Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tZMBk7R_EsNTUDMS2lM_zO6FH4Q.roa
File: tZMBk7R_EsNTUDMS2lM_zO6FH4Q.roa (raw, json)
Hash identifier: tK45W3RWbNZgWsBaUhf1+DQAPsI8dTchYSGutv1bVn4=
Subject key identifier: B5:93:01:93:B4:7F:12:C3:53:50:33:12:DA:53:3F:CC:EE:85:1F:84
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01999EF077D726A8FFACD5378057BA7582F1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tZMBk7R_EsNTUDMS2lM_zO6FH4Q.roa
Signing time: Wed 01 Oct 2025 08:43:03 +0000
ROA not before: Wed 01 Oct 2025 08:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:f0:77:d7:26:a8:ff:ac:d5:37:80:57:ba:75:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 1 08:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5930193b47f12c353503312da533fccee851f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:d7:77:51:88:c8:e9:fb:cf:c9:86:18:66:
3b:f0:51:e7:9c:3e:28:4b:1c:78:36:13:5b:96:41:
e8:44:41:74:6a:6b:f3:7b:66:3e:76:53:84:5b:54:
7a:c0:dc:47:7d:67:6f:6d:39:c5:66:11:3c:72:0f:
95:e7:56:ed:9f:49:06:ed:4e:63:0c:22:8e:26:75:
14:e4:cf:8b:36:b9:27:b5:f0:80:2f:41:cf:ef:a1:
30:4d:b2:8e:61:24:52:44:1d:28:7c:8a:b4:89:bf:
e4:34:6f:80:29:d0:bb:c8:bd:15:44:d2:d6:b7:5d:
d3:d1:b2:fc:73:18:1b:f3:d7:41:48:6f:e2:6f:51:
ef:fe:5f:23:4e:91:a9:18:74:44:60:c2:5b:53:ef:
50:1c:81:7e:5b:f4:d1:b4:0f:de:e3:37:f5:ec:b0:
a9:4e:cc:8a:02:10:17:e4:b5:6a:f8:3c:27:c6:09:
89:3d:71:30:a1:d0:05:3b:6d:f0:b7:25:30:90:2e:
45:18:94:23:fc:a9:27:b2:3e:29:fe:5c:bb:0e:26:
aa:d2:92:dd:86:b0:88:e0:6e:d4:9c:40:8d:a2:71:
bc:e0:f1:a0:1d:ee:76:73:a2:29:cd:57:41:bc:8a:
ec:eb:be:40:f8:d0:fa:c2:bc:5a:4f:d2:ed:6b:dd:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:93:01:93:B4:7F:12:C3:53:50:33:12:DA:53:3F:CC:EE:85:1F:84
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tZMBk7R_EsNTUDMS2lM_zO6FH4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.125.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.250.0/24
89.213.136.0/24
89.213.153.0/24
109.176.209.0/24
109.176.211.0/24
109.176.216.0/21
109.176.249.0/24
213.152.61.0-213.152.62.255
213.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ba:b4:0c:39:3a:d7:10:71:bf:bf:59:ed:1b:f5:cf:39:c7:
26:b7:10:5f:c5:04:ae:25:b1:71:c4:44:85:eb:24:93:f0:e8:
30:f2:31:21:f9:9d:f6:78:7e:db:2d:c7:f2:e6:da:93:a2:f9:
d2:a6:c6:b9:e1:00:29:31:91:f2:65:f5:d9:a7:47:b8:12:5d:
ce:78:27:6d:46:10:32:94:60:69:9b:cf:c0:d8:01:f7:be:d7:
c1:0f:27:53:ae:91:67:70:f7:d4:9a:5d:48:eb:4f:0c:29:b3:
16:9f:ac:4b:f5:1d:4c:34:d7:9a:1b:93:a5:56:d3:45:bb:24:
92:02:fa:45:64:a9:3c:ec:f7:d2:53:5b:40:cb:37:20:0b:9c:
e4:10:47:b3:c5:24:12:9e:33:e6:2a:5d:58:47:7c:86:83:69:
1e:de:83:7a:c9:ea:07:f4:8f:18:51:be:c9:6d:43:e8:39:e8:
88:fa:6a:ac:08:05:44:3e:58:f1:12:fa:3b:ff:34:15:e0:67:
75:e6:f2:46:42:0a:c9:36:b1:b7:5d:4c:0d:8a:03:45:f0:84:
d3:77:9c:fd:b1:50:71:7f:f9:55:bd:20:e7:56:65:e6:84:ae:
4b:c6:82:e2:08:dd:d0:49:e1:e2:14:5c:9e:7d:90:42:84:cc:
f3:ae:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:00 2025 by rpki-client