Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/0ycMJPi_Xp0v_c9cpvBYlEdPtFU.roa
File: 0ycMJPi_Xp0v_c9cpvBYlEdPtFU.roa (raw, json)
Hash identifier: Os3eVNAHF9/fRsHKPcTnAbVY5k0UMaLvCpLK8GHyLns=
Subject key identifier: D3:27:0C:24:F8:BF:5E:9D:2F:FD:CF:5C:A6:F0:58:94:47:4F:B4:55
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0198EB579CD351E4A29E890479E9B9647E0A
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/0ycMJPi_Xp0v_c9cpvBYlEdPtFU.roa
Signing time: Wed 27 Aug 2025 11:44:04 +0000
ROA not before: Wed 27 Aug 2025 11:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2.57.76.0/22 maxlen: 32
14.102.20.0/24 maxlen: 32
14.102.21.0/24 maxlen: 32
14.102.28.0/22 maxlen: 32
14.102.39.0/24 maxlen: 32
14.102.49.0/24 maxlen: 32
14.102.51.0/24 maxlen: 32
14.102.58.0/24 maxlen: 32
14.102.124.0/24 maxlen: 32
31.14.26.0/24 maxlen: 32
45.78.84.0/22 maxlen: 32
45.78.88.0/23 maxlen: 32
45.120.188.0/24 maxlen: 32
45.120.189.0/24 maxlen: 32
45.120.190.0/24 maxlen: 32
45.120.191.0/24 maxlen: 32
62.101.168.0/21 maxlen: 32
62.101.176.0/21 maxlen: 32
62.101.184.0/21 maxlen: 32
77.81.92.0/22 maxlen: 32
85.217.190.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
86.104.76.0/22 maxlen: 32
86.104.192.0/24 maxlen: 32
86.104.195.0/24 maxlen: 32
86.106.176.0/23 maxlen: 32
89.32.132.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
89.40.81.0/24 maxlen: 32
89.46.242.0/24 maxlen: 32
89.104.122.0/23 maxlen: 32
89.223.22.0/23 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
91.92.64.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
91.92.178.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
91.192.212.0/22 maxlen: 32
91.203.128.0/22 maxlen: 32
91.233.108.0/22 maxlen: 32
91.235.208.0/22 maxlen: 32
92.114.60.0/22 maxlen: 32
92.114.81.0/24 maxlen: 32
92.255.0.0/24 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
92.255.80.0/22 maxlen: 32
93.113.52.0/23 maxlen: 24
93.114.136.0/23 maxlen: 32
93.114.236.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
94.139.48.0/21 maxlen: 32
94.139.56.0/22 maxlen: 32
94.139.60.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
94.176.0.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
103.61.13.0/24 maxlen: 32
103.61.14.0/24 maxlen: 32
103.211.84.0/22 maxlen: 32
103.211.88.0/22 maxlen: 32
110.172.128.0/23 maxlen: 32
110.172.137.0/24 maxlen: 32
110.172.141.0/24 maxlen: 32
110.172.144.0/24 maxlen: 32
110.172.165.0/24 maxlen: 32
110.172.169.0/24 maxlen: 32
110.172.172.0/24 maxlen: 32
110.172.173.0/24 maxlen: 32
110.172.176.0/24 maxlen: 32
110.238.192.0/19 maxlen: 32
114.69.250.0/23 maxlen: 32
119.12.192.0/20 maxlen: 32
160.202.52.0/22 maxlen: 32
176.223.68.0/22 maxlen: 32
176.223.104.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
180.235.160.0/20 maxlen: 32
180.235.176.0/20 maxlen: 32
185.66.136.0/22 maxlen: 32
188.94.84.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
188.240.48.0/23 maxlen: 32
188.240.214.0/23 maxlen: 32
188.241.0.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
188.241.249.0/24 maxlen: 32
193.56.24.0/22 maxlen: 32
193.142.103.0/24 maxlen: 32
193.163.74.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
202.89.75.0/24 maxlen: 32
