Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/g_8J3LdgWlRMOHZvN_VHED_yTxY.roa
File: g_8J3LdgWlRMOHZvN_VHED_yTxY.roa (raw, json)
Hash identifier: Vdi+wDh3ZzsI3C2Itz+W70NugN9WwA/63BL9531gLg8=
Subject key identifier: 83:FF:09:DC:B7:60:5A:54:4C:38:76:6F:37:F5:47:10:3F:F2:4F:16
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019A0731EB10FFEB5276DE5BEBD3460C0D93
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/g_8J3LdgWlRMOHZvN_VHED_yTxY.roa
Signing time: Tue 21 Oct 2025 14:35:03 +0000
ROA not before: Tue 21 Oct 2025 14:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41368
IP address blocks: 5.34.128.0/19 maxlen: 24
5.183.184.0/22 maxlen: 24
89.29.128.0/20 maxlen: 20
89.29.129.0/24 maxlen: 24
89.29.132.0/24 maxlen: 24
89.29.133.0/24 maxlen: 24
89.29.135.0/24 maxlen: 24
89.29.144.0/21 maxlen: 21
89.29.149.0/24 maxlen: 24
89.29.150.0/24 maxlen: 24
89.29.151.0/24 maxlen: 24
89.29.152.0/22 maxlen: 22
89.29.155.0/24 maxlen: 24
89.29.156.0/24 maxlen: 24
89.29.157.0/24 maxlen: 24
89.29.158.0/24 maxlen: 24
89.29.159.0/24 maxlen: 24
89.29.232.0/22 maxlen: 22
89.29.233.0/24 maxlen: 24
89.29.234.0/24 maxlen: 24
89.29.236.0/22 maxlen: 22
89.29.254.0/24 maxlen: 24
176.57.104.0/22 maxlen: 22
176.57.108.0/22 maxlen: 22
176.57.108.0/24 maxlen: 24
176.57.110.0/23 maxlen: 23
185.40.37.0/24 maxlen: 24
185.40.38.0/23 maxlen: 23
185.40.38.0/24 maxlen: 24
185.40.39.0/24 maxlen: 24
185.64.243.0/24 maxlen: 24
185.74.240.0/22 maxlen: 24
185.93.80.0/22 maxlen: 24
185.123.56.0/22 maxlen: 24
185.145.40.0/22 maxlen: 24
185.214.136.0/22 maxlen: 24
185.214.138.0/24 maxlen: 24
188.92.124.0/22 maxlen: 24
193.56.164.0/22 maxlen: 24
212.119.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:31:eb:10:ff:eb:52:76:de:5b:eb:d3:46:0c:0d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Oct 21 14:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83ff09dcb7605a544c38766f37f547103ff24f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:e2:c6:6c:63:0a:e8:d3:98:bd:c2:ec:d4:
a9:c3:cb:6d:40:02:1c:7a:38:10:d9:68:df:12:4e:
39:c7:7c:f2:37:4b:b2:69:47:89:21:8b:ac:dc:78:
40:e2:48:a7:61:f9:98:d1:a3:cf:79:2b:e0:ed:fa:
6b:e7:23:bc:00:eb:72:29:d4:9b:b9:2f:94:7e:c6:
01:7b:ea:0d:07:20:b6:58:66:7f:37:16:c6:2b:1d:
7a:a5:cc:66:e3:a6:28:9c:bf:97:7f:e4:3e:51:96:
b0:83:01:12:9e:ae:49:ea:40:c7:aa:c8:ed:42:52:
21:a2:de:63:5f:0d:72:83:21:1c:23:1b:13:39:1d:
31:95:cd:c5:34:d7:9e:16:6e:5f:00:12:04:2f:59:
f8:e6:f7:7b:32:a0:cb:d5:0b:48:4d:35:e6:ec:b0:
d3:b1:cb:8b:5b:df:76:56:bf:d1:0b:5c:24:65:c1:
04:88:b7:4f:a0:8f:75:b9:d2:e8:2d:03:1d:ba:e4:
b7:7d:5b:ce:2f:e4:99:2c:11:be:1c:c0:dd:1d:7e:
ad:40:8a:de:64:52:b1:21:61:ac:57:0e:d4:52:0c:
14:cf:eb:bf:f4:08:93:92:ef:fb:1c:95:a4:af:eb:
ea:9a:57:87:53:3c:7e:6f:8f:35:c2:db:f3:ed:67:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:09:DC:B7:60:5A:54:4C:38:76:6F:37:F5:47:10:3F:F2:4F:16
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/g_8J3LdgWlRMOHZvN_VHED_yTxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.128.0/19
5.183.184.0/22
89.29.128.0/19
89.29.232.0/21
89.29.254.0/24
176.57.104.0/21
185.40.37.0-185.40.39.255
185.64.243.0/24
185.74.240.0/22
185.93.80.0/22
185.123.56.0/22
185.145.40.0/22
185.214.136.0/22
188.92.124.0/22
193.56.164.0/22
212.119.52.0/22
Signature Algorithm: sha256WithRSAEncryption
43:e0:4a:94:ea:7c:5c:80:45:37:74:12:bc:fc:aa:42:8a:2c:
29:03:5b:8c:ff:6a:20:38:a7:15:5b:c2:ef:61:36:b6:da:f8:
ba:ed:a0:e4:ac:82:7f:bb:d2:ed:0b:47:89:4e:56:78:63:95:
ef:05:e6:d8:1d:16:ca:4f:0c:37:92:e6:3a:1f:8b:a4:bf:00:
09:f5:83:91:3d:92:e8:00:65:0f:bd:cd:d7:f7:d9:26:ed:31:
ab:a1:72:5a:1c:01:8c:85:88:cf:b8:e2:dd:e0:6a:65:fd:10:
29:21:23:f9:5c:8f:18:cd:30:82:63:8e:b5:87:9c:86:f2:c7:
f8:71:ac:8f:41:ac:01:5b:00:7e:f9:03:6e:93:73:c8:ec:b4:
ce:82:7c:11:e1:a6:34:d7:8e:be:a6:b6:9f:1a:d1:f2:a3:d4:
24:1a:56:4f:2a:db:30:1e:1e:24:cf:5d:0d:82:0a:a6:17:a9:
5a:20:96:22:5f:50:98:90:c7:19:96:4c:c8:39:3d:09:e9:82:
20:9e:80:50:24:62:2c:e3:53:93:52:5f:8d:56:18:04:98:9e:
73:b4:b7:fd:50:f8:95:23:df:c5:06:e1:5a:ce:e0:da:a0:11:
7a:6f:90:4b:f5:a8:b6:73:ea:26:ef:03:3f:8a:3e:4f:19:2c:
b1:03:62:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:36:00 2025 by rpki-client