Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9434CSf3b98tqxb2vzggi5FyIbg.roa
File: 9434CSf3b98tqxb2vzggi5FyIbg.roa (raw, json)
Hash identifier: CXOm5leo0JVdQDtu2ALEy/AgItOUMrJ10rKlbkd7H1s=
Subject key identifier: F7:8D:F8:09:27:F7:6F:DF:2D:AB:16:F6:BF:38:20:8B:91:72:21:B8
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0199043B42294F3D5B2E16342E5B2154905B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9434CSf3b98tqxb2vzggi5FyIbg.roa
Signing time: Mon 01 Sep 2025 07:43:36 +0000
ROA not before: Mon 01 Sep 2025 07:43:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:3b:42:29:4f:3d:5b:2e:16:34:2e:5b:21:54:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 1 07:43:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78df80927f76fdf2dab16f6bf38208b917221b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:b6:89:3b:c2:8f:09:2a:f5:57:6a:c4:76:
8f:96:bc:b1:63:51:e5:ea:ee:59:21:02:01:13:84:
00:e6:27:3f:b2:39:b6:0b:a7:b8:dc:b7:53:ab:3a:
91:49:73:eb:c9:86:fc:2f:f3:cf:9e:11:95:4f:a4:
4c:8e:99:d1:27:b8:3c:e9:91:2a:a5:4f:dd:bc:53:
a9:93:93:fa:b2:e1:78:4d:47:b5:58:d8:09:62:e6:
bd:1e:4b:c4:35:e8:9c:1c:aa:c2:46:b6:26:0c:15:
f4:4d:43:1a:ad:21:1b:b3:e9:e2:a0:52:04:d5:71:
21:80:44:e5:76:52:b8:75:08:55:5b:ed:8b:c3:a6:
22:d3:86:cc:d4:f9:03:b2:f1:6c:05:db:69:16:37:
bd:06:5d:df:a5:50:5b:24:f2:9a:bc:df:fe:65:4e:
99:12:e8:ca:e7:28:42:4d:cf:db:85:35:e1:15:60:
49:f5:c5:f2:b2:00:38:0a:ac:fd:e1:f0:ab:c5:2a:
f9:1b:7d:0c:3c:52:57:f3:38:60:fe:76:1e:fd:5b:
99:31:7b:3e:58:83:73:8c:79:8f:45:3f:31:00:63:
d8:b4:f4:b5:14:b9:a3:4a:85:ad:fa:54:e8:38:4c:
ff:e6:c0:b4:db:71:79:1e:bd:64:0b:bb:fa:2d:28:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:F8:09:27:F7:6F:DF:2D:AB:16:F6:BF:38:20:8B:91:72:21:B8
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9434CSf3b98tqxb2vzggi5FyIbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
50:75:77:85:c5:ef:72:a0:99:2c:97:65:ca:fa:63:b2:d6:7f:
43:e4:b1:22:c3:73:c7:e7:cf:c2:1f:b7:50:1f:ce:47:c3:26:
cb:39:ae:e4:5f:b4:dd:b9:56:f5:8e:ea:7a:0e:d1:da:a0:60:
e4:3b:f2:31:87:88:d1:16:6f:05:b1:8b:5a:f3:c0:7c:40:c2:
cc:e2:aa:52:07:d2:e9:91:bd:30:03:78:b3:fd:38:00:93:b8:
ae:09:21:d3:9d:3a:f1:cb:ae:d1:b7:9c:8d:23:5c:9c:0d:a3:
67:9d:dd:f2:fc:60:ad:53:da:18:71:47:86:02:8d:b7:f9:94:
ee:b0:3b:df:ac:9f:77:05:96:7c:fd:c6:d0:a2:e2:46:6d:69:
0b:e1:34:36:fb:30:2a:27:0d:85:b1:49:a4:b8:7a:47:72:2b:
f3:17:bb:13:34:22:f6:dc:65:19:e8:dc:39:57:67:81:0a:f0:
0a:7b:5c:80:0a:41:d9:88:02:d4:81:ac:a2:86:b2:49:5d:1e:
d4:36:2a:8d:67:ca:16:7b:62:29:18:fc:dd:3a:a5:8f:dc:9e:
62:48:71:82:d3:58:5f:17:b6:5a:22:a7:47:42:50:43:e8:bf:
10:18:a7:db:6c:30:86:a0:4e:e3:e9:4d:44:95:87:d7:23:be:
4c:74:a4:df
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZkEO0IpTz1bLhY0LlshVJBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwOTAxMDc0MzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhkZjgwOTI3Zjc2ZmRmMmRhYjE2ZjZiZjM4MjA4YjkxNzIyMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXO2iTvCjwkq9VdqxHaPlryxY1Hl
6u5ZIQIBE4QA5ic/sjm2C6e43LdTqzqRSXPryYb8L/PPnhGVT6RMjpnRJ7g86ZEq
pU/dvFOpk5P6suF4TUe1WNgJYua9HkvENeicHKrCRrYmDBX0TUMarSEbs+nioFIE
1XEhgETldlK4dQhVW+2Lw6Yi04bM1PkDsvFsBdtpFje9Bl3fpVBbJPKavN/+ZU6Z
EujK5yhCTc/bhTXhFWBJ9cXysgA4Cqz94fCrxSr5G30MPFJX8zhg/nYe/VuZMXs+
WINzjHmPRT8xAGPYtPS1FLmjSoWt+lToOEz/5sC023F5Hr1kC7v6LSgtYwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFPeN+Akn92/fLasW9r84IIuRciG4MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvOTQzNENTZjNiOTh0cXhiMnZ6Z2dpNUZ5SWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDBKBAIAATBEMAwDBAAF
tGkDBAIFtGgDBAEtgwADBAAtiAQDBAEtjZQDBAAtkywDBAJNU8gDBADCdOQDBAHC
dOwDBADCkiQDBADCki8wTgQCAAIwSAMFAyoJh4ADBQMqD7cAAwUDKg/pAAMFAyoP
6wADBQMqD+0AAwUDKg/5AAMHACoTpEAABwMFACoTpEEDBQAqE6RFAwUAKhOkRzAN
BgkqhkiG9w0BAQsFAAOCAQEAUHV3hcXvcqCZLJdlyvpjstZ/Q+SxIsNzx+fPwh+3
UB/OR8Mmyzmu5F+03blW9Y7qeg7R2qBg5DvyMYeI0RZvBbGLWvPAfEDCzOKqUgfS
6ZG9MAN4s/04AJO4rgkh05068cuu0becjSNcnA2jZ53d8vxgrVPaGHFHhgKNt/mU
7rA736yfdwWWfP3G0KLiRm1pC+E0NvswKicNhbFJpLh6R3Ir8xe7EzQi9txlGejc
OVdngQrwCntcgApB2YgC1IGsooaySV0e1DYqjWfKFntiKRj83Tqlj9yeYkhxgtNY
Xxe2WiKnR0JQQ+i/EBin22wwhqBO4+lNRJWH1yO+THSk3w==
-----END CERTIFICATE-----
Generated at Sat Sep 6 10:03:40 2025 by rpki-client