Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/a9CuWyPd-c9fwtWnf6Qw7jEH7ic.roa
File: a9CuWyPd-c9fwtWnf6Qw7jEH7ic.roa (raw, json)
Hash identifier: xRxfIlp8OxFc5k8i4YohXqRCQSb5ekQzI694uPO98mg=
Subject key identifier: 6B:D0:AE:5B:23:DD:F9:CF:5F:C2:D5:A7:7F:A4:30:EE:31:07:EE:27
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01990A6CF3F4F966D1FB6636E8BE58A20335
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/a9CuWyPd-c9fwtWnf6Qw7jEH7ic.roa
Signing time: Tue 02 Sep 2025 12:35:36 +0000
ROA not before: Tue 02 Sep 2025 12:35:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.0.0/21 maxlen: 21
5.0.8.0/21 maxlen: 21
5.0.16.0/21 maxlen: 21
5.0.24.0/21 maxlen: 21
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.64.0/21 maxlen: 21
5.0.72.0/21 maxlen: 21
5.0.80.0/21 maxlen: 21
5.0.88.0/21 maxlen: 21
5.0.96.0/21 maxlen: 21
5.0.104.0/21 maxlen: 21
5.0.112.0/21 maxlen: 21
5.0.120.0/21 maxlen: 21
5.0.128.0/19 maxlen: 19
5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.32.0/21 maxlen: 21
5.155.40.0/21 maxlen: 21
5.155.48.0/21 maxlen: 21
5.155.56.0/21 maxlen: 21
5.155.64.0/19 maxlen: 19
5.155.64.0/21 maxlen: 21
5.155.72.0/21 maxlen: 21
5.155.80.0/21 maxlen: 21
5.155.88.0/21 maxlen: 21
5.155.96.0/19 maxlen: 19
5.155.96.0/21 maxlen: 21
5.155.104.0/21 maxlen: 21
5.155.112.0/21 maxlen: 21
5.155.120.0/21 maxlen: 21
5.155.128.0/19 maxlen: 19
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/19 maxlen: 19
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.0.0/19 maxlen: 19
31.9.32.0/20 maxlen: 20
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
91.144.48.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.64.0/21 maxlen: 21
94.47.72.0/21 maxlen: 21
94.47.80.0/21 maxlen: 21
94.47.88.0/21 maxlen: 21
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.160.0/21 maxlen: 21
94.47.168.0/21 maxlen: 21
94.47.176.0/21 maxlen: 21
94.47.184.0/21 maxlen: 21
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
193.124.160.0/20 maxlen: 20
193.124.208.0/20 maxlen: 20
194.58.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:6c:f3:f4:f9:66:d1:fb:66:36:e8:be:58:a2:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Sep 2 12:35:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd0ae5b23ddf9cf5fc2d5a77fa430ee3107ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:93:00:86:74:43:a8:61:93:30:16:51:4e:
47:13:12:f3:e4:fd:a9:df:52:08:78:7a:36:db:5d:
b1:30:06:c4:34:54:8d:d0:9e:f3:d6:ea:39:2a:e8:
dc:19:75:71:f5:6d:be:cd:9c:a0:49:8a:76:7d:6a:
58:fe:bc:fe:9c:eb:de:d4:0f:eb:c3:87:61:70:cb:
36:30:a5:99:9b:f6:27:e9:af:db:69:89:43:85:0f:
eb:26:4e:7d:d4:31:a5:37:5f:bf:e9:cd:d7:09:15:
00:50:7b:2a:a7:00:5b:f7:38:e2:08:cb:77:4e:8b:
18:5b:c2:98:98:37:eb:95:fa:58:41:4a:ed:12:88:
ae:9b:db:ab:11:ae:28:cc:ed:5a:a0:d2:4d:e1:04:
9d:e7:9f:89:86:32:28:ae:f9:f0:27:09:a4:52:a0:
ba:58:ce:92:50:4c:d0:04:a4:40:cb:cf:9c:61:84:
69:52:a3:e3:06:11:05:b7:35:5d:85:93:c7:bf:4b:
23:96:bf:52:87:9a:b6:8a:75:be:4a:b7:81:e5:87:
55:24:13:70:4d:78:9f:1b:6c:57:31:28:89:50:01:
3a:19:d7:47:03:d3:ce:08:f1:fa:f7:30:3d:8f:1d:
e0:e4:89:c0:11:43:ac:d7:76:83:ff:b8:79:fa:5c:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D0:AE:5B:23:DD:F9:CF:5F:C2:D5:A7:7F:A4:30:EE:31:07:EE:27
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/a9CuWyPd-c9fwtWnf6Qw7jEH7ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.0.0-31.9.51.255
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0/18
94.47.0.0/16
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
193.124.160.0/20
193.124.208.0/20
194.58.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:88:65:36:25:ae:f1:88:7a:fb:8a:9d:66:5e:c1:e4:ec:4f:
96:12:8e:d9:6e:4a:c3:3a:92:d1:ec:18:9f:c4:2e:f6:ec:14:
89:52:fd:65:d8:66:a6:19:11:7d:2c:59:09:e2:d1:73:15:f4:
fe:0a:6c:ca:02:89:da:fb:91:af:ce:cd:4b:8f:f6:b6:85:49:
71:f2:13:ed:4c:69:10:9a:7d:e0:9a:53:a4:16:d5:6b:ca:1b:
98:98:05:82:83:53:db:85:4d:8b:f8:27:ee:ca:65:8e:53:13:
5e:ad:71:ee:13:a3:85:66:43:34:8d:74:3b:0a:5b:72:35:9e:
fc:e0:02:1f:ee:94:ab:da:fa:eb:38:85:aa:6c:b1:6d:bd:70:
2d:db:77:8a:39:da:55:d6:7d:63:67:45:d9:cd:cb:c0:8d:08:
1c:8f:2f:3d:27:ac:1d:6c:7c:af:bd:13:30:a2:4e:a0:12:20:
bc:30:c5:42:14:c2:7c:81:79:52:ff:52:2c:ca:5d:12:7f:b8:
01:dc:9c:9c:e6:14:a9:39:65:58:83:3f:90:30:04:06:7c:57:
36:67:a9:b4:a5:09:27:ab:d4:bb:19:82:3e:2d:1c:c3:46:a6:
7e:51:f3:d3:df:3f:cd:23:4e:de:88:29:4b:e2:20:6b:70:fc:
7a:62:26:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:14:10 2025 by rpki-client