Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/doixSHUxXbw5SQnGUuRYCtRmxoU.roa
File: doixSHUxXbw5SQnGUuRYCtRmxoU.roa (raw, json)
Hash identifier: 0lEvCKmgRTuygoVFxu+Gi9HPYBsBseV6tb+dDfLUnnA=
Subject key identifier: 76:88:B1:48:75:31:5D:BC:39:49:09:C6:52:E4:58:0A:D4:66:C6:85
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0198EAA517D4D22602F958908AFD78648329
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/doixSHUxXbw5SQnGUuRYCtRmxoU.roa
Signing time: Wed 27 Aug 2025 08:29:04 +0000
ROA not before: Wed 27 Aug 2025 08:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.59.232.0/22 maxlen: 24
185.68.245.0/24 maxlen: 24
185.79.51.0/24 maxlen: 24
185.79.79.0/24 maxlen: 24
185.81.172.0/24 maxlen: 24
185.81.173.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 24
185.81.186.0/23 maxlen: 24
185.89.40.0/24 maxlen: 24
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 24
185.95.100.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.80.0/24 maxlen: 24
185.96.82.0/24 maxlen: 24
185.96.83.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.112.56.0/23 maxlen: 24
185.175.224.0/23 maxlen: 24
185.175.226.0/23 maxlen: 24
185.185.147.0/24 maxlen: 24
193.221.215.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:a5:17:d4:d2:26:02:f9:58:90:8a:fd:78:64:83:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 27 08:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7688b14875315dbc394909c652e4580ad466c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:57:d0:83:45:47:84:b6:4d:6b:3a:28:d4:
e1:59:f7:e1:be:10:c5:6c:fe:69:27:6d:ef:69:3d:
ab:57:c3:df:76:c4:47:2a:7a:90:a6:06:b0:2c:96:
ea:16:9f:c9:89:b8:1f:e3:b7:0c:79:59:95:57:9c:
09:e1:1c:1b:c2:f2:27:e4:c1:0a:6b:f2:aa:62:43:
29:43:82:62:87:47:bf:bf:09:2c:4f:46:c8:83:5a:
3e:04:58:e5:62:51:ad:d4:97:61:78:63:83:46:17:
68:63:c3:9b:e0:71:d4:6d:79:2e:0c:67:33:b6:4b:
bc:90:50:e7:84:8b:d8:aa:01:ef:80:19:89:82:bc:
ff:65:a1:74:d1:d3:07:76:06:e2:2f:05:20:58:46:
bd:83:fd:87:f0:2b:73:66:22:dd:3e:bb:aa:cb:b3:
d0:b9:eb:6e:03:ce:a7:1e:fd:db:bb:ac:b1:d5:9d:
f2:33:48:8d:ec:c8:02:05:df:22:a9:d3:f4:97:15:
11:a4:d5:94:db:62:1d:f6:90:ce:5b:56:2d:c9:78:
43:a2:af:bf:cc:49:f9:73:89:5b:18:25:02:53:80:
2e:47:d7:57:5a:44:6e:b5:3b:6e:a1:f6:30:14:49:
19:43:fd:b3:a0:f3:4c:41:63:40:09:d5:ac:18:50:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:88:B1:48:75:31:5D:BC:39:49:09:C6:52:E4:58:0A:D4:66:C6:85
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/doixSHUxXbw5SQnGUuRYCtRmxoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.59.232.0/22
185.68.245.0/24
185.79.51.0/24
185.79.79.0/24
185.81.172.0/22
185.81.184.0/22
185.89.40.0/24
185.89.104.0/21
185.95.100.0/22
185.96.80.0/24
185.96.82.0/23
185.96.132.0/24
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.112.56.0/23
185.175.224.0/22
185.185.147.0/24
193.221.215.0/24
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
66:15:b2:6a:b5:16:f3:e8:82:5b:45:07:8e:b6:2e:cc:3b:c8:
15:5b:01:f2:59:f4:8d:22:2b:e4:fe:2e:80:44:99:4b:5b:72:
21:9c:b9:c9:2e:9f:69:ff:9f:3d:4d:5b:ba:99:1a:93:5f:04:
92:15:2f:ef:d3:cf:81:ec:d8:12:80:7e:37:6c:be:af:41:da:
b1:bc:b5:72:5c:b8:73:91:70:4a:e5:45:5c:92:09:51:77:a9:
36:1a:fb:49:78:db:70:82:08:64:e9:ca:65:db:c3:30:08:b0:
44:14:c4:b9:f4:7e:aa:58:1d:9b:8b:87:90:c6:28:50:af:9b:
12:d8:34:71:83:1b:7f:6f:02:5c:9b:8b:1f:75:81:c1:90:b8:
a7:ca:29:5e:25:71:e3:8e:a5:47:21:21:28:d5:27:7c:5e:7d:
b0:c6:0c:d3:2e:33:29:7a:b9:2a:f3:0d:9f:58:de:57:b9:9b:
77:8a:cd:46:28:c3:9b:78:b5:4d:53:53:22:db:36:14:e0:6a:
f7:3f:69:0f:ca:86:a5:70:c4:57:86:cb:0f:8f:9d:a0:98:ac:
81:18:0e:e4:bb:b1:7a:11:52:c5:d5:85:09:dd:e7:1d:bc:6b:
4f:7d:0b:2b:16:d1:e1:c8:2f:c1:89:09:ee:11:8b:bb:7c:f0:
1a:a0:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:11:58 2025 by rpki-client