Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/DywUgglXJxjquxmHdtAjCp7Yq9o.roa
File: DywUgglXJxjquxmHdtAjCp7Yq9o.roa (raw, json)
Hash identifier: 6H1UCjI6GgLSo6SE87Wkm7SLFZ5VGUSjT5Cycx1feMs=
Subject key identifier: 0F:2C:14:82:09:57:27:18:EA:BB:19:87:76:D0:23:0A:9E:D8:AB:DA
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0198C435E9C1BDC15B3462E82191CB10A24A
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/DywUgglXJxjquxmHdtAjCp7Yq9o.roa
Signing time: Tue 19 Aug 2025 21:22:04 +0000
ROA not before: Tue 19 Aug 2025 21:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 86.109.0.0/24 maxlen: 24
86.109.2.0/23 maxlen: 23
86.109.4.0/23 maxlen: 23
86.109.7.0/24 maxlen: 24
86.109.8.0/24 maxlen: 24
86.109.9.0/24 maxlen: 24
86.109.12.0/24 maxlen: 24
93.187.216.0/23 maxlen: 23
93.187.218.0/23 maxlen: 23
136.144.48.0/23 maxlen: 23
136.144.50.0/23 maxlen: 23
136.144.56.0/23 maxlen: 23
136.144.58.0/23 maxlen: 23
136.144.60.0/23 maxlen: 23
136.144.62.0/23 maxlen: 23
139.178.64.0/22 maxlen: 22
139.178.76.0/23 maxlen: 23
139.178.80.0/21 maxlen: 21
145.40.64.0/23 maxlen: 23
145.40.69.0/24 maxlen: 24
145.40.74.0/23 maxlen: 23
145.40.76.0/23 maxlen: 23
145.40.78.0/24 maxlen: 24
145.40.79.0/24 maxlen: 24
145.40.80.0/23 maxlen: 23
145.40.88.0/24 maxlen: 24
145.40.89.0/24 maxlen: 24
145.40.92.0/22 maxlen: 22
145.40.98.0/23 maxlen: 23
145.40.100.0/24 maxlen: 24
145.40.101.0/24 maxlen: 24
145.40.102.0/23 maxlen: 23
145.40.104.0/22 maxlen: 22
145.40.108.0/22 maxlen: 22
145.40.112.0/22 maxlen: 22
145.40.120.0/22 maxlen: 22
147.28.128.0/23 maxlen: 23
147.28.131.0/24 maxlen: 24
147.28.132.0/22 maxlen: 22
147.28.136.0/23 maxlen: 23
147.28.138.0/23 maxlen: 23
147.28.140.0/22 maxlen: 22
147.28.141.0/24 maxlen: 24
147.28.142.0/23 maxlen: 23
147.28.144.0/23 maxlen: 23
147.28.146.0/23 maxlen: 23
147.28.148.0/23 maxlen: 23
147.28.150.0/23 maxlen: 23
147.28.152.0/24 maxlen: 24
147.28.153.0/24 maxlen: 24
147.28.154.0/23 maxlen: 23
147.28.158.0/23 maxlen: 23
147.28.160.0/23 maxlen: 23
147.28.162.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.170.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.182.0/23 maxlen: 23
147.28.184.0/23 maxlen: 23
147.28.186.0/23 maxlen: 23
147.28.188.0/24 maxlen: 24
147.28.189.0/24 maxlen: 24
147.28.192.0/24 maxlen: 24
147.28.193.0/24 maxlen: 24
147.28.194.0/24 maxlen: 24
147.28.196.0/23 maxlen: 23
147.28.200.0/24 maxlen: 24
147.28.201.0/24 maxlen: 24
147.28.202.0/24 maxlen: 24
147.28.204.0/23 maxlen: 23
147.28.210.0/23 maxlen: 23
147.28.212.0/24 maxlen: 24
147.28.214.0/23 maxlen: 23
147.28.216.0/23 maxlen: 23
147.28.219.0/24 maxlen: 24
147.28.220.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.224.0/24 maxlen: 24
147.28.225.0/24 maxlen: 24
147.28.226.0/23 maxlen: 23
147.28.228.0/24 maxlen: 24
147.28.229.0/24 maxlen: 24
147.28.230.0/24 maxlen: 24
147.28.231.0/24 maxlen: 24
147.28.232.0/24 maxlen: 24
147.28.233.0/24 maxlen: 24
147.28.234.0/24 maxlen: 24
147.28.235.0/24 maxlen: 24
147.28.240.0/24 maxlen: 24
147.28.241.0/24 maxlen: 24
147.28.242.0/24 maxlen: 24
147.28.244.0/24 maxlen: 24
147.75.35.0/24 maxlen: 24
147.75.36.0/22 maxlen: 22
147.75.38.0/23 maxlen: 23
147.75.40.0/23 maxlen: 23
147.75.44.0/24 maxlen: 24
147.75.45.0/24 maxlen: 24
147.75.47.0/24 maxlen: 24
147.75.48.0/24 maxlen: 24
147.75.50.0/23 maxlen: 23
147.75.52.0/24 maxlen: 24
147.75.53.0/24 maxlen: 24
147.75.54.0/23 maxlen: 23
147.75.54.0/24 maxlen: 24
147.75.55.0/24 maxlen: 24
147.75.56.0/23 maxlen: 23
147.75.56.0/24 maxlen: 24
