVPcZ3SyQxImXb5elYj1J03cmDnYmBpWwHYE3DT/qltChDr5oGB
TeRTq7EnGJkJixBJum3opwmXL3RotqDgKKQyF+sWbLhBxM1bmPou5pzcwANdPRdM
m0XznW71oGm5v0n4B1TyWzaZawDT/KyCx3VEAp5a8SxIhWEwkcffnM4ZBkJ1IasO
vu2gEDtF
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:59 2025 by rpki-client