Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/mS1r3nEBgAI3lLhm6noZgqn_cmA.roa
File: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (raw, json)
Hash identifier: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=
Subject key identifier: 99:2D:6B:DE:71:01:80:02:37:94:B8:66:EA:7A:19:82:A9:FF:72:60
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 019A0C8179266D3FD68D01E8129AE123A333
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/mS1r3nEBgAI3lLhm6noZgqn_cmA.roa
Signing time: Wed 22 Oct 2025 15:20:03 +0000
ROA not before: Wed 22 Oct 2025 15:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 2.32.0.0/16 maxlen: 20
2.33.0.0/17 maxlen: 17
2.33.128.0/17 maxlen: 17
2.33.176.0/20 maxlen: 20
2.34.0.0/15 maxlen: 20
2.36.0.0/14 maxlen: 18
2.40.0.0/16 maxlen: 20
2.41.0.0/16 maxlen: 16
2.42.0.0/16 maxlen: 20
2.43.0.0/16 maxlen: 16
2.44.0.0/16 maxlen: 19
2.45.0.0/16 maxlen: 20
2.46.0.0/15 maxlen: 20
5.88.0.0/13 maxlen: 20
31.26.0.0/16 maxlen: 16
31.27.0.0/18 maxlen: 18
31.27.96.0/20 maxlen: 20
31.27.128.0/17 maxlen: 19
31.27.192.0/19 maxlen: 19
31.27.224.0/19 maxlen: 19
31.156.0.0/14 maxlen: 19
37.116.0.0/16 maxlen: 19
37.117.0.0/16 maxlen: 19
37.118.0.0/16 maxlen: 16
37.119.0.0/17 maxlen: 19
37.119.128.0/17 maxlen: 20
37.159.0.0/17 maxlen: 17
37.159.128.0/17 maxlen: 20
37.176.0.0/13 maxlen: 20
47.53.0.0/16 maxlen: 16
47.53.32.0/19 maxlen: 19
47.53.64.0/19 maxlen: 19
47.53.128.0/19 maxlen: 19
47.53.160.0/19 maxlen: 19
47.53.208.0/20 maxlen: 20
83.224.64.0/20 maxlen: 20
83.224.80.0/24 maxlen: 24
83.224.81.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
83.224.128.0/17 maxlen: 17
83.225.0.0/16 maxlen: 16
91.80.0.0/19 maxlen: 19
91.80.32.0/21 maxlen: 21
91.80.46.0/24 maxlen: 24
91.80.48.0/20 maxlen: 24
91.80.64.0/18 maxlen: 18
91.80.128.0/17 maxlen: 17
91.81.0.0/17 maxlen: 19
91.81.128.0/17 maxlen: 24
93.64.0.0/16 maxlen: 18
93.65.0.0/16 maxlen: 18
93.66.0.0/15 maxlen: 17
93.68.0.0/16 maxlen: 16
93.69.0.0/16 maxlen: 16
93.70.0.0/16 maxlen: 18
93.71.0.0/16 maxlen: 18
93.144.0.0/16 maxlen: 20
93.145.0.0/16 maxlen: 20
93.146.0.0/16 maxlen: 20
93.147.0.0/16 maxlen: 20
93.148.0.0/16 maxlen: 20
93.149.0.0/16 maxlen: 20
93.150.0.0/16 maxlen: 20
93.151.24.0/22 maxlen: 22
93.151.128.0/17 maxlen: 20
109.112.0.0/15 maxlen: 15
109.114.0.0/15 maxlen: 19
109.115.96.0/19 maxlen: 19
109.115.192.0/19 maxlen: 19
109.115.224.0/19 maxlen: 19
109.116.0.0/15 maxlen: 20
109.118.0.0/16 maxlen: 16
109.119.0.0/16 maxlen: 16
130.0.128.0/18 maxlen: 21
130.25.0.0/16 maxlen: 18
176.242.0.0/15 maxlen: 15
176.244.0.0/14 maxlen: 14
188.152.0.0/17 maxlen: 20
