Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/JOvZJvxVCIjogtIv-LfIwpT-8XY.roa
File: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (raw, json)
Hash identifier: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=
Subject key identifier: 24:EB:D9:26:FC:55:08:88:E8:82:D2:2F:F8:B7:C8:C2:94:FE:F1:76
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 01993D85B065D644C5EC22380F80C1325E7C
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/JOvZJvxVCIjogtIv-LfIwpT-8XY.roa
Signing time: Fri 12 Sep 2025 10:43:15 +0000
ROA not before: Fri 12 Sep 2025 10:43:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23764
IP address blocks: 5.10.136.0/24 maxlen: 24
5.10.136.112/29 maxlen: 29
5.10.136.208/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.10.141.136/30 maxlen: 30
5.10.142.0/24 maxlen: 24
5.154.128.0/24 maxlen: 24
5.154.129.0/24 maxlen: 24
5.154.144.0/24 maxlen: 24
5.154.145.0/24 maxlen: 24
5.154.146.0/24 maxlen: 24
5.154.147.0/24 maxlen: 24
5.154.154.0/24 maxlen: 24
5.154.155.0/24 maxlen: 24
5.154.156.0/24 maxlen: 24
5.154.157.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
79.139.0.0/24 maxlen: 24
79.139.1.0/24 maxlen: 24
79.139.2.0/24 maxlen: 24
79.139.3.0/24 maxlen: 24
79.139.4.0/24 maxlen: 24
79.139.5.0/24 maxlen: 24
79.139.6.0/24 maxlen: 24
79.139.7.0/24 maxlen: 24
79.139.8.0/24 maxlen: 24
79.139.9.0/24 maxlen: 24
79.139.10.0/24 maxlen: 24
79.139.11.0/24 maxlen: 24
79.139.12.0/24 maxlen: 24
79.139.13.0/24 maxlen: 24
79.139.14.0/24 maxlen: 24
79.139.15.0/24 maxlen: 24
87.120.16.0/24 maxlen: 24
87.120.17.0/24 maxlen: 24
87.120.18.0/24 maxlen: 24
87.120.19.0/24 maxlen: 24
87.120.20.0/24 maxlen: 24
87.120.21.0/24 maxlen: 24
87.120.22.0/24 maxlen: 24
87.120.23.0/24 maxlen: 24
87.120.24.0/24 maxlen: 24
87.120.25.0/24 maxlen: 24
87.120.26.0/24 maxlen: 24
87.120.27.0/24 maxlen: 24
95.130.192.0/24 maxlen: 24
95.130.194.0/24 maxlen: 24
95.130.199.0/24 maxlen: 24
145.14.64.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
145.14.79.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
185.75.172.0/24 maxlen: 24
2a04:f580:9001::/48 maxlen: 48
2a04:f580:9030:100::/56 maxlen: 56
2a04:f580:9090::/48 maxlen: 48
2a04:f580:9210::/48 maxlen: 48
2a04:f581:110a::/48 maxlen: 48
2a04:f581:110b::/48 maxlen: 48
2a04:f581:8040::/48 maxlen: 48
2a04:f581:8070::/48 maxlen: 48
2a04:f581:8090::/48 maxlen: 48
2a04:f581:80b0::/48 maxlen: 48
2a04:f581:8140::/48 maxlen: 48
2a04:f581:8170::/48 maxlen: 48
2a04:f581:8190::/48 maxlen: 48
2a04:f581:81b0::/48 maxlen: 48
2a04:f581:8240::/48 maxlen: 48
2a04:f581:8270::/48 maxlen: 48
2a04:f581:8290::/48 maxlen: 48
2a04:f581:82b0::/48 maxlen: 48
2a04:f581:a00e:a001::/64 maxlen: 64
2a04:f581:a00e:a002::/64 maxlen: 64
2a04:f581:a00e:a003::/64 maxlen: 64
2a04:f581:a00e:a004::/64 maxlen: 64
2a04:f581:a00f::/48 maxlen: 48
2a04:f581:a111::/48 maxlen: 48
2a04:f581:a123::/48 maxlen: 48
