Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_MziVaxjPyYmzCESPKId3TbOzSc.roa
File: _MziVaxjPyYmzCESPKId3TbOzSc.roa (raw, json)
Hash identifier: A98r9XizEKbabR0R5Tg8iJ23CuWObdTP0IURGYQclJE=
Subject key identifier: FC:CC:E2:55:AC:63:3F:26:26:CC:21:12:3C:A2:1D:DD:36:CE:CD:27
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01993BD93A939283BEBCE1F46FA90E8CC02E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_MziVaxjPyYmzCESPKId3TbOzSc.roa
Signing time: Fri 12 Sep 2025 02:55:15 +0000
ROA not before: Fri 12 Sep 2025 02:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 5.182.36.0/24 maxlen: 24
45.8.144.0/24 maxlen: 24
45.8.145.0/24 maxlen: 24
45.8.146.0/24 maxlen: 24
45.8.147.0/24 maxlen: 24
45.67.35.0/24 maxlen: 24
45.84.0.0/24 maxlen: 24
45.87.152.0/24 maxlen: 24
45.87.153.0/24 maxlen: 24
45.87.154.0/24 maxlen: 24
45.87.155.0/24 maxlen: 24
45.89.52.0/22 maxlen: 24
45.89.52.0/24 maxlen: 24
45.89.54.0/24 maxlen: 24
45.93.10.0/24 maxlen: 24
45.159.248.0/24 maxlen: 24
45.159.250.0/24 maxlen: 24
92.118.88.0/22 maxlen: 24
92.119.200.0/22 maxlen: 24
93.185.166.0/24 maxlen: 24
141.98.168.0/24 maxlen: 24
141.98.170.0/24 maxlen: 24
176.125.240.0/22 maxlen: 24
185.231.204.0/24 maxlen: 24
185.231.205.0/24 maxlen: 24
185.231.207.0/24 maxlen: 24
188.119.121.0/24 maxlen: 24
188.119.123.0/24 maxlen: 24
188.119.124.0/24 maxlen: 24
188.119.125.0/24 maxlen: 24
193.43.147.0/24 maxlen: 24
193.46.56.0/24 maxlen: 24
193.46.57.0/24 maxlen: 24
193.57.136.0/24 maxlen: 24
193.57.138.0/24 maxlen: 24
194.4.48.0/24 maxlen: 24
194.4.49.0/24 maxlen: 24
194.4.51.0/24 maxlen: 24
194.116.173.0/24 maxlen: 24
194.116.190.0/24 maxlen: 24
194.116.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:d9:3a:93:92:83:be:bc:e1:f4:6f:a9:0e:8c:c0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 12 02:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fccce255ac633f2626cc21123ca21ddd36cecd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:81:35:9c:5b:1e:cd:5b:6b:de:ff:c5:9f:
94:fe:43:c8:d6:66:43:31:a6:aa:7e:d8:bd:dc:cf:
87:5c:f8:db:be:7e:2f:74:76:8f:96:7f:2e:74:76:
36:01:6c:60:6f:28:31:b0:fe:39:8b:91:f8:90:19:
4d:4e:48:ac:e4:4f:9e:0b:e7:91:fc:a3:4d:4f:e8:
66:db:12:37:14:7e:e8:62:a6:cf:e6:a2:f0:1e:6a:
0a:9d:63:24:bb:f7:36:0c:fb:58:9a:4d:bf:d3:eb:
1f:77:d1:5b:c2:e2:4d:65:8b:14:74:a8:61:c9:d6:
2c:1f:04:d5:32:15:a8:52:d6:31:c7:e2:cb:cd:8c:
bd:ee:95:ca:33:21:97:ce:af:6b:17:83:f3:85:b4:
28:2d:b8:07:6f:65:4b:5c:de:ea:42:7b:a4:af:9a:
06:67:ab:1b:01:95:81:b9:c4:f0:60:1e:28:d2:02:
33:a0:f8:df:af:7a:a1:89:9a:d7:13:a4:68:f1:76:
03:30:43:bb:23:a3:fd:2c:34:59:bb:08:6d:58:ce:
4d:ad:5f:7a:70:54:63:1e:bd:66:ab:0a:04:37:1f:
43:e9:39:5c:62:9b:4c:72:f5:1c:91:10:44:bc:ba:
ad:f9:87:c0:c8:ed:c4:25:f8:dc:62:4b:6a:0b:cd:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:E2:55:AC:63:3F:26:26:CC:21:12:3C:A2:1D:DD:36:CE:CD:27