188.152.128.0/17 maxlen: 20
188.153.0.0/16 maxlen: 20
188.216.0.0/15 maxlen: 17
188.218.0.0/15 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:81:79:26:6d:3f:d6:8d:01:e8:12:9a:e1:23:a3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Oct 22 15:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=992d6bde710180023794b866ea7a1982a9ff7260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:70:97:89:71:0e:7a:9d:03:8d:f5:93:0f:
0e:57:a8:66:50:3b:55:72:b7:2a:90:2e:06:bd:53:
fc:e8:14:71:5c:9a:72:ab:3a:7c:a5:a7:21:b8:94:
1f:e7:bd:69:29:2d:4f:d0:c9:c5:31:44:ae:78:77:
7f:cc:ec:5b:fe:0e:ee:30:4b:30:38:20:2e:dd:bd:
87:20:6c:73:b2:71:29:5c:f6:88:f6:93:61:8a:9c:
8f:a8:95:a6:2b:25:97:00:46:8b:b7:ba:39:12:d2:
a1:a3:61:c3:c4:cc:a3:f5:59:60:7d:cf:91:c2:86:
e5:fa:62:24:de:f0:b5:f1:cb:ee:bb:42:c6:c8:5c:
57:82:e5:7e:2f:ad:76:1e:5e:7a:1f:9c:92:c6:df:
3b:98:0e:b3:9d:9e:0c:8b:fd:0d:0d:f9:40:47:ae:
f5:06:9a:fe:7e:35:60:a5:00:1a:34:73:1a:2d:e9:
d5:91:9e:6e:9f:b1:b3:af:fd:1a:48:86:d3:79:c2:
c9:bc:a7:4a:6a:2f:87:3a:a8:6f:4f:c2:cd:8c:1a:
23:89:32:19:77:d7:b3:d8:19:c0:f7:cf:ab:ef:3a:
a7:9e:97:92:81:0f:65:ac:07:c5:91:e9:4e:2e:2f:
ee:88:00:e3:28:e3:ae:38:a0:64:b1:d6:96:81:0b:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:6B:DE:71:01:80:02:37:94:B8:66:EA:7A:19:82:A9:FF:72:60
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/mS1r3nEBgAI3lLhm6noZgqn_cmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/12
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
47.53.0.0/16
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0-91.80.39.255
91.80.46.0/24
91.80.48.0-91.81.255.255
93.64.0.0/13
93.144.0.0-93.150.255.255
93.151.24.0/22
93.151.128.0/17
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
0c:de:d1:f9:57:fc:5c:a0:5f:ca:0c:d2:4f:9a:a8:35:9a:a8:
0b:4d:d4:f3:c1:41:14:88:98:6d:85:44:07:ec:79:cb:d7:00:
04:f8:13:b3:06:50:eb:1d:29:ae:48:90:98:07:0c:6d:7b:3c:
60:d1:0a:35:31:02:26:32:16:70:b6:6c:62:4d:f0:7e:98:8e:
aa:a0:d5:15:88:a6:1a:52:09:d4:9f:3b:2b:37:e6:ed:55:f7:
51:3e:c6:fb:c8:84:a5:83:48:b7:b3:11:ad:44:df:38:23:c9:
14:20:22:92:6c:49:9f:64:3f:92:99:72:fb:73:5e:d7:65:5e:
de:1c:27:65:be:3d:df:55:b1:f5:0d:55:6f:0d:78:9a:1c:f3:
0a:45:b9:dc:aa:e9:85:7a:4b:51:cc:ef:2d:2d:53:0f:f6:2f:
17:38:46:04:aa:73:be:c8:04:b7:6f:71:f3:05:3f:86:de:f9:
de:21:1d:10:8d:9f:51:c4:4b:b2:1e:1c:1e:c9:65:7e:96:5e:
0a:bc:85:96:f2:71:42:7b:3b:d4:49:31:d4:55:72:53:7f:5a:
7f:fa:28:d8:ef:c8:e5:1e:eb:d2:3f:ed:13:6f:41:9d:b8:6c:
b1:74:48:b1:b1:3e:b1:70:06:35:d3:22:b2:70:34:a0:86:7a:
c5:ec:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:11:16 2025 by rpki-client