Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QxrIlqTTe3p5RLhkJKCThOLT1ao.roa
File: QxrIlqTTe3p5RLhkJKCThOLT1ao.roa (raw, json)
Hash identifier: 9k+SUQKQgp3YRtZPH2nhVUJOmTLiOfevNKQIGkQiHWM=
Subject key identifier: 43:1A:C8:96:A4:D3:7B:7A:79:44:B8:64:24:A0:93:84:E2:D3:D5:AA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019957DABA0D0AB46A372D7C10EAB974F3E7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QxrIlqTTe3p5RLhkJKCThOLT1ao.roa
Signing time: Wed 17 Sep 2025 13:26:16 +0000
ROA not before: Wed 17 Sep 2025 13:26:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.88.0/21 maxlen: 24
81.168.65.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.72.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.53.0/24 maxlen: 24
82.153.55.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.0.0/22 maxlen: 24
89.213.0.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.45.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.50.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/22 maxlen: 22
89.213.59.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.128.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.144.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.215.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
89.213.225.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.239.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.134.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
213.218.236.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.144.145.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:da:ba:0d:0a:b4:6a:37:2d:7c:10:ea:b9:74:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 17 13:26:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431ac896a4d37b7a7944b86424a09384e2d3d5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:33:f1:f4:8c:30:ae:be:a6:4e:ae:99:1a:
d3:d0:0b:57:1d:7e:c4:12:0d:7c:28:4b:34:7a:2a:
fc:bd:62:00:eb:8d:5e:2a:65:34:0d:a3:fc:37:9d:
ba:4f:81:77:5a:14:8e:92:ed:f6:91:88:b5:8f:14:
6b:ab:1c:7e:d7:ff:e4:ac:3f:51:01:25:3c:da:6d:
2a:96:67:fe:83:8f:fe:78:ff:4c:d4:57:10:e2:28:
6e:8a:ba:a9:1d:e7:c7:93:12:2d:d9:04:ad:01:51:
e7:39:5a:5e:f1:43:01:1f:52:c5:f3:c3:19:57:99:
25:61:7d:0e:3c:c1:22:ea:9c:30:36:7d:b8:f0:b2:
53:e3:72:9b:12:72:52:1c:47:d7:79:d3:08:04:1e:
2a:67:bd:bc:db:da:70:d8:13:f6:64:7b:d5:4a:88:
56:74:b9:72:3a:50:68:e4:82:91:14:d9:45:fb:2d:
e4:f9:06:ab:79:39:f7:3e:60:df:c7:8f:e3:aa:c7:
b1:1e:c9:42:13:95:9e:55:60:ef:b2:09:3e:6b:93:
67:8a:b0:38:84:54:68:bf:fc:ae:3c:ee:83:de:04:
b2:c6:b7:1c:49:46:e7:52:1e:dc:db:2f:a3:d0:88:
27:36:a9:f1:70:14:2a:d4:67:18:f4:ec:37:31:9f:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:C8:96:A4:D3:7B:7A:79:44:B8:64:24:A0:93:84:E2:D3:D5:AA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QxrIlqTTe3p5RLhkJKCThOLT1ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
81.168.65.0/24
82.152.8.0/24
82.152.72.0/24
82.152.176.0/23
82.153.53.0/24
82.153.55.0/24
82.153.91.0/24
82.153.136.0/22
82.153.217.0/24
82.163.24.0/21
89.213.0.0/22
89.213.6.0/24
89.213.44.0/23
89.213.50.0/23
89.213.55.0-89.213.59.255
89.213.105.0/24
89.213.128.0/24
89.213.133.0/24
89.213.140.0/24
89.213.144.0/24
89.213.148.0/24
89.213.155.0-89.213.159.255
89.213.162.0/24
89.213.172.0/22
89.213.181.0/24
89.213.196.0-89.213.207.255
89.213.215.0/24
89.213.219.0/24
89.213.225.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.227.0-213.218.228.255
213.218.232.0/24
213.218.235.0-213.218.237.255
213.218.239.0/24
213.218.244.0/22
217.144.145.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
07:4a:db:d7:65:e6:7f:10:89:12:30:59:91:c3:1a:c5:1f:9b:
4b:14:06:78:9a:c7:91:28:4a:ca:cf:af:b1:71:ab:f9:6e:26:
ac:af:a1:8f:2c:9c:8e:2f:c2:9e:7c:b6:7c:70:01:06:c6:a2:
f3:e8:17:8e:e8:dd:56:0b:aa:48:26:44:c4:10:aa:7f:55:e0:
0f:e8:2c:71:f2:3d:5c:64:a2:5c:45:a9:b4:be:a7:3e:6e:1f:
c9:c3:4c:eb:f8:95:6a:60:d1:75:3c:48:89:bc:ec:4c:96:32:
e4:37:d8:13:2c:4b:df:9d:e6:6f:77:55:1e:9b:13:c0:ef:93:
ac:d2:bb:db:ad:f8:af:6a:2f:c4:97:c1:99:22:85:3f:36:ff:
f3:d4:f4:12:18:88:12:2c:cf:3c:b1:c2:97:a8:1f:b4:4b:ed:
7d:41:53:97:7b:68:78:2b:75:c0:45:03:b5:cb:2a:06:a4:2f:
f9:ad:42:4e:90:bf:ec:66:ed:72:85:c1:21:23:7c:04:56:fb:
da:cf:4a:98:ad:30:0f:ba:ae:d1:07:f7:5c:b2:68:2d:72:51:
ff:2e:b5:ba:4b:42:c4:35:6c:31:7d:7f:f6:2d:1d:9e:ec:da:
59:3a:20:a6:e8:ef:af:51:57:f3:31:d0:8d:76:56:8f:5b:1a:
06:7b:22:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:36:03 2025 by rpki-client