147.75.59.0/24 maxlen: 24
147.75.61.0/24 maxlen: 24
147.75.62.0/23 maxlen: 23
147.75.62.0/24 maxlen: 24
147.75.63.0/24 maxlen: 24
147.75.64.0/22 maxlen: 22
147.75.72.0/21 maxlen: 21
147.75.96.0/22 maxlen: 22
147.75.96.0/23 maxlen: 23
147.75.99.0/24 maxlen: 24
147.75.104.0/22 maxlen: 22
147.75.192.0/21 maxlen: 21
147.75.193.0/24 maxlen: 24
147.75.194.0/23 maxlen: 23
147.75.196.0/22 maxlen: 22
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c4:35:e9:c1:bd:c1:5b:34:62:e8:21:91:cb:10:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Aug 19 21:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f2c148209572718eabb198776d0230a9ed8abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:f5:ee:d8:f0:6c:55:9a:b8:9c:2e:be:87:
4e:84:72:93:08:fe:d9:eb:b3:d4:cc:29:f1:67:7c:
3a:f1:46:70:34:f0:05:a1:0c:1b:c2:00:11:d6:53:
3e:a2:0e:c3:61:35:67:a0:a6:3b:97:40:94:3b:80:
b0:da:e4:cd:04:b5:5c:e5:fd:d7:69:69:5a:3d:ec:
7b:9c:23:9e:b3:85:1b:11:f2:8d:df:43:ea:0f:0e:
2a:b5:0a:81:e3:b6:33:77:9e:c3:34:63:4f:17:21:
02:31:c6:9d:db:e8:19:fc:43:f5:41:5f:12:fd:d2:
dd:47:d6:cb:d6:d3:2a:92:cd:5e:48:62:2f:35:cd:
9d:86:49:8a:3e:83:ca:91:d5:18:9e:8e:cb:06:97:
a8:8e:6c:77:59:4d:7c:2c:55:d3:de:63:c2:9b:0f:
a3:83:f0:c1:9e:c4:6d:6c:e6:65:b8:fc:97:28:06:
1a:88:58:d8:23:da:66:f2:21:65:31:31:93:c5:c7:
14:4e:bd:0e:81:c6:d0:10:31:9b:bf:29:3b:e9:e8:
85:32:10:b1:52:f5:0d:1c:d8:72:7e:d0:ed:77:19:
bb:78:36:3d:c1:78:03:46:d6:40:4f:2d:8a:a6:27:
d9:a7:1b:5e:d9:32:5a:0d:25:37:89:d2:ce:db:9c:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:14:82:09:57:27:18:EA:BB:19:87:76:D0:23:0A:9E:D8:AB:DA
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/DywUgglXJxjquxmHdtAjCp7Yq9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.0.0/24
86.109.2.0-86.109.5.255
86.109.7.0-86.109.9.255
86.109.12.0/24
93.187.216.0/22
136.144.48.0/22
136.144.56.0/21
139.178.64.0/22
139.178.76.0/23
139.178.80.0/21
145.40.64.0/23
145.40.69.0/24
145.40.74.0-145.40.81.255
145.40.88.0/23
145.40.92.0/22
145.40.98.0-145.40.115.255
145.40.120.0/22
147.28.128.0/23
147.28.131.0-147.28.155.255
147.28.158.0-147.28.167.255
147.28.170.0/23
147.28.176.0/23
147.28.182.0-147.28.189.255
147.28.192.0-147.28.194.255
147.28.196.0/23
147.28.200.0-147.28.202.255
147.28.204.0/23
147.28.210.0-147.28.212.255
147.28.214.0-147.28.217.255
147.28.219.0-147.28.235.255
147.28.240.0-147.28.242.255
147.28.244.0/24
147.75.35.0-147.75.41.255
147.75.44.0/23
147.75.47.0-147.75.48.255
147.75.50.0-147.75.57.255
147.75.59.0/24
147.75.61.0-147.75.67.255
147.75.72.0/21
147.75.96.0/22
147.75.104.0/22
147.75.192.0/21
147.75.206.0/23
Signature Algorithm: sha256WithRSAEncryption
45:86:95:71:f9:b8:00:0e:55:84:21:47:07:6d:1b:ab:ce:1a:
1c:d5:95:6a:55:cc:10:40:ba:fa:47:3c:39:ed:2c:6f:af:4d:
ea:2b:06:9a:fa:b3:6b:67:19:d6:88:8e:12:e3:53:c9:f7:69:
5a:94:6d:09:fb:15:b5:9e:4a:75:d2:4f:2c:6a:61:b4:7b:d8:
88:1a:dc:81:34:be:cb:ff:ad:5d:b9:c2:91:3c:bb:c7:eb:5e:
4d:73:55:b5:a0:4a:f5:b6:53:26:f2:7b:82:87:db:1b:90:78:
cd:cf:66:50:52:16:e9:ff:00:e7:3c:1b:c6:a2:05:d4:27:b4:
49:52:77:9e:fa:6c:2d:1a:a0:8b:3f:90:58:0e:24:b1:7e:e5:
0e:ad:07:db:db:27:8b:02:f8:20:42:b5:1c:1e:a7:b8:a4:d0:
56:f0:ab:27:dd:87:92:79:41:10:9f:49:95:0f:73:57:38:1c:
fd:f1:1c:ca:33:67:2b:50:b1:4a:3e:82:06:8f:5f:e1:80:ab:
95:03:74:ac:e5:1c:5e:85:a6:d2:a7:e1:8f:9d:cf:5b:ba:33:
d4:57:10:8c:60:4f:7f:37:08:c0:a3:9a:20:d9:53:0f:c6:a5:
15:b0:77:74:66:62:94:79:1b:ed:02:67:dc:7a:a9:3c:0b:04:
fe:3c:a3:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:22 2025 by rpki-client