Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/oIkgSArRD9BLeVqu4qZR409U7LE.roa
File: oIkgSArRD9BLeVqu4qZR409U7LE.roa (raw, json)
Hash identifier: zD/jOdZf9Aicccl6tAIlMNbflON8Kndy+8p4Z3ebRkM=
Subject key identifier: A0:89:20:48:0A:D1:0F:D0:4B:79:5A:AE:E2:A6:51:E3:4F:54:EC:B1
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 0198EF8FEF19B6A9269AA309A457E4E103E0
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/oIkgSArRD9BLeVqu4qZR409U7LE.roa
Signing time: Thu 28 Aug 2025 07:24:04 +0000
ROA not before: Thu 28 Aug 2025 07:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
103.220.220.0/22 maxlen: 24
103.220.220.0/24 maxlen: 24
103.220.221.0/24 maxlen: 24
103.220.222.0/24 maxlen: 24
103.220.223.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.255.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
2a02:7980:200::/46 maxlen: 48
2a02:7980:200::/48 maxlen: 48
2a02:7980:300::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:8f:ef:19:b6:a9:26:9a:a3:09:a4:57:e4:e1:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Aug 28 07:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a08920480ad10fd04b795aaee2a651e34f54ecb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:56:94:ee:5b:34:53:e1:0a:60:3f:75:3e:
66:c2:e2:a5:63:63:48:79:2d:53:ca:17:cb:9d:ac:
58:db:32:46:72:b6:d5:12:a3:48:77:44:16:34:4e:
46:ec:c6:f4:c4:36:21:44:68:bc:5f:12:dd:31:f9:
05:f8:55:73:95:38:42:ec:95:58:aa:4c:92:2a:f9:
48:44:0e:86:7d:fd:c4:d6:04:5b:6e:47:12:81:19:
bf:36:95:88:32:89:6d:45:44:bb:97:cd:9f:94:50:
85:ce:0f:a8:a4:c9:31:5c:8c:e3:19:52:1d:ca:da:
3a:a4:60:8f:4b:86:28:b8:7c:91:47:16:10:dd:c3:
0c:5d:c8:8a:42:2e:a3:ff:69:0d:9a:0f:73:ea:6c:
a0:5c:5a:f9:cd:e0:1f:d9:6e:b8:ac:26:52:26:e7:
4d:0d:31:1d:8d:5b:97:62:28:81:b4:79:2f:72:05:
dd:a4:4b:64:a5:67:52:6c:df:9d:a9:96:d4:c5:42:
02:ea:78:8d:d0:09:c2:44:3b:ca:02:97:93:42:55:
e2:43:77:8b:0c:d1:16:1c:ef:ef:ca:b6:df:26:84:
ea:cc:ba:88:33:d2:1c:b2:d6:94:85:0a:20:54:72:
43:45:e4:84:7d:80:21:63:f6:ac:eb:02:2b:b1:83:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:20:48:0A:D1:0F:D0:4B:79:5A:AE:E2:A6:51:E3:4F:54:EC:B1
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/oIkgSArRD9BLeVqu4qZR409U7LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
103.220.220.0/22
103.245.116.0/22
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
7f:74:52:07:96:a9:aa:fb:9f:fa:35:0b:ad:49:e0:42:51:eb:
5a:45:a8:0e:dd:8d:5a:8c:c6:17:7f:65:43:8d:09:17:da:ef:
fe:aa:60:7c:db:b3:ba:6f:92:3c:e9:77:dc:03:6d:a5:ec:18:
80:cb:d4:c4:47:62:2f:11:ec:70:6b:73:2d:fb:53:5a:52:33:
ab:84:b3:49:86:88:b3:fc:42:ba:83:09:76:e9:5c:40:e5:f4:
23:2e:f6:6c:96:82:1e:2b:45:ab:96:a0:25:6f:c1:44:6b:02:
47:cd:96:a7:8c:d5:bf:17:ab:e7:28:65:6a:56:f4:eb:c4:d7:
32:e6:3d:99:a2:a7:5f:8f:2b:d8:d8:c6:94:4f:cb:36:79:c3:
91:9f:bb:75:5d:8e:a1:ea:13:af:e5:59:db:94:8a:36:dc:44:
d6:af:1e:57:fc:43:1a:d3:19:6e:e9:e7:a1:81:9b:d5:06:52:
d8:b9:84:96:46:90:7e:90:c2:19:c4:b5:bf:9b:bc:e9:6e:18:
d5:53:31:6a:c3:b2:4f:20:70:c8:e4:5a:5b:ff:d0:22:de:8e:
4c:2f:56:12:6f:f0:e7:e3:10:a4:1a:bc:18:57:6c:c2:32:a5:
33:46:fb:c2:da:d1:63:d5:e7:a1:59:16:a0:81:41:ec:72:93:
2f:32:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 08:45:01 2025 by rpki-client