Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iABbcqnzRY1iw_5CwnD0YaTgvx4.roa
File: iABbcqnzRY1iw_5CwnD0YaTgvx4.roa (raw, json)
Hash identifier: uBFJTbO/3FjbGtW9EKfS8hefGXbVwsTradiqQBm+AqI=
Subject key identifier: 88:00:5B:72:A9:F3:45:8D:62:C3:FE:42:C2:70:F4:61:A4:E0:BF:1E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199BDB1128D75B5471D6E9E5A505FDC228B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iABbcqnzRY1iw_5CwnD0YaTgvx4.roa
Signing time: Tue 07 Oct 2025 08:02:02 +0000
ROA not before: Tue 07 Oct 2025 08:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/24 maxlen: 24
77.93.142.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.61.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.152.250.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
89.213.0.0/22 maxlen: 24
89.213.0.0/24 maxlen: 24
89.213.1.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.45.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.50.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/22 maxlen: 22
89.213.56.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.128.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.144.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.192.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.208.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
89.213.225.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.239.0/24 maxlen: 24
89.213.248.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.125.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.49.127.0/24 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.83.0/24 maxlen: 24
194.105.88.0/24 maxlen: 24
194.105.89.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.134.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
213.218.236.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.144.145.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:b1:12:8d:75:b5:47:1d:6e:9e:5a:50:5f:dc:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 7 08:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88005b72a9f3458d62c3fe42c270f461a4e0bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:5e:5e:4f:2b:e7:8b:91:ed:71:99:a3:13:
e3:14:60:29:08:2f:6c:94:fa:ff:38:d1:83:43:94:
76:64:3c:34:7c:ac:af:0c:a6:ec:f8:51:9d:17:7d:
e2:2c:3e:76:2c:eb:66:24:77:05:cb:7b:58:5e:ad:
d1:e8:b4:aa:00:b6:4a:42:de:05:87:74:47:84:8e:
7d:1c:19:de:a4:d6:71:50:33:0a:f1:e3:49:67:2c:
34:20:49:22:60:be:af:01:db:6b:30:a2:1a:9e:9b:
6e:11:26:e2:27:cf:9c:27:c6:64:d0:66:1e:4b:39:
5b:69:9b:4e:b0:16:e7:fc:78:f2:9e:c0:59:9a:d9:
f1:40:d4:89:76:84:69:e1:e3:b0:42:6f:6d:40:c6:
f5:7e:c1:f6:03:77:b9:32:ab:71:fa:1c:30:9b:db:
66:66:4d:26:69:bb:fb:62:af:a0:7d:2d:46:5b:d0:
f0:fe:f8:b4:70:58:31:28:99:9c:04:31:7d:13:f1:
d0:84:27:e8:ad:28:5c:d1:c8:47:f3:bc:18:ca:ee:
d8:3f:be:98:5d:d3:bb:c9:27:9c:50:aa:65:83:5b:
6b:b7:58:c6:72:cc:c3:5a:36:bf:c6:e0:cd:9a:5a:
c4:1f:25:3c:b6:de:d4:2c:b0:f4:c9:26:3b:68:f8:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:5B:72:A9:F3:45:8D:62:C3:FE:42:C2:70:F4:61:A4:E0:BF:1E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iABbcqnzRY1iw_5CwnD0YaTgvx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/24
77.93.142.0/24
82.152.8.0/24
82.152.61.0/24
82.152.176.0/23
82.152.250.0/23
82.153.91.0/24
82.153.136.0/22
82.153.217.0/24
89.213.0.0/22
89.213.6.0/23
89.213.42.0-89.213.45.255
89.213.49.0-89.213.51.255
89.213.55.0-89.213.59.255
89.213.105.0/24
89.213.128.0/24
89.213.130.0/24
89.213.133.0/24
89.213.140.0/24
89.213.143.0-89.213.145.255
89.213.148.0/24
89.213.150.0/23
89.213.154.0-89.213.159.255
89.213.162.0/24
89.213.172.0/22
89.213.179.0/24
89.213.181.0/24
89.213.192.0/24
89.213.196.0-89.213.208.255
89.213.215.0/24
89.213.219.0/24
89.213.225.0/24
89.213.228.0-89.213.239.255
89.213.248.0/24
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.125.0-185.49.127.255
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.227.0-213.218.228.255
213.218.232.0/24
213.218.235.0-213.218.237.255
213.218.239.0/24
213.218.244.0/22
217.144.145.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
78:99:1b:25:52:c9:4a:bb:46:d4:a5:99:65:d4:0a:3b:a3:59:
75:05:7f:e7:d4:53:38:e7:15:32:d5:c1:2a:eb:41:a2:9b:30:
0c:dc:c3:18:d0:e0:48:1d:96:0f:f7:a3:17:56:64:32:a0:3f:
4e:d6:68:85:55:b7:9a:7e:19:86:a0:2f:0b:19:10:39:62:34:
34:f8:14:de:bf:15:b4:94:95:7a:05:7d:ee:01:ac:90:29:c2:
f5:5e:b8:1c:46:07:97:7b:92:c5:d6:5a:66:9a:91:87:95:2a:
49:64:15:90:f7:29:ae:8e:f8:16:d3:92:5c:4d:19:f7:1e:e3:
eb:14:e6:a6:9a:21:7c:72:d1:60:5d:72:60:c5:79:29:c6:a3:
2c:7c:be:2f:02:8f:6a:cd:b4:70:5a:b8:89:68:72:60:b0:c2:
fc:e3:21:5d:45:07:e2:e9:cc:67:ae:98:f5:62:2f:35:37:0d:
71:91:2d:e4:04:fe:ee:f3:83:74:85:06:02:0e:2b:e2:51:20:
24:ac:3e:f3:74:d9:56:e9:79:17:ff:03:41:96:16:88:7d:91:
b7:1e:57:5f:51:a0:24:ee:e5:72:65:f4:5d:e7:fc:2d:11:f1:
e1:9d:87:5b:b3:50:b7:59:1c:da:d7:fd:8c:a5:f1:a6:2e:41:
d2:02:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:58 2025 by rpki-client