Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa
File: ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa (raw, json)
Hash identifier: tYZ97cgI+SOXirQ9qolsOlp5bgffydesZkrQgwP6yTM=
Subject key identifier: 6A:18:00:50:CE:4C:E4:D6:73:7C:15:B4:89:0A:AA:FF:1E:32:4C:19
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 019963D147B122632F76DE6FCD574837631F
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa
Signing time: Fri 19 Sep 2025 21:11:23 +0000
ROA not before: Fri 19 Sep 2025 21:11:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 87.192.81.0/24 maxlen: 24
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.1.0/24 maxlen: 24
89.124.2.0/23 maxlen: 23
89.124.4.0/22 maxlen: 22
89.124.240.0/23 maxlen: 23
89.124.245.0/24 maxlen: 24
89.127.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:d1:47:b1:22:63:2f:76:de:6f:cd:57:48:37:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Sep 19 21:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a180050ce4ce4d6737c15b4890aaaff1e324c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:7e:11:20:bc:b2:c7:f2:c6:4d:1c:5b:26:
46:ff:ec:ea:40:83:77:75:ed:f8:ad:47:6d:ad:d0:
ef:e0:13:d3:76:6b:2b:3c:b8:5f:3e:43:ef:c4:8f:
f4:c7:36:c4:77:72:6d:0e:45:b0:e6:4a:8f:85:0f:
2d:34:37:1b:e2:50:88:df:2b:2d:4a:65:81:2d:bf:
60:c6:8e:8c:88:1e:ee:d3:b7:a2:7c:eb:11:b5:f2:
5a:92:37:1a:e2:a4:d3:72:52:21:a2:8e:c9:7e:cd:
31:00:50:bb:33:27:4a:8f:78:b7:56:9f:ff:3b:90:
83:f4:26:c1:f3:17:a4:dc:2a:72:53:90:6f:94:e3:
b9:3f:cb:34:88:da:d2:e4:6b:b6:c4:ea:78:f4:2f:
5d:ce:85:9f:7d:c7:3c:19:bc:9a:d2:33:14:7f:51:
49:cf:88:06:d0:f0:5e:01:de:42:ed:1b:1a:44:56:
7c:0c:52:6b:1e:56:fb:e1:17:0f:4e:68:7d:e3:aa:
45:0b:fd:ce:38:f4:8f:9f:ff:c3:b7:f1:68:8e:c8:
70:0e:7e:77:c9:a6:fe:8c:21:db:1f:c9:74:32:e9:
10:0b:51:ad:45:65:20:bd:65:38:36:6b:e4:d3:83:
ae:70:b8:f4:7d:c8:d5:73:11:08:61:3e:3e:ca:d9:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:18:00:50:CE:4C:E4:D6:73:7C:15:B4:89:0A:AA:FF:1E:32:4C:19
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.81.0-87.192.87.255
87.192.216.0/22
87.192.222.0/23
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.1.0-89.124.7.255
89.124.240.0/23
89.124.245.0/24
89.127.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:36:1a:4e:da:fe:15:a7:06:5d:be:02:e1:4e:9c:ff:d2:e7:
11:80:3d:79:e7:31:c7:17:d4:9f:62:0e:c2:2d:0a:07:81:da:
b0:6e:02:dc:9e:0a:ad:7b:dc:22:f3:96:81:e7:53:25:92:dc:
a5:ee:1c:85:f1:35:3c:46:68:21:b6:e0:b7:b8:58:43:2a:7c:
30:f9:aa:d2:79:a2:ad:9c:c3:da:a1:c0:2c:cb:fd:02:01:83:
63:4f:36:5a:dc:b6:84:69:7e:8d:6f:19:91:3b:81:4d:f4:b3:
68:02:05:ed:a7:e1:ab:58:32:d1:2e:5f:b8:04:53:f9:bc:ab:
b7:2e:41:98:71:1c:eb:2d:da:55:31:9a:d7:d1:3e:26:19:5c:
21:00:38:81:18:ba:cd:80:f5:e2:dc:8f:9f:fb:a5:8a:64:19:
b8:6e:d1:ce:25:f8:cb:cd:c4:67:fe:80:2f:98:3f:71:4f:b5:
d2:05:a6:f2:ef:bd:31:b3:72:b0:3e:c5:f7:4f:46:38:37:5e:
8b:23:3b:d5:c4:c4:8d:c1:42:1b:98:bb:d1:ad:e4:78:1b:6f:
fd:d7:03:f8:4e:2d:28:ca:c6:22:6d:8b:09:d8:28:e8:92:a7:
e0:f0:29:96:5e:ec:26:6f:90:b6:2a:de:5c:90:88:5c:e3:3d:
95:4e:d3:fb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZlj0UexImMvdt5vzVdIN2MfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2
YmU2NDIwHhcNMjUwOTE5MjExMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTE4MDA1MGNlNGNlNGQ2NzM3YzE1YjQ4OTBhYWFmZjFlMzI0YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/R+ESC8ssfyxk0cWyZG/+zqQIN3
de34rUdtrdDv4BPTdmsrPLhfPkPvxI/0xzbEd3JtDkWw5kqPhQ8tNDcb4lCI3yst
SmWBLb9gxo6MiB7u07eifOsRtfJakjca4qTTclIhoo7Jfs0xAFC7MydKj3i3Vp//
O5CD9CbB8xek3CpyU5BvlOO5P8s0iNrS5Gu2xOp49C9dzoWffcc8Gbya0jMUf1FJ
z4gG0PBeAd5C7RsaRFZ8DFJrHlb74RcPTmh946pFC/3OOPSPn//Dt/FojshwDn53
yab+jCHbH8l0MukQC1GtRWUgvWU4Nmvk04OucLj0fcjVcxEIYT4+ytm+LwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFGoYAFDOTOTWc3wVtIkKqv8eMkwZMB8GA1UdIwQY
MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt
NTc4OWRlNDI0YTQyLzEvYWhnQVVNNU01Tlp6ZkJXMGlRcXFfeDR5VEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy
LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaMAwDBABXwFED
BANXwFADBAJXwNgDBAFXwN4DBABX6MAwDAMEAVfowgMEA1fowAMEAFfo4QMEAlfo
5DAMAwQAWXwBAwQDWXwAAwQBWXzwAwQAWXz1AwQCWX/4MA0GCSqGSIb3DQEBCwUA
A4IBAQAeNhpO2v4VpwZdvgLhTpz/0ucRgD155zHHF9SfYg7CLQoHgdqwbgLcngqt
e9wi85aB51Mlktyl7hyF8TU8RmghtuC3uFhDKnww+arSeaKtnMPaocAsy/0CAYNj
TzZa3LaEaX6NbxmRO4FN9LNoAgXtp+GrWDLRLl+4BFP5vKu3LkGYcRzrLdpVMZrX
0T4mGVwhADiBGLrNgPXi3I+f+6WKZBm4btHOJfjLzcRn/oAvmD9xT7XSBaby770x
s3KwPsX3T0Y4N16LIzvVxMSNwUIbmLvRreR4G2/91wP4Ti0oysYibYsJ2Cjokqfg
8CmWXuwmb5C2Kt5ckIhc4z2VTtP7
-----END CERTIFICATE-----
Generated at Thu Oct 9 08:47:16 2025 by rpki-client