Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/F4WBg9MCoqcRguuT9HyCgQ2xI58.roa
File: F4WBg9MCoqcRguuT9HyCgQ2xI58.roa (raw, json)
Hash identifier: C982bPOPxBwa7z3CYCODJzbbCImuDivtdpfCpusb190=
Subject key identifier: 17:85:81:83:D3:02:A2:A7:11:82:EB:93:F4:7C:82:81:0D:B1:23:9F
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019A026BB01492A93B0BF2DE06F5553FB051
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/F4WBg9MCoqcRguuT9HyCgQ2xI58.roa
Signing time: Mon 20 Oct 2025 16:20:03 +0000
ROA not before: Mon 20 Oct 2025 16:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
94.154.171.0/24 maxlen: 24
103.130.176.0/24 maxlen: 24
103.130.177.0/24 maxlen: 24
103.210.13.0/24 maxlen: 24
103.210.14.0/24 maxlen: 24
103.210.15.0/24 maxlen: 24
103.216.198.0/24 maxlen: 24
104.232.36.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.161.190.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.201.42.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.253.120.0/24 maxlen: 24
185.253.121.0/24 maxlen: 24
212.60.13.0/24 maxlen: 24
2a0a:8f40:3::/48 maxlen: 48
2a0a:8f40:8::/48 maxlen: 48
2a0a:8f40:9::/48 maxlen: 48
2a0a:8f40:a::/48 maxlen: 48
2a0a:8f40:b::/48 maxlen: 48
2a0a:8f40:c::/48 maxlen: 48
2a0a:8f40:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:6b:b0:14:92:a9:3b:0b:f2:de:06:f5:55:3f:b0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 20 16:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17858183d302a2a71182eb93f47c82810db1239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:6d:7b:2f:03:b6:e2:f8:39:44:81:3c:59:
f9:ca:64:cf:b7:e4:9a:64:cc:ce:46:86:31:6a:c9:
8d:3a:d2:e4:07:ff:72:1a:9e:43:a3:5f:58:81:2c:
3d:57:70:ea:11:89:9c:43:68:fa:1a:61:42:33:25:
34:03:54:c6:6a:b2:0b:28:67:a5:74:02:f1:54:85:
2b:ef:00:47:e2:7a:35:45:ee:24:26:87:47:1b:f0:
6d:bd:03:66:41:4a:9e:38:ee:0d:ce:6b:37:e7:60:
94:ef:19:e6:d6:17:4c:64:b0:34:7f:b3:16:3e:7d:
e5:aa:7b:3d:15:54:b2:b2:65:fd:15:4c:82:0e:4b:
06:c1:37:5c:6c:71:73:03:04:58:df:3f:a1:f1:3e:
c4:f9:9f:02:7a:27:9c:62:b9:56:5f:30:3c:c5:2e:
4f:c9:11:14:fb:b4:d4:db:91:1b:1c:63:39:80:97:
90:08:7e:6b:6c:d1:bf:1b:4d:fd:44:80:6a:fd:a6:
13:23:eb:36:30:5f:4f:0a:e6:55:4d:57:e1:3a:5e:
3f:1e:8d:98:68:56:b6:3a:c1:cf:17:a4:39:39:2b:
d8:b4:b8:3c:f2:ee:df:8c:fe:ae:28:32:d7:58:42:
5b:f1:6e:23:52:7c:17:36:fc:1d:dd:81:92:a5:85:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:85:81:83:D3:02:A2:A7:11:82:EB:93:F4:7C:82:81:0D:B1:23:9F
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/F4WBg9MCoqcRguuT9HyCgQ2xI58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.196.0/23
79.98.183.0/24
92.249.29.0/24
94.154.171.0/24
103.130.176.0/23
103.210.13.0-103.210.15.255
103.216.198.0/24
