Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q4HxMmtb5VjfNF_0352KePsDjdw.roa
File: q4HxMmtb5VjfNF_0352KePsDjdw.roa (raw, json)
Hash identifier: EidhCF3RpX3W5bR/b7G4Axt87mPyueixOtmpuF+GhK8=
Subject key identifier: AB:81:F1:32:6B:5B:E5:58:DF:34:5F:F4:DF:9D:8A:78:FB:03:8D:DC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199A3D3116406EE4FF5A0DC095F52862565
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q4HxMmtb5VjfNF_0352KePsDjdw.roa
Signing time: Thu 02 Oct 2025 07:29:02 +0000
ROA not before: Thu 02 Oct 2025 07:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 79.121.188.0/23 maxlen: 24
79.121.194.0/23 maxlen: 24
79.121.208.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
92.244.162.0/23 maxlen: 24
92.244.164.0/23 maxlen: 24
92.244.166.0/23 maxlen: 24
92.244.168.0/23 maxlen: 24
92.244.170.0/23 maxlen: 24
92.244.172.0/23 maxlen: 24
93.152.0.0/23 maxlen: 24
93.152.10.0/23 maxlen: 24
93.152.12.0/22 maxlen: 24
93.152.18.0/24 maxlen: 24
93.152.21.0/24 maxlen: 24
93.152.48.0/22 maxlen: 24
93.152.64.0/22 maxlen: 24
93.152.92.0/24 maxlen: 24
93.152.116.0/22 maxlen: 24
94.185.130.0/23 maxlen: 24
94.185.132.0/23 maxlen: 24
94.185.136.0/23 maxlen: 24
94.185.142.0/23 maxlen: 24
94.185.148.0/23 maxlen: 24
94.185.152.0/22 maxlen: 24
94.185.152.0/23 maxlen: 24
94.185.154.0/23 maxlen: 24
94.185.168.0/22 maxlen: 24
94.185.168.0/23 maxlen: 24
94.185.170.0/23 maxlen: 24
94.185.172.0/23 maxlen: 24
94.185.180.0/23 maxlen: 24
94.185.186.0/23 maxlen: 24
94.185.192.0/22 maxlen: 24
94.185.192.0/23 maxlen: 24
94.185.194.0/23 maxlen: 24
94.185.196.0/23 maxlen: 24
94.185.200.0/22 maxlen: 24
94.185.200.0/23 maxlen: 24
94.185.202.0/23 maxlen: 24
94.185.204.0/23 maxlen: 24
94.185.214.0/23 maxlen: 24
94.185.216.0/23 maxlen: 24
94.185.220.0/22 maxlen: 24
94.185.220.0/23 maxlen: 24
94.185.222.0/23 maxlen: 24
94.185.230.0/23 maxlen: 24
94.185.232.0/23 maxlen: 24
95.177.3.0/24 maxlen: 24
95.177.5.0/24 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.13.0/24 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
109.174.128.0/22 maxlen: 24
109.174.128.0/23 maxlen: 24
109.174.130.0/23 maxlen: 24
109.174.134.0/23 maxlen: 24
109.174.136.0/23 maxlen: 24
109.174.140.0/22 maxlen: 24
109.174.140.0/23 maxlen: 24
109.174.142.0/23 maxlen: 24
109.174.152.0/23 maxlen: 24
109.174.160.0/22 maxlen: 24
109.174.160.0/23 maxlen: 24
109.174.162.0/23 maxlen: 24
109.174.168.0/23 maxlen: 24
109.174.172.0/23 maxlen: 24
109.174.250.0/23 maxlen: 24
109.174.252.0/23 maxlen: 24
109.174.254.0/23 maxlen: 24
109.204.0.0/22 maxlen: 24
109.204.16.0/22 maxlen: 24
109.204.21.0/24 maxlen: 24
109.204.24.0/22 maxlen: 24
109.204.29.0/24 maxlen: 24
109.204.41.0/24 maxlen: 24
109.204.45.0/24 maxlen: 24
109.204.51.0/24 maxlen: 24
109.204.54.0/24 maxlen: 24
109.204.58.0/24 maxlen: 24
109.204.96.0/22 maxlen: 24
109.204.112.0/24 maxlen: 24
109.204.117.0/24 maxlen: 24
109.204.118.0/24 maxlen: 24
109.204.121.0/24 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 24
195.40.28.0/23 maxlen: 24
195.40.96.0/23 maxlen: 24
195.40.108.0/23 maxlen: 24
195.40.162.0/23 maxlen: 24
195.172.96.0/23 maxlen: 24
195.172.100.0/23 maxlen: 24
195.172.104.0/23 maxlen: 24
195.172.192.0/23 maxlen: 24
195.172.198.0/23 maxlen: 24
