Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/XXoZOakmJlvXmGLWUcpo0gQIMX0.roa
File: XXoZOakmJlvXmGLWUcpo0gQIMX0.roa (raw, json)
Hash identifier: pmwXibQwTAqNCSY5Q6bAlM3gdp8aduabThZ3TyryXdc=
Subject key identifier: 5D:7A:19:39:A9:26:26:5B:D7:98:62:D6:51:CA:68:D2:04:08:31:7D
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019A5436B66B436A38B826AA22D233FA3B60
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/XXoZOakmJlvXmGLWUcpo0gQIMX0.roa
Signing time: Wed 05 Nov 2025 13:31:03 +0000
ROA not before: Wed 05 Nov 2025 13:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58327
IP address blocks: 5.252.252.0/22 maxlen: 24
81.172.88.0/21 maxlen: 24
81.172.103.0/24 maxlen: 24
81.172.104.0/21 maxlen: 24
81.172.120.0/21 maxlen: 24
89.150.32.0/24 maxlen: 24
89.150.37.0/24 maxlen: 24
89.150.39.0/24 maxlen: 24
89.150.42.0/24 maxlen: 24
94.101.124.0/22 maxlen: 24
176.120.168.0/21 maxlen: 24
185.74.193.0/24 maxlen: 24
185.74.194.0/23 maxlen: 24
185.74.194.0/24 maxlen: 24
185.74.195.0/24 maxlen: 24
185.194.25.0/24 maxlen: 24
185.221.191.0/24 maxlen: 24
185.224.93.0/24 maxlen: 24
185.224.94.0/23 maxlen: 24
185.224.94.0/24 maxlen: 24
185.224.95.0/24 maxlen: 24
185.226.228.0/24 maxlen: 24
185.230.144.0/24 maxlen: 24
185.232.135.0/24 maxlen: 24
185.239.4.0/22 maxlen: 24
188.212.32.0/23 maxlen: 24
193.242.188.0/23 maxlen: 24
2a09:4e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:36:b6:6b:43:6a:38:b8:26:aa:22:d2:33:fa:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Nov 5 13:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d7a1939a926265bd79862d651ca68d20408317d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:3f:d3:2e:fa:40:dd:d4:65:7e:54:69:50:
3b:72:21:27:37:a6:14:7e:de:f0:3c:28:b4:87:f7:
89:81:d4:31:9a:7e:8e:c5:25:1a:03:e6:6c:39:95:
ed:e5:5d:a9:3b:93:94:c1:80:d3:c4:ac:25:89:86:
eb:2e:61:51:d4:d6:5d:cb:d1:52:b4:47:02:f8:ee:
9b:71:58:b2:3e:31:84:bd:f8:4d:11:33:03:d8:43:
2d:f1:f1:2e:17:43:af:d7:83:4a:17:a7:3e:19:aa:
33:7e:db:78:c5:f9:8f:05:b8:70:4c:c4:3a:7f:89:
11:8e:d8:55:26:fc:7c:f2:c0:96:97:08:33:57:d9:
32:9f:d0:59:16:a4:cf:f2:80:ca:c1:3f:12:89:4f:
2e:64:56:7b:9c:7d:37:0a:53:20:6a:89:28:76:fe:
43:c6:de:20:6c:4b:38:04:65:be:66:d7:3c:70:4a:
08:f8:92:04:aa:e8:44:41:73:a2:50:4c:f5:3b:4f:
d8:b5:50:85:64:11:49:e0:ce:a1:37:08:08:64:3d:
4b:80:18:34:be:55:17:c9:3e:48:01:b3:3c:06:d0:
d8:cd:70:7b:04:61:03:98:14:8f:e1:25:9b:ec:7b:
f3:c1:01:c4:d4:de:d4:59:39:89:36:10:cf:75:1c:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:19:39:A9:26:26:5B:D7:98:62:D6:51:CA:68:D2:04:08:31:7D
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/XXoZOakmJlvXmGLWUcpo0gQIMX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.252.0/22
81.172.88.0/21
81.172.103.0-81.172.111.255
81.172.120.0/21
89.150.32.0/24
89.150.37.0/24
89.150.39.0/24
89.150.42.0/24
94.101.124.0/22
176.120.168.0/21
185.74.193.0-185.74.195.255
185.194.25.0/24
185.221.191.0/24
185.224.93.0-185.224.95.255
185.226.228.0/24
185.230.144.0/24
185.232.135.0/24
185.239.4.0/22
188.212.32.0/23
193.242.188.0/23
IPv6:
2a09:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
43:db:33:3d:bb:34:35:a2:62:13:84:cc:44:07:19:6d:50:ab:
eb:61:8b:fc:a4:bd:24:97:c5:3b:bc:d3:99:6f:94:4a:58:d5:
38:f1:65:39:9b:44:e0:e0:68:4d:95:c3:f4:c2:c9:db:93:b1:
ad:e0:97:0e:88:43:a6:61:1b:4d:b0:87:7a:8e:d7:d5:ca:f1:
2d:21:76:96:b0:de:df:a8:68:3b:0e:f4:33:1d:43:23:70:ae:
4e:fd:11:d4:01:8e:aa:45:2c:3d:4f:81:7e:01:7c:7b:e9:9b:
36:9e:25:0a:5b:b4:21:67:c6:9c:07:37:53:53:87:92:3c:bc:
21:19:e6:39:bd:49:1f:48:b4:bd:e3:cf:e4:77:f6:9e:2b:29:
24:d5:33:ea:c3:17:9e:1d:aa:d5:87:dc:a9:97:fe:11:cd:cf:
e4:25:81:38:d7:83:6c:a2:be:7b:dc:7d:6e:82:13:9c:e4:d9:
36:81:b9:4e:bb:24:b5:c6:bf:23:96:77:b0:a5:3b:a4:6a:94:
68:af:f5:7e:fe:24:43:a7:6f:81:a6:e3:e7:c9:ec:05:f8:af:
b6:9e:21:90:73:50:08:56:1e:9b:55:86:fb:11:ee:23:2d:d8:
9f:1d:47:ff:30:a7:50:16:4e:ef:22:01:97:1e:58:d7:65:33:
20:e1:b6:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:03 2025 by rpki-client