212.70.3.0/24 maxlen: 32
212.70.8.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:57:9c:d3:51:e4:a2:9e:89:04:79:e9:b9:64:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 27 11:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3270c24f8bf5e9d2ffdcf5ca6f05894474fb455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:12:d8:15:2f:5d:d4:23:98:cf:97:42:1b:
b5:15:cf:32:0f:c9:e4:c6:2e:d2:18:5d:d4:e1:1f:
a5:e9:8a:34:a2:23:a0:14:2c:bd:60:bf:da:35:f6:
3a:50:a3:72:00:ce:31:c6:2a:77:f5:2f:10:a7:a8:
1f:cc:c0:3f:94:bb:86:44:b1:eb:8f:d6:9c:51:23:
4f:f7:7e:ca:2a:44:b2:10:0a:69:8c:50:9a:19:9c:
25:b9:66:56:9c:66:4a:94:6a:cb:b9:d7:c3:a7:0f:
2b:9e:fa:d2:fe:3b:ee:19:af:b9:27:8d:97:63:e6:
77:d6:88:e8:ee:24:ea:35:a3:9d:33:15:06:b3:01:
7c:76:61:db:fa:86:7a:e4:f8:0d:c8:3a:c0:f7:e8:
4d:ff:f1:5b:80:da:9c:91:6f:ed:6d:5b:03:82:3c:
57:43:84:9b:a7:bd:a7:3b:73:09:41:e8:7a:b9:4d:
af:14:82:42:9b:c4:0d:32:28:c0:72:78:56:cb:8e:
74:4c:c0:3b:be:35:c4:5e:c0:0c:1f:5d:84:37:5e:
77:c9:f6:ff:5b:f9:96:1f:3c:bc:fb:7c:6f:a3:c6:
ed:71:65:52:7d:93:29:bf:0f:b8:a0:26:ef:f5:c6:
5f:17:9b:1f:23:b6:51:2d:d2:33:9a:82:fc:0b:98:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:27:0C:24:F8:BF:5E:9D:2F:FD:CF:5C:A6:F0:58:94:47:4F:B4:55
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/0ycMJPi_Xp0v_c9cpvBYlEdPtFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
14.102.20.0/23
14.102.28.0/22
14.102.39.0/24
14.102.49.0/24
14.102.51.0/24
14.102.58.0/24
14.102.124.0/24
31.14.26.0/24
45.78.84.0-45.78.89.255
45.120.188.0/22
62.101.168.0-62.101.191.255
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.104.192.0/24
86.104.195.0/24
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.64.0/24
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
91.203.128.0/22
91.233.108.0/22
91.235.208.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.48.0-94.139.61.255
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
103.61.13.0-103.61.14.255
103.211.84.0-103.211.91.255
110.172.128.0/23
110.172.137.0/24
110.172.141.0/24
110.172.144.0/24
110.172.165.0/24
110.172.169.0/24
110.172.172.0/23
110.172.176.0/24
110.238.192.0/19
114.69.250.0/23
119.12.192.0/20
160.202.52.0/22
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.163.74.0/24
193.200.104.0/23
202.89.75.0/24
212.70.3.0/24
212.70.8.0/21
Signature Algorithm: sha256WithRSAEncryption
44:67:64:9b:38:b6:53:11:ed:6d:e2:04:c9:51:50:10:04:a0:
01:41:f5:64:3c:73:e8:1b:e0:c5:88:93:c3:99:f4:94:aa:67:
4d:9e:54:1b:da:6b:f6:30:d4:dc:8f:4a:7d:f2:71:b5:72:19:
ee:e5:e2:70:57:8c:e6:51:c7:57:e5:ed:c8:d4:50:e7:82:ad:
f0:da:30:a7:76:75:ea:d9:88:fe:c1:c3:e7:57:16:f9:d3:5a:
3a:fc:84:06:9a:a6:a1:df:30:0e:39:d3:b6:4c:33:83:6d:28:
67:04:7d:18:bd:63:3c:c5:74:eb:d2:2e:37:94:04:2d:72:5d:
58:b3:54:71:39:e4:87:fc:2e:31:21:4d:0a:bb:d5:1b:6b:e0:
42:b4:88:94:53:8f:b5:8e:69:ff:2b:a4:49:0e:aa:ed:e1:7c:
5e:08:38:28:0c:26:96:90:4f:01:69:c1:35:2e:04:c6:43:52:
af:fc:2e:e3:b9:cf:c4:50:c7:25:75:a7:01:63:8e:5d:32:e5:
ac:b5:4e:af:9c:20:83:0b:54:37:e6:54:88:ee:56:3d:fa:2e:
78:17:d9:e7:45:4a:34:f3:3e:9a:04:96:19:5b:f1:fa:96:95:
be:ba:7c:90:b6:0d:cb:ce:fe:76:3d:fc:8f:d0:8d:d4:08:ed:
83:b7:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:57:15 2025 by rpki-client