Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qIfgBhdeHp0xjDg5G4TQBJs81R4.roa
File: qIfgBhdeHp0xjDg5G4TQBJs81R4.roa (raw, json)
Hash identifier: 4sByLN0E2wtIeDPsDLnBWH7oT8Wn8fdYuG/A2tXW2wo=
Subject key identifier: A8:87:E0:06:17:5E:1E:9D:31:8C:38:39:1B:84:D0:04:9B:3C:D5:1E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199F1B9080686D6C5D009C03D320164AF19
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qIfgBhdeHp0xjDg5G4TQBJs81R4.roa
Signing time: Fri 17 Oct 2025 10:30:59 +0000
ROA not before: Fri 17 Oct 2025 10:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.252.26.0/24 maxlen: 24
77.93.136.0/24 maxlen: 24
79.99.76.0/24 maxlen: 24
80.240.88.0/21 maxlen: 24
82.152.10.0/24 maxlen: 24
82.152.28.0/24 maxlen: 24
82.152.70.0/24 maxlen: 24
82.152.71.0/24 maxlen: 24
82.152.92.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
82.152.107.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.153.55.0/24 maxlen: 24
82.153.144.0/24 maxlen: 24
82.153.220.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
109.176.201.0/24 maxlen: 24
213.130.135.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.41.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
217.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:b9:08:06:86:d6:c5:d0:09:c0:3d:32:01:64:af:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 10:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a887e006175e1e9d318c38391b84d0049b3cd51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:9f:cf:83:8a:51:e3:74:1b:bf:e8:e7:c6:
68:78:bc:ea:11:d2:dc:55:b6:54:89:41:82:e3:3f:
8b:7e:c7:78:95:69:18:89:d0:0c:b1:61:80:eb:54:
6c:a4:c2:29:63:8d:a9:d9:d7:d7:46:6c:e5:8d:72:
89:3f:47:c0:47:de:6a:ac:b4:f1:2a:9f:20:7f:5c:
ae:62:d9:3e:75:31:29:51:56:a1:f2:9f:8c:5a:10:
d7:89:73:c1:05:84:11:d7:6f:00:ab:0c:8f:6e:a2:
2c:be:7f:e8:26:c3:b0:6f:28:96:4b:2f:fb:20:c2:
a1:50:25:8a:bf:42:19:90:84:db:1f:43:3c:2f:af:
01:b0:a1:03:64:c1:fc:56:bb:21:fe:5c:39:b8:f6:
4f:41:13:d9:97:b9:2d:74:67:32:b8:87:7e:a5:c4:
98:45:a2:35:fb:06:3f:6b:18:85:46:21:73:06:2c:
ab:55:91:0f:b9:f9:8d:90:0c:89:41:82:b2:fd:99:
36:d8:ca:2e:2a:c9:8f:ca:0b:81:e3:74:01:91:e4:
29:16:98:fc:b6:80:cc:5e:b9:9b:72:a4:9a:d4:e8:
95:fe:6b:c3:1e:ec:8e:31:e8:e5:f0:9c:bf:10:2c:
4a:e8:b4:ec:8a:98:ad:c3:77:5c:24:38:d9:32:d0:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:E0:06:17:5E:1E:9D:31:8C:38:39:1B:84:D0:04:9B:3C:D5:1E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qIfgBhdeHp0xjDg5G4TQBJs81R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.26.0/24
77.93.136.0/24
79.99.76.0/24
80.240.88.0/21
82.152.10.0/24
82.152.28.0/24
82.152.70.0/23
82.152.92.0/24
82.152.102.0/24
82.152.107.0/24
82.152.118.0/24
82.153.55.0/24
82.153.144.0/24
82.153.220.0/24
82.153.255.0/24
82.163.24.0/21
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.167.0/24
89.213.191.0/24
89.213.212.0/24
89.213.224.0/24
109.176.201.0/24
213.130.135.0/24
213.210.11.0/24
213.210.41.0/24
213.218.255.0/24
217.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bb:16:ef:21:db:55:0a:9c:72:17:da:9a:0f:43:75:50:cc:
57:00:4c:4d:af:63:cb:b0:9f:9c:8f:b9:c8:b1:5e:aa:c9:87:
7e:0a:86:a2:98:ed:93:c1:7b:38:a8:ca:7b:d5:ef:ae:15:96:
07:21:2f:77:9f:ca:b2:2e:bf:cf:2b:3f:5c:03:dc:0f:b0:4d:
b9:de:08:c6:3e:6c:31:4a:60:14:6e:73:f4:e5:d2:e5:9a:69:
18:b3:72:54:c4:04:8d:67:1a:eb:9d:02:69:d6:30:e5:04:05:
b5:4c:c2:78:1b:66:c4:f4:b9:c9:d1:2e:e1:2f:d1:18:27:be:
07:b6:c5:1c:d4:64:d2:26:d4:2f:68:bc:48:1a:09:6b:5b:b6:
81:c9:4b:e5:27:65:64:49:99:c8:2c:32:5d:13:3b:d7:11:4f:
26:92:68:70:09:9d:6f:af:b0:6e:6b:23:12:4e:5d:ed:a5:ae:
74:35:38:c9:72:d8:3b:98:40:9a:6a:d9:a3:32:b1:3b:73:39:
be:4b:6a:18:a0:a5:d0:d3:ee:3a:6d:3f:b8:ea:6e:4d:e7:47:
49:37:6c:cb:0f:a4:95:b4:1f:7b:d8:a4:68:92:4d:9a:b4:40:
df:8e:5f:c1:59:f2:6c:36:c5:36:ae:49:3d:10:ba:24:f3:7e:
0c:74:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:29 2025 by rpki-client