Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kqzmke5DCaDSpAALdz2M4JyRnDc.roa
File: kqzmke5DCaDSpAALdz2M4JyRnDc.roa (raw, json)
Hash identifier: p8Tm6XLjOyoV/HE5AOIHdMledO3k7Y8Bht+FixkENxs=
Subject key identifier: 92:AC:E6:91:EE:43:09:A0:D2:A4:00:0B:77:3D:8C:E0:9C:91:9C:37
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019A121DF111A26C42047F37716154883969
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kqzmke5DCaDSpAALdz2M4JyRnDc.roa
Signing time: Thu 23 Oct 2025 17:29:03 +0000
ROA not before: Thu 23 Oct 2025 17:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:1d:f1:11:a2:6c:42:04:7f:37:71:61:54:88:39:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 23 17:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92ace691ee4309a0d2a4000b773d8ce09c919c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:f5:ba:92:d6:85:0d:85:7e:56:6f:2a:89:
06:6a:8d:87:89:ab:56:3e:04:97:6a:15:f3:a7:7e:
dc:b2:72:14:a8:51:8b:dc:5b:90:65:01:62:39:87:
81:12:61:3e:a8:6b:97:80:21:36:a5:73:3b:58:3a:
be:d8:cf:d3:30:6b:8a:87:cb:b7:ee:88:95:5b:3b:
fe:e5:79:7f:40:64:6b:ca:f2:7c:6a:bc:32:8d:17:
66:a2:6b:ab:38:6c:a3:cd:a1:36:d3:50:cd:6b:39:
d5:6b:3b:6d:8e:bf:13:79:ae:93:3e:d1:e5:7e:d9:
44:a4:17:41:91:47:ce:3c:c4:2b:17:98:01:9a:97:
0d:2b:c4:14:7d:32:d4:39:3d:a2:a1:8c:85:a9:70:
3a:a8:43:7f:e8:45:83:e8:6c:d5:da:99:ec:12:38:
59:e3:e5:ba:c7:e8:8a:ef:a7:65:03:f0:76:b0:e3:
e4:ed:38:a9:c4:68:c0:0a:ca:1d:e0:b3:e8:a3:d3:
95:83:04:24:82:76:0c:b1:8a:97:d7:a1:c6:b1:3b:
cd:4d:d0:5f:9a:95:e2:3f:69:db:07:b5:d7:93:38:
4d:dd:87:fa:05:57:34:63:7a:ec:db:1d:c6:ec:d2:
c9:49:80:cd:42:57:4f:be:dc:c6:39:04:bf:2b:e6:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AC:E6:91:EE:43:09:A0:D2:A4:00:0B:77:3D:8C:E0:9C:91:9C:37
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kqzmke5DCaDSpAALdz2M4JyRnDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0/22
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
96:38:19:52:96:33:cb:8f:ad:ff:02:75:93:90:42:d6:05:3d:
32:1d:4d:0a:40:96:c4:10:6a:e0:8c:c8:dc:74:9d:f6:1e:a1:
37:13:5c:74:36:58:a1:c2:01:e8:20:0a:19:6b:00:57:3b:9f:
be:51:43:81:fe:38:26:12:c3:a2:ca:f2:c5:53:42:35:bc:7c:
02:27:8f:37:91:d5:71:e2:4f:64:23:ff:da:81:3b:0e:20:76:
f1:fc:04:0a:a7:ba:f7:57:a1:f4:30:fc:76:9c:b7:dd:5e:64:
2e:79:73:0d:da:04:f5:a3:ff:38:c8:f4:61:b1:8f:19:00:cf:
c8:60:d0:93:19:89:e1:1b:eb:61:71:0a:22:bd:f2:7a:de:23:
fd:20:23:b3:5a:27:41:6d:0c:e0:a5:fa:a5:1b:33:13:36:ad:
90:30:0f:dd:d6:52:17:e4:7d:00:42:81:ff:06:12:c0:61:dd:
89:2c:b8:bd:f0:aa:33:7b:6d:e0:fa:33:04:78:01:0a:3b:3e:
a2:24:d8:83:98:22:3a:15:d1:dc:f2:e6:c5:13:9c:eb:bf:f7:
9e:aa:0e:a8:4a:b7:ef:96:47:b1:82:b0:c6:69:09:c8:a6:94:
b7:d1:8c:e5:01:82:57:de:55:b2:f7:f8:5e:eb:3e:30:06:5b:
a3:44:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:59:00 2025 by rpki-client