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_MziVaxjPyYmzCESPKId3TbOzSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.36.0/24
45.8.144.0/22
45.67.35.0/24
45.84.0.0/24
45.87.152.0/22
45.89.52.0/22
45.93.10.0/24
45.159.248.0/24
45.159.250.0/24
92.118.88.0/22
92.119.200.0/22
93.185.166.0/24
141.98.168.0/24
141.98.170.0/24
176.125.240.0/22
185.231.204.0/23
185.231.207.0/24
188.119.121.0/24
188.119.123.0-188.119.125.255
193.43.147.0/24
193.46.56.0/23
193.57.136.0/24
193.57.138.0/24
194.4.48.0/23
194.4.51.0/24
194.116.173.0/24
194.116.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:1e:5c:c6:48:4a:2b:f9:19:86:6c:18:15:0d:92:9b:50:f7:
52:c4:7d:ef:24:54:a1:fa:64:61:99:3d:21:34:43:04:67:10:
c2:a5:bd:24:6e:7f:3b:e3:59:60:40:89:a4:3c:2a:55:97:4e:
a6:df:39:c5:b4:3f:84:a4:64:b9:99:61:5d:34:c3:04:46:90:
e0:11:a4:d3:c1:1e:e0:95:9c:2b:13:22:80:e2:9b:db:f3:7b:
1a:e6:c7:14:f9:12:d2:9d:1f:35:5d:cb:11:53:51:bb:3b:a1:
5e:2b:cd:c6:cc:f2:28:a1:d6:93:08:de:ca:17:e4:38:80:db:
39:fe:90:b6:32:90:d8:dc:db:53:3c:d9:f2:4b:d3:09:e6:71:
0e:f9:c0:ef:17:71:71:8e:96:03:aa:ce:d0:bf:84:7e:60:98:
23:74:dd:27:98:05:97:18:03:89:6e:b3:41:ef:b4:39:61:77:
6b:81:7c:34:60:33:c0:ef:39:b8:fc:40:17:74:cc:72:9e:00:
bc:a9:0b:08:2a:f2:9b:ef:b3:b8:b0:4f:4c:83:3f:2b:fe:eb:
b7:bf:c3:b3:aa:aa:cb:7b:4a:c7:4d:7c:df:2e:3f:5d:0a:3d:
52:8f:c1:25:69:a9:1f:2b:54:ab:d4:8e:e9:3a:15:98:82:5c:
08:98:34:ef
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZk72TqTkoO+vOH0b6kOjMAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjUwOTEyMDI1NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2NjZTI1NWFjNjMzZjI2MjZjYzIxMTIzY2EyMWRkZDM2Y2VjZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sKBNZxbHs1ba97/xZ+U/kPI1mZD
Maaqfti93M+HXPjbvn4vdHaPln8udHY2AWxgbygxsP45i5H4kBlNTkis5E+eC+eR
/KNNT+hm2xI3FH7oYqbP5qLwHmoKnWMku/c2DPtYmk2/0+sfd9FbwuJNZYsUdKhh
ydYsHwTVMhWoUtYxx+LLzYy97pXKMyGXzq9rF4PzhbQoLbgHb2VLXN7qQnukr5oG
Z6sbAZWBucTwYB4o0gIzoPjfr3qhiZrXE6Ro8XYDMEO7I6P9LDRZuwhtWM5NrV96
cFRjHr1mqwoENx9D6TlcYptMcvUckRBEvLqt+YfAyO3EJfjcYktqC81prwIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFPzM4lWsYz8mJswhEjyiHd02zs0nMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvX016aVZheGpQeVltekNFU1BLSWQzVGJPelNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAAF
tiQDBAItCJADBAAtQyMDBAAtVAADBAItV5gDBAItWTQDBAAtXQoDBAAtn/gDBAAt
n/oDBAJcdlgDBAJcd8gDBABduaYDBACNYqgDBACNYqoDBAKwffADBAG558wDBAC5
588DBAC8d3kwDAMEALx3ewMEAbx3fAMEAMErkwMEAcEuOAMEAME5iAMEAME5igME
AcIEMAMEAMIEMwMEAMJ0rQMEAcJ0vjANBgkqhkiG9w0BAQsFAAOCAQEAth5cxkhK
K/kZhmwYFQ2Sm1D3UsR97yRUofpkYZk9ITRDBGcQwqW9JG5/O+NZYECJpDwqVZdO
pt85xbQ/hKRkuZlhXTTDBEaQ4BGk08Ee4JWcKxMigOKb2/N7GubHFPkS0p0fNV3L
EVNRuzuhXivNxszyKKHWkwjeyhfkOIDbOf6QtjKQ2NzbUzzZ8kvTCeZxDvnA7xdx
cY6WA6rO0L+EfmCYI3TdJ5gFlxgDiW6zQe+0OWF3a4F8NGAzwO85uPxAF3TMcp4A
vKkLCCrym++zuLBPTIM/K/7rt7/Ds6qqy3tKx0183y4/XQo9Uo/BJWmpHytUq9SO
6ToVmIJcCJg07w==
-----END CERTIFICATE-----
Generated at Fri Sep 19 01:12:33 2025 by rpki-client