2a04:f581:a125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:85:b0:65:d6:44:c5:ec:22:38:0f:80:c1:32:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Sep 12 10:43:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ebd926fc550888e882d22ff8b7c8c294fef176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:fc:4b:3d:aa:b8:c5:d4:cf:3a:58:be:6d:
85:6f:04:9c:7d:37:cf:b1:4d:b7:32:e3:47:e1:7e:
75:39:2f:0c:d0:69:66:75:01:3d:c2:7a:8a:a8:51:
06:1d:37:72:df:0b:58:7d:7b:3a:65:d9:82:6e:77:
24:d2:e6:d7:bf:33:71:c9:c7:f2:75:e2:b6:eb:13:
65:fb:c9:df:ba:0d:85:b7:26:be:8e:ee:99:7c:2c:
5f:12:82:e0:15:50:1a:c4:68:b5:ab:a9:64:6b:73:
3b:e3:b1:f8:12:b9:65:6a:c0:a4:90:52:9b:57:64:
f7:b4:71:13:ff:cb:53:de:c1:76:d3:30:d7:04:67:
00:a7:00:e5:fa:50:4f:b8:33:7a:b4:f2:04:69:bb:
19:d4:cc:ea:19:8a:2d:b3:2c:f3:1c:97:b2:33:ec:
74:4a:d6:90:4c:97:20:74:ea:fb:b4:97:2b:fa:7e:
45:ae:bd:06:a0:d4:29:bd:8a:99:31:9a:e2:0c:80:
71:c9:1d:9d:9e:5c:5d:0f:41:e6:b7:60:b7:d4:39:
71:49:58:09:ca:0b:db:58:93:12:fe:8c:86:e2:21:
df:a3:60:68:e5:c0:71:8e:2a:1c:21:6c:d2:41:f4:
e7:45:d6:d4:44:98:97:16:b5:68:68:61:d8:34:4f:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:D9:26:FC:55:08:88:E8:82:D2:2F:F8:B7:C8:C2:94:FE:F1:76
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/JOvZJvxVCIjogtIv-LfIwpT-8XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0/24
5.10.141.8/30
5.10.141.136/30
5.10.142.0/24
5.154.128.0/23
5.154.144.0/22
5.154.154.0-5.154.159.255
79.139.0.0/20
87.120.16.0-87.120.27.255
95.130.192.0/24
95.130.194.0/24
95.130.199.0/24
145.14.64.0/24
145.14.66.0/24
145.14.68.0-145.14.70.255
145.14.73.0/24
145.14.76.0-145.14.80.255
145.14.83.0/24
145.14.85.0/24
145.14.87.0/24
145.14.89.0/24
145.14.91.0-145.14.93.255
185.75.172.0/24
IPv6:
2a04:f580:9001::/48
2a04:f580:9030:100::/56
2a04:f580:9090::/48
2a04:f580:9210::/48
2a04:f581:110a::/47
2a04:f581:8040::/48
2a04:f581:8070::/48
2a04:f581:8090::/48
2a04:f581:80b0::/48
2a04:f581:8140::/48
2a04:f581:8170::/48
2a04:f581:8190::/48
2a04:f581:81b0::/48
2a04:f581:8240::/48
2a04:f581:8270::/48
2a04:f581:8290::/48
2a04:f581:82b0::/48
2a04:f581:a00e:a001::-2a04:f581:a00e:a004:ffff:ffff:ffff:ffff
2a04:f581:a00f::/48
2a04:f581:a111::/48
2a04:f581:a123::/48
2a04:f581:a125::/48
Signature Algorithm: sha256WithRSAEncryption
c2:c7:78:07:ef:ea:7b:c2:df:7d:0e:a4:c0:09:27:88:ae:ba:
73:db:95:c6:85:b1:02:f9:02:7a:b6:18:e5:53:de:c4:f3:eb:
a9:d9:f3:73:f1:6f:8a:c6:c4:ae:98:1e:d2:de:41:61:fe:a0:
58:92:4f:3c:48:df:d8:b6:e5:52:98:bd:31:f1:33:d2:64:83:
e9:1f:0b:35:e3:e8:dc:6b:1d:05:cd:35:c6:a9:c1:58:84:55:
97:07:c9:fe:bc:27:13:84:c6:40:07:35:ca:dc:0e:c8:a7:d1:
e9:c0:e9:85:10:49:2f:b1:b8:b4:c5:b5:68:af:90:34:fc:4a:
54:7e:f1:43:fe:4e:b4:b9:3d:17:db:43:83:8a:f4:f1:cd:fd:
61:5b:c6:49:29:66:0c:5b:e5:59:96:90:2d:16:26:ed:c0:de:
40:f8:15:73:34:b3:6c:cd:86:c7:a5:ae:bf:f0:72:e1:0a:70:
77:8e:75:7c:3e:97:f8:37:0d:52:56:92:fe:93:6e:0f:1e:34:
75:09:e0:57:0d:6b:3f:29:7f:3b:a7:d9:34:43:d2:13:14:6a:
09:76:11:7a:8a:b5:10:03:dd:5b:c5:da:5a:6b:11:a2:db:05:
8e:fe:f7:32:a3:88:28:61:6d:6e:ed:fa:b8:ba:7e:40:cb:78:
62:0e:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:28 2025 by rpki-client