Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rSw1vKVZ01oyHUgLNUK7DRXM2dI.roa
File: rSw1vKVZ01oyHUgLNUK7DRXM2dI.roa (raw, json)
Hash identifier: suTFC8eBIDQgXEC+VGhJ8YSSOmtdAMIwPduJEl+tO5E=
Subject key identifier: AD:2C:35:BC:A5:59:D3:5A:32:1D:48:0B:35:42:BB:0D:15:CC:D9:D2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019A06C0657CCC4B3846191DB4E86FF0A3DA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rSw1vKVZ01oyHUgLNUK7DRXM2dI.roa
Signing time: Tue 21 Oct 2025 12:31:03 +0000
ROA not before: Tue 21 Oct 2025 12:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 192.36.200.0/24 maxlen: 24
192.71.0.0/24 maxlen: 24
192.71.206.0/24 maxlen: 24
192.165.3.0/24 maxlen: 24
192.165.134.0/23 maxlen: 23
192.165.152.0/22 maxlen: 24
192.165.157.0/24 maxlen: 24
193.180.92.0/24 maxlen: 24
193.181.34.0/24 maxlen: 24
193.183.20.0/24 maxlen: 24
193.183.49.0/24 maxlen: 24
193.183.59.0/24 maxlen: 24
193.234.3.0/24 maxlen: 24
193.234.94.0/24 maxlen: 24
193.234.116.0/22 maxlen: 22
193.234.144.0/24 maxlen: 24
193.234.205.0/24 maxlen: 24
194.14.57.0/24 maxlen: 24
194.68.22.0/23 maxlen: 23
194.68.24.0/24 maxlen: 24
194.68.181.0/24 maxlen: 24
194.71.0.0/23 maxlen: 23
194.71.106.0/24 maxlen: 24
194.71.219.0/24 maxlen: 24
194.103.3.0/24 maxlen: 24
194.103.16.0/23 maxlen: 24
194.103.95.0/24 maxlen: 24
194.103.145.0/24 maxlen: 24
194.103.197.0/24 maxlen: 24
194.132.120.0/24 maxlen: 24
194.132.164.0/24 maxlen: 24
194.132.166.0/24 maxlen: 24
194.132.172.0/23 maxlen: 23
194.132.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:c0:65:7c:cc:4b:38:46:19:1d:b4:e8:6f:f0:a3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 21 12:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2c35bca559d35a321d480b3542bb0d15ccd9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:df:d8:a6:48:de:63:16:53:d1:97:45:04:
fa:f2:e5:63:f7:19:3b:56:14:05:a2:ed:5c:bb:e6:
64:ea:cf:d2:34:19:66:74:48:a4:b0:09:75:34:6b:
b5:23:f5:5c:51:02:e8:5c:ec:ed:b9:a3:9e:16:2a:
b4:18:c0:c0:8c:a3:98:99:b3:1b:92:9d:05:07:25:
1a:03:24:5c:83:3d:83:18:31:f2:1b:f1:8d:54:57:
fb:ab:7b:40:48:9d:55:7f:54:7e:b1:55:57:85:42:
7f:5c:33:b2:e9:78:99:da:d4:f5:4e:f8:45:d9:7a:
f2:41:16:89:d8:08:95:0c:07:f0:92:23:be:82:e5:
8c:9d:c1:50:c9:fa:10:38:2d:bc:07:4d:8d:8f:10:
0f:4f:52:d5:70:ed:aa:16:53:9d:ae:5e:d6:46:13:
4a:2c:8a:d0:52:c2:73:69:7a:04:7b:dc:c9:1a:27:
e2:6d:fd:df:1c:af:5e:c4:5e:25:7e:93:1e:aa:eb:
f3:38:30:52:1a:ab:1a:7b:6d:5b:d1:e4:06:6a:3d:
b6:70:80:09:8c:41:d0:55:0b:cb:2c:46:4c:84:46:
25:8d:db:76:c6:66:7e:8c:ab:f2:7d:66:d7:c7:f4:
66:e7:8c:6c:aa:3f:c2:d6:f3:5b:a2:14:b6:5e:b4:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:35:BC:A5:59:D3:5A:32:1D:48:0B:35:42:BB:0D:15:CC:D9:D2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rSw1vKVZ01oyHUgLNUK7DRXM2dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.200.0/24
192.71.0.0/24
192.71.206.0/24
192.165.3.0/24
192.165.134.0/23
192.165.152.0/22
192.165.157.0/24
193.180.92.0/24
193.181.34.0/24
193.183.20.0/24
193.183.49.0/24
193.183.59.0/24
193.234.3.0/24
193.234.94.0/24
193.234.116.0/22
193.234.144.0/24
193.234.205.0/24
194.14.57.0/24
194.68.22.0-194.68.24.255
194.68.181.0/24
194.71.0.0/23
194.71.106.0/24
194.71.219.0/24
194.103.3.0/24
194.103.16.0/23
194.103.95.0/24
194.103.145.0/24
194.103.197.0/24
194.132.120.0/24
194.132.164.0/24
194.132.166.0/24
194.132.172.0/23
194.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
19:eb:b4:68:60:30:62:b9:e0:3f:9a:d6:19:85:14:6e:33:60:
46:b2:bf:52:89:e8:ec:0d:42:77:50:5e:42:f2:20:1f:7d:80:
d7:b8:96:e3:e2:0e:a5:27:cb:c4:80:0f:3d:d4:27:c4:03:15:
f3:db:26:e4:c7:cd:1d:52:08:5c:51:eb:fd:66:9d:91:0c:69:
59:85:38:a2:06:12:84:26:ad:02:5a:48:f6:f4:1d:a2:69:b5:
07:54:3a:43:67:91:a1:b0:f9:84:58:db:93:8d:49:f6:3d:d1:
27:b9:96:f0:7f:71:00:df:48:99:42:46:f1:b1:2c:49:59:37:
98:2d:33:41:4e:ce:31:82:45:2f:9a:4c:83:f6:b9:45:c9:53:
5d:8e:22:49:fa:c9:f1:d5:de:95:5a:fa:b3:39:1b:a6:40:16:
ce:b7:e9:6a:9a:7d:28:74:4a:cd:a2:13:9d:b8:e8:1e:03:5a:
15:b1:15:0b:39:a3:58:1a:79:51:9f:41:f0:6e:bd:8e:51:77:
df:67:0f:e5:ce:47:4d:2c:c5:71:9a:30:8e:ec:95:5a:a4:89:
42:c1:14:cf:81:23:ca:37:7a:b7:b2:84:0d:52:b8:f6:b2:4a:
77:59:80:b1:e4:63:af:5b:ab:42:2c:d3:27:30:3f:76:3d:17:
e3:4d:fe:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:47:02 2025 by rpki-client