Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yhb595FBKxqtBy6EQBwROKRVDWc.roa
File: yhb595FBKxqtBy6EQBwROKRVDWc.roa (raw, json)
Hash identifier: w5gUEfuS/irgVLUNh3S3H7yz6dq5Z8RGpcjQ8AkPw/U=
Subject key identifier: CA:16:F9:F7:91:41:2B:1A:AD:07:2E:84:40:1C:11:38:A4:55:0D:67
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A35BE6CC025FF38CB8A131CD73A959120
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yhb595FBKxqtBy6EQBwROKRVDWc.roa
Signing time: Thu 30 Oct 2025 15:31:03 +0000
ROA not before: Thu 30 Oct 2025 15:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.88.0/21 maxlen: 24
81.168.109.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.122.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.152.250.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.163.18.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.0.0/22 maxlen: 24
89.213.0.0/24 maxlen: 24
89.213.1.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.45.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.50.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/22 maxlen: 22
89.213.56.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
89.213.128.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.144.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.192.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.208.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
89.213.225.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.231.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.239.0/24 maxlen: 24
89.213.248.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.125.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.49.127.0/24 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.83.0/24 maxlen: 24
194.105.88.0/24 maxlen: 24
194.105.89.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
194.105.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.134.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
213.218.236.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.255.0/24 maxlen: 24
217.144.145.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:be:6c:c0:25:ff:38:cb:8a:13:1c:d7:3a:95:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 30 15:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca16f9f791412b1aad072e84401c1138a4550d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:1e:80:e1:d6:08:e9:0d:d3:4e:25:60:b3:
41:03:22:9c:c0:7e:76:f1:1e:0e:ed:8b:db:46:7a:
04:97:22:f4:05:f5:bf:1a:47:43:c6:b2:ea:48:4c:
cd:03:06:66:b2:8c:ad:90:fe:32:bb:1b:2b:bb:eb:
5e:56:ff:7b:e8:9c:20:66:1e:af:e0:03:13:4f:c6:
1b:e6:56:7d:4a:2d:d0:21:8b:5c:11:b8:ea:1c:db:
49:d2:0e:c5:5d:cb:2d:2d:7a:53:27:b8:8c:42:8c:
3c:97:b4:8d:7b:79:14:f2:1f:2a:fe:f4:0c:9d:d0:
df:39:ba:56:67:3e:84:f1:9b:11:a6:40:99:75:be:
94:87:ab:d5:00:b0:f4:2a:e4:43:ce:f3:b8:30:01:
cd:f0:29:f1:28:62:57:ee:a0:f4:93:ed:85:de:c6:
62:9c:52:f8:ca:5b:15:9d:10:82:1e:89:95:f6:25:
bf:ee:18:44:c5:02:1c:fa:4f:f9:b3:b4:64:42:96:
88:db:5f:67:64:21:05:ad:e4:a6:b9:18:41:9d:93:
89:67:be:70:fd:d5:1b:07:fa:bd:cc:29:da:66:42:
71:57:e7:5f:a0:2e:1d:b7:f2:e9:4f:86:a6:fe:67:
c4:42:21:33:5a:07:e3:94:79:68:60:6d:23:ce:53:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:F9:F7:91:41:2B:1A:AD:07:2E:84:40:1C:11:38:A4:55:0D:67
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yhb595FBKxqtBy6EQBwROKRVDWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
81.168.109.0/24
82.152.8.0/24
82.152.122.0/24
82.152.176.0/23
82.152.250.0/23
82.153.91.0/24
82.153.136.0/22
82.153.217.0/24
82.163.18.0/24
82.163.24.0/21
89.213.0.0/22
89.213.5.0-89.213.7.255
89.213.42.0-89.213.45.255
89.213.49.0-89.213.51.255
89.213.55.0-89.213.59.255
89.213.104.0/23
89.213.123.0/24
89.213.128.0/24
89.213.130.0/24
89.213.133.0/24
89.213.140.0/24
89.213.143.0-89.213.145.255
89.213.147.0-89.213.148.255
89.213.150.0/23
89.213.154.0-89.213.159.255
89.213.162.0/24
89.213.172.0/22
89.213.179.0/24
89.213.181.0/24
89.213.183.0/24
89.213.191.0-89.213.192.255
89.213.196.0-89.213.208.255
89.213.215.0/24
89.213.219.0/24
89.213.225.0/24
89.213.228.0-89.213.239.255
89.213.248.0/24
109.176.16.0/21
109.176.201.0/24
109.176.204.0/22
109.176.242.0/23
185.49.125.0-185.49.127.255
185.101.47.0/24
194.105.80.0/20
212.38.81.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.227.0-213.218.228.255
213.218.232.0/24
213.218.235.0-213.218.237.255
213.218.239.0/24
213.218.244.0/22
213.218.255.0/24
217.144.145.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:10:f2:77:ac:f4:e2:37:3a:b6:93:a8:a8:d0:43:1e:4b:80:
a5:ff:2e:3f:0e:b6:c2:d0:97:c8:8a:62:8c:eb:2c:46:79:8d:
99:7f:6c:69:bd:37:f3:d1:53:eb:ce:f2:c2:b9:be:90:ba:3e:
9f:a5:01:07:ea:09:8e:6b:15:9e:5a:63:cc:4d:53:db:6d:d8:
7f:6e:3d:d8:66:20:39:7c:54:3f:4b:1c:b1:ec:78:e8:92:8d:
25:ae:1f:a7:c5:9e:9f:39:94:56:05:bc:fe:08:a3:4c:aa:e9:
3b:13:d2:31:be:4d:89:06:4c:73:91:b9:68:82:3f:6b:e9:38:
65:6a:bb:5f:d9:e3:aa:c8:c1:bf:16:21:6c:e1:c9:8f:8a:4e:
af:a5:02:61:5c:cb:a5:e1:28:f3:c4:d5:f2:1a:f5:58:87:1d:
ff:5f:2c:13:80:31:91:e8:00:d2:20:64:87:0d:0d:7a:20:e7:
f2:9c:56:fc:fd:29:ee:3b:f4:a0:96:a9:98:3e:52:c0:69:6a:
5d:0b:90:55:c4:a6:ed:9f:fb:63:8f:4e:3d:20:41:f6:c3:4b:
dc:b1:d0:8d:e7:f3:78:96:d4:26:2d:e8:f0:c7:54:b6:41:5a:
39:6d:6c:db:59:36:f0:68:b3:bc:f4:28:5f:95:a0:26:b2:60:
56:3f:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:31:39 2025 by rpki-client