Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RS_eHXQUq41tQvgc6GbNLviSAns.roa
File: RS_eHXQUq41tQvgc6GbNLviSAns.roa (raw, json)
Hash identifier: TQU9cNt++mpDY6Fc1sIB45y0XyCZcVPTbN6xJWetVtM=
Subject key identifier: 45:2F:DE:1D:74:14:AB:8D:6D:42:F8:1C:E8:66:CD:2E:F8:92:02:7B
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019A1057D6258D3BAFE1802724D72F77EC9B
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RS_eHXQUq41tQvgc6GbNLviSAns.roa
Signing time: Thu 23 Oct 2025 09:13:03 +0000
ROA not before: Thu 23 Oct 2025 09:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203346
IP address blocks: 37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
77.81.89.0/24 maxlen: 24
86.104.222.0/23 maxlen: 23
86.104.224.0/23 maxlen: 23
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.106.0/23 maxlen: 23
86.106.110.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
89.32.43.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
89.33.206.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.45.82.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.58.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
93.119.124.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
188.208.52.0/22 maxlen: 22
188.208.222.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
188.213.206.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
188.213.248.0/22 maxlen: 22
188.213.252.0/22 maxlen: 22
193.30.254.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.254.48.0/22 maxlen: 22
193.254.54.0/23 maxlen: 23
193.254.56.0/23 maxlen: 23
193.254.60.0/22 maxlen: 22
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:57:d6:25:8d:3b:af:e1:80:27:24:d7:2f:77:ec:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Oct 23 09:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=452fde1d7414ab8d6d42f81ce866cd2ef892027b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:bd:68:80:90:7e:2a:57:1a:93:65:6b:03:
3e:62:89:bc:49:c5:32:be:19:c0:17:b1:66:60:1d:
e2:51:24:d9:b3:2a:e9:43:32:21:f7:b1:ab:5b:a5:
f8:88:89:d0:b9:b9:ee:a3:07:40:f3:33:1b:e5:df:
75:5c:61:56:8b:fa:7e:f1:c8:39:2a:06:0e:c4:5b:
17:89:16:fd:00:6e:9a:bd:de:e2:ca:5c:e9:b3:ae:
83:41:3a:18:03:93:3d:23:d0:98:65:12:5e:16:7d:
5f:00:e5:16:38:52:38:6d:b5:ae:d4:d1:3b:d4:91:
fd:9f:82:2b:a1:c5:d9:8b:57:3e:5d:a0:93:4a:86:
56:8e:e2:23:46:36:7c:b4:dd:84:e4:9e:76:15:c7:
ff:75:71:cb:4f:e6:03:69:2a:5b:e4:43:9e:03:00:
2a:1b:22:13:26:2c:d4:07:85:d0:9f:81:32:0b:84:
27:8d:fe:57:70:37:ab:58:53:04:04:cd:fc:3a:1a:
ad:ac:7e:58:d0:aa:1d:3d:dc:1a:82:28:f3:28:68:
a9:b1:a5:be:f1:c6:3a:bd:8d:42:d8:1b:53:2e:aa:
f2:c7:20:78:5a:be:c1:33:c1:b4:34:c5:d8:d8:bb:
6e:8c:16:00:01:fa:dc:2d:20:7b:03:f4:20:60:6c:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:DE:1D:74:14:AB:8D:6D:42:F8:1C:E8:66:CD:2E:F8:92:02:7B
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/RS_eHXQUq41tQvgc6GbNLviSAns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.185.0/24
86.105.229.0-86.105.230.255
86.105.242.0/24
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.106.0/23
86.106.110.0/23
86.106.140.0/23
86.106.174.0/23
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.134.0/24
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.89.0-89.35.90.255
89.36.39.0/24
89.36.136.0/24
89.36.138.0/24
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.38.240.0/24
89.39.69.0/24
89.39.215.0/24
89.40.141.0/24
89.40.207.0/24
89.40.209.0/24
89.41.50.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.53.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
188.208.48.0/21
188.208.222.0/24
188.209.120.0/21
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
193.30.254.0/24
193.32.66.0/23
193.254.48.0/22
193.254.54.0-193.254.57.255
193.254.60.0/22
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d3:3c:3b:05:05:ce:a4:ad:07:e1:ff:78:f1:46:2d:ef:80:
7f:ed:b2:23:68:71:3e:76:e6:11:20:b4:93:b7:b5:1c:a0:45:
86:fd:be:72:f2:be:69:b0:ac:4a:70:31:91:d5:c6:88:de:f2:
62:42:13:ac:cf:ae:dc:61:c4:89:95:1d:3e:55:bb:de:cc:a3:
10:28:38:a4:ec:d1:95:c5:99:ce:20:e2:ed:11:74:74:ca:ef:
47:c5:c9:ff:14:cb:71:c9:6c:56:55:6c:6a:06:de:11:cf:ff:
03:8b:df:96:31:a2:39:cc:68:46:7c:d1:bc:89:0c:a1:81:66:
bb:ec:05:f3:b6:b9:bd:7b:57:ba:9f:19:3a:a1:62:70:bf:31:
fd:6a:b6:8c:db:51:ff:bb:cb:a3:56:9d:bc:5c:aa:52:9a:08:
20:21:13:5a:51:ad:b0:b4:5e:29:17:ad:51:e5:6f:0a:e0:20:
6c:43:98:13:09:2f:75:e9:5c:47:a4:98:04:2f:f5:ff:2c:3b:
7b:ba:63:1d:55:a7:f6:a4:9b:28:61:d8:4c:eb:35:bc:df:f0:
15:06:a5:dc:81:45:d5:87:6f:60:1b:71:2b:b6:2e:f0:76:6b:
98:0a:13:9c:1a:b6:8f:50:b6:08:86:b0:77:c6:eb:b8:48:e7:
68:28:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:58:05 2025 by rpki-client