Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aqOgV96SossxX1nZD2xtyccju8M.roa
File: aqOgV96SossxX1nZD2xtyccju8M.roa (raw, json)
Hash identifier: dcbijOekPj9sVmzAj2JORlfD6ACWfU1ZlW8vrZKTSS8=
Subject key identifier: 6A:A3:A0:57:DE:92:A2:CB:31:5F:59:D9:0F:6C:6D:C9:C7:23:BB:C3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01995E245629FB2D41A0CC21CC608F9BC08C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aqOgV96SossxX1nZD2xtyccju8M.roa
Signing time: Thu 18 Sep 2025 18:44:23 +0000
ROA not before: Thu 18 Sep 2025 18:44:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.88.136.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
77.83.39.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 32
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:342::/32 maxlen: 32
2a09:346::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 32
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 32
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
2a11:3900::/32 maxlen: 32
2a11:d680::/32 maxlen: 32
2a12:9f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:24:56:29:fb:2d:41:a0:cc:21:cc:60:8f:9b:c0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 18 18:44:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aa3a057de92a2cb315f59d90f6c6dc9c723bbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:a5:3a:94:11:93:c1:95:8d:70:e8:2d:e6:
08:db:40:f7:6d:11:b5:72:87:6c:33:a0:04:10:11:
16:72:39:29:26:02:a2:a5:0b:d3:0f:6a:d8:e8:43:
34:69:27:3c:70:98:b8:e0:d7:ed:7d:10:c6:13:7d:
a1:3b:d0:7b:54:0a:c0:f6:bb:3a:a2:81:4e:cc:6d:
67:25:5d:f6:16:02:91:0f:d0:ed:67:09:b5:6c:ec:
dd:2d:84:7a:09:ea:fa:7a:6f:96:5b:75:7f:80:da:
3d:cb:9c:64:70:e3:cd:aa:96:80:5e:9b:be:05:2e:
e9:64:5f:96:88:c0:e9:ca:78:d0:51:61:14:dd:93:
64:20:c5:e7:65:66:2f:5e:24:e6:1a:64:ac:9b:51:
51:b1:57:34:37:d9:ad:b6:c2:15:c8:f3:18:e2:5f:
96:35:8f:d1:3e:3b:17:0c:fa:ff:ca:eb:5f:50:89:
c8:5d:ee:9e:f0:93:ab:f1:1a:51:3e:99:5e:b2:4c:
98:84:eb:7c:db:97:31:50:9c:e1:69:b8:7f:bb:c1:
c3:e7:aa:fd:0f:98:97:90:aa:9d:f2:4f:c8:d5:34:
ee:e1:6e:a2:8f:a6:d9:93:c1:ff:1a:43:bb:b4:37:
f5:cf:5f:eb:fa:dc:88:94:70:10:cd:ef:65:f7:d3:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:A0:57:DE:92:A2:CB:31:5F:59:D9:0F:6C:6D:C9:C7:23:BB:C3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/aqOgV96SossxX1nZD2xtyccju8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.88.136.0/23
45.94.171.0/24
45.132.180.0/24
45.132.182.0/23
77.83.39.0/24
91.223.110.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:342::/32
2a09:346::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
2a11:3900::/32
2a11:d680::/32
2a12:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
b9:74:7a:97:0d:f0:bf:b7:c4:75:f0:c2:e2:0d:08:7f:32:91:
1f:17:2c:6e:58:5e:04:6a:29:a3:e3:82:1b:c8:8c:b2:f1:f7:
cc:17:92:01:3b:ee:16:04:1f:47:c1:62:83:1c:c2:74:a3:1b:
48:29:bc:9d:e0:5b:48:19:93:2b:cd:0e:23:29:f5:2f:a4:0e:
5f:96:74:c0:32:d2:d1:53:74:bd:20:3e:62:38:b3:67:ad:2d:
1b:c2:cf:22:42:6e:4e:e2:af:7f:09:fc:1c:e1:9f:c9:c5:94:
d2:d4:f6:39:c0:85:99:36:e1:e4:ef:98:28:07:9d:76:c8:96:
7d:f1:3b:dd:c2:21:53:7b:e4:0e:d7:96:38:ce:5a:95:db:36:
38:f3:b1:bb:b7:9b:3b:d5:84:b1:25:fd:a5:f3:03:51:2c:44:
ad:26:4c:a7:3c:4c:3c:b3:2a:9e:62:df:5b:0a:a9:04:76:84:
5c:ab:e7:39:9e:6c:b8:83:ee:9e:de:b2:dc:7c:8c:b5:59:7d:
9e:17:05:47:35:6d:6a:9a:06:f9:72:bd:2f:09:ee:94:d9:d3:
34:4d:c7:6f:58:0f:3e:c2:70:37:b7:bc:28:91:55:e2:d5:da:
48:c3:dd:c9:17:12:51:d9:56:d1:9d:15:79:3e:cf:c8:bf:a3:
4c:1e:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:17 2025 by rpki-client