195.172.202.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:d3:11:64:06:ee:4f:f5:a0:dc:09:5f:52:86:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 2 07:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab81f1326b5be558df345ff4df9d8a78fb038ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:35:36:26:35:d2:32:ae:ce:d2:d5:d8:34:
9c:1d:51:1e:3c:61:8c:d9:36:8a:32:0b:ea:b3:57:
86:61:44:20:29:30:a0:3b:eb:2b:91:9e:21:b7:ba:
e8:4d:c0:5d:19:b6:9d:cd:53:6f:78:4a:0d:fd:3c:
01:da:ba:6a:36:30:3a:8f:3d:24:05:b8:3a:c5:e3:
b6:7e:6e:21:7d:bd:7b:47:0f:7a:75:d4:bf:5e:ed:
cb:1e:67:83:43:0c:d6:2b:52:b8:3b:69:34:2b:fe:
7e:d7:ba:6a:40:ee:d3:ea:93:92:b5:75:cf:69:b3:
8a:a9:be:95:fb:5f:34:34:aa:68:42:cc:4f:db:ca:
24:aa:c3:7f:75:c8:8b:8e:41:68:a4:51:42:ab:d3:
6a:fd:3b:e5:a9:b5:35:81:e6:48:63:6a:cc:41:3b:
f3:07:ef:7d:4d:0d:25:64:c3:0b:4e:a8:54:02:94:
84:93:b3:2f:a6:e3:74:34:6b:99:ea:80:6b:28:2d:
df:80:c2:73:ff:9b:b6:02:b4:2f:fa:db:4e:60:c8:
0b:ec:1d:16:77:45:1f:01:b4:8a:aa:f1:e2:59:56:
b5:6d:1d:99:19:38:05:3d:f7:3d:8a:92:27:2b:73:
d5:be:2a:2d:52:80:41:51:bc:fa:a0:53:77:ac:ab:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:F1:32:6B:5B:E5:58:DF:34:5F:F4:DF:9D:8A:78:FB:03:8D:DC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q4HxMmtb5VjfNF_0352KePsDjdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.188.0/23
79.121.194.0/23
79.121.208.0/23
79.121.222.0/23
79.121.226.0/23
79.121.238.0/23
92.244.162.0-92.244.173.255
93.152.0.0/23
93.152.10.0-93.152.15.255
93.152.18.0/24
93.152.21.0/24
93.152.48.0/22
93.152.64.0/22
93.152.92.0/24
93.152.116.0/22
94.185.130.0-94.185.133.255
94.185.136.0/23
94.185.142.0/23
94.185.148.0/23
94.185.152.0/22
94.185.168.0-94.185.173.255
94.185.180.0/23
94.185.186.0/23
94.185.192.0-94.185.197.255
94.185.200.0-94.185.205.255
94.185.214.0-94.185.217.255
94.185.220.0/22
94.185.230.0-94.185.233.255
95.177.3.0/24
95.177.5.0/24
95.177.8.0/23
95.177.13.0/24
95.177.54.0/23
95.177.72.0/23
109.174.128.0/22
109.174.134.0-109.174.137.255
109.174.140.0/22
109.174.152.0/23
109.174.160.0/22
109.174.168.0/23
109.174.172.0/23
109.174.250.0-109.174.255.255
109.204.0.0/22
109.204.16.0/22
109.204.21.0/24
109.204.24.0/22
109.204.29.0/24
109.204.41.0/24
109.204.45.0/24
109.204.51.0/24
109.204.54.0/24
109.204.58.0/24
109.204.96.0/22
109.204.112.0/24
109.204.117.0-109.204.118.255
109.204.121.0/24
109.204.124.0/23
195.40.18.0/23
195.40.28.0/23
195.40.96.0/23
195.40.108.0/23
195.40.162.0/23
195.172.96.0/23
195.172.100.0/23
195.172.104.0/23
195.172.192.0/23
195.172.198.0/23
195.172.202.0/23
212.134.11.0/24
212.135.0.0/24
212.135.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:c2:df:54:e5:ba:fc:f4:07:79:a5:98:75:4e:e4:1a:ef:a0:
dd:5c:37:25:9e:ce:13:8d:1b:ee:93:0e:b9:b0:58:b4:56:df:
34:bb:3e:4c:88:04:ac:bf:1f:ce:09:a6:25:9e:cf:e8:8b:03:
b3:75:8a:f7:17:cc:e7:00:57:5c:30:9c:b4:0a:c8:3d:ad:dd:
10:68:03:11:7b:29:dd:e3:74:5b:cf:0c:ff:98:68:9a:98:4e:
ec:bd:da:77:63:4c:0b:61:1c:79:8d:c4:81:4a:68:3e:aa:9c:
2e:54:0e:f5:90:ae:76:53:25:5a:e6:10:4b:15:bf:86:1b:ca:
6f:f0:18:5a:1a:96:70:ab:41:09:4f:00:18:29:fe:e5:21:69:
b4:83:e9:54:cc:c6:5a:05:47:00:44:f8:5f:8e:7e:f1:39:46:
ac:a6:82:2f:11:46:e8:97:93:09:9d:2e:d5:da:62:47:92:ea:
7e:82:3e:68:6f:40:9c:92:24:92:6f:11:36:09:18:89:e8:1d:
12:af:e9:05:24:70:a1:0f:7f:de:14:c1:97:17:bf:28:64:7b:
ba:93:80:f7:08:b2:95:d1:41:c1:e6:95:87:15:49:39:05:a6:
f6:10:24:f8:3e:dc:3e:5d:d4:1e:08:d1:80:54:d1:7a:a9:46:
64:a9:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:05:53 2025 by rpki-client