104.232.36.0/24
147.78.207.0/24
162.218.92.0/24
185.52.139.0/24
185.161.190.0/24
185.187.214.0/23
185.201.42.0/24
185.208.152.0/23
185.230.121.0/24
185.253.120.0/23
212.60.13.0/24
IPv6:
2a0a:8f40:3::/48
2a0a:8f40:8::-2a0a:8f40:c:ffff:ffff:ffff:ffff:ffff
2a0a:8f40:1c::/48
Signature Algorithm: sha256WithRSAEncryption
8c:77:6a:91:c8:63:b1:76:fa:c7:e1:06:3b:83:ba:b4:c9:75:
63:c5:26:78:fb:03:0a:89:e4:8a:e6:9b:8a:cb:db:db:40:b9:
1b:f7:98:b4:46:2b:0b:0e:26:77:4e:3a:81:43:ba:99:f0:3d:
18:b2:1e:3d:cc:d4:ec:52:6c:93:9c:64:3a:10:d7:f3:e4:56:
e0:79:dd:66:98:27:15:d0:b8:7e:87:e2:cc:36:5d:82:55:e1:
9e:b8:af:15:dd:33:99:c2:d9:26:6b:fd:e8:11:79:ae:a2:be:
8c:5e:bf:cc:dd:9e:6a:3e:87:32:c2:03:92:40:00:68:9c:d8:
4f:5c:36:e4:c7:1e:55:27:12:52:d4:c6:f4:34:26:7a:af:0b:
8d:b1:b4:87:71:14:27:05:45:64:1e:70:63:0c:57:45:57:8b:
12:d8:19:38:a2:00:3e:e9:9b:5f:2c:69:ce:d5:19:c5:39:be:
2d:ab:93:cd:21:48:73:c6:08:e1:57:5f:be:af:c8:88:1c:0f:
a2:2c:39:40:59:c0:44:55:80:9e:ca:39:4a:59:5e:f0:12:5d:
54:0b:7a:c9:65:44:18:79:93:09:df:db:5c:22:22:d9:03:c3:
cc:4c:e8:a0:d8:01:ea:27:58:8c:46:41:c0:b3:c0:ea:0c:85:
3e:80:99:8e
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZoCa7AUkqk7C/LeBvVVP7BRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUxMDIwMTYyMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzg1ODE4M2QzMDJhMmE3MTE4MmViOTNmNDdjODI4MTBkYjEyMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMxtey8DtuL4OUSBPFn5ymTPt+Sa
ZMzORoYxasmNOtLkB/9yGp5Do19YgSw9V3DqEYmcQ2j6GmFCMyU0A1TGarILKGel
dALxVIUr7wBH4no1Re4kJodHG/BtvQNmQUqeOO4Nzms352CU7xnm1hdMZLA0f7MW
Pn3lqns9FVSysmX9FUyCDksGwTdcbHFzAwRY3z+h8T7E+Z8CeiecYrlWXzA8xS5P
yREU+7TU25EbHGM5gJeQCH5rbNG/G039RIBq/aYTI+s2MF9PCuZVTVfhOl4/Ho2Y
aFa2OsHPF6Q5OSvYtLg88u7fjP6uKDLXWEJb8W4jUnwXNvwd3YGSpYUUuwIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFBeFgYPTAqKnEYLrk/R8goENsSOfMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvRjRXQmc5TUNvcWNSZ3V1VDlIeUNnUTJ4STU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjB6BAIAATB0AwQBBbbE
AwQAT2K3AwQAXPkdAwQAXpqrAwQBZ4KwMAwDBABn0g0DBARn0gADBABn2MYDBABo
6CQDBACTTs8DBACi2lwDBAC5NIsDBAC5ob4DBAG5u9YDBAC5ySoDBAG50JgDBAC5
5nkDBAG5/XgDBADUPA0wLAQCAAIwJgMHACoKj0AAAzASAwcDKgqPQAAIAwcAKgqP
QAAMAwcAKgqPQAAcMA0GCSqGSIb3DQEBCwUAA4IBAQCMd2qRyGOxdvrH4QY7g7q0
yXVjxSZ4+wMKieSK5puKy9vbQLkb95i0RisLDiZ3TjqBQ7qZ8D0Ysh49zNTsUmyT
nGQ6ENfz5Fbged1mmCcV0Lh+h+LMNl2CVeGeuK8V3TOZwtkma/3oEXmuor6MXr/M
3Z5qPocywgOSQABonNhPXDbkxx5VJxJS1Mb0NCZ6rwuNsbSHcRQnBUVkHnBjDFdF
V4sS2Bk4ogA+6ZtfLGnO1RnFOb4tq5PNIUhzxgjhV1++r8iIHA+iLDlAWcBEVYCe
yjlKWV7wEl1UC3rJZUQYeZMJ39tcIiLZA8PMTOig2AHqJ1iMRkHAs8DqDIU+gJmO
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:46:20 2025 by rpki-client