Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A4VRzQn89LDapPzFjfzA6NSX6Ig.roa
File: A4VRzQn89LDapPzFjfzA6NSX6Ig.roa (raw, json)
Hash identifier: Ce2+O1h5i8xOBcjW/YBiTJ0AB8y7RGhSy4MTh8w/JMM=
Subject key identifier: 03:85:51:CD:09:FC:F4:B0:DA:A4:FC:C5:8D:FC:C0:E8:D4:97:E8:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019984B7D2063B7777DA196438C033CC95C0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A4VRzQn89LDapPzFjfzA6NSX6Ig.roa
Signing time: Fri 26 Sep 2025 06:31:03 +0000
ROA not before: Fri 26 Sep 2025 06:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
185.225.74.0/23 maxlen: 24
193.148.253.0/24 maxlen: 24
193.149.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:84:b7:d2:06:3b:77:77:da:19:64:38:c0:33:cc:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 06:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038551cd09fcf4b0daa4fcc58dfcc0e8d497e888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:33:e7:c7:d6:d8:0c:4b:ba:9a:07:4b:f2:
f9:b3:ac:4c:46:e7:0a:01:c0:a7:e8:8f:50:ed:5c:
fb:55:51:29:b2:78:ea:df:62:c9:42:63:cf:a5:4e:
2a:1a:ac:5f:58:f6:7d:c3:d5:92:46:e6:dd:2e:d2:
4f:3e:74:fb:26:2d:52:8a:23:e2:a5:99:cf:e3:1b:
bd:bc:c8:bb:39:79:1a:46:e9:0c:fd:c2:1d:73:67:
72:62:bc:c1:4d:72:a2:ad:99:7f:b5:d9:9c:3e:df:
10:1d:f7:56:9d:cb:18:f7:95:79:51:4f:af:a5:80:
f8:3a:c1:b6:25:c4:61:ac:af:a0:f5:b4:60:87:7b:
9c:02:27:3b:84:dd:39:53:63:02:72:85:b0:3b:29:
de:0f:b6:e3:57:b0:b3:f4:b0:cb:e1:06:ac:f7:cc:
20:bd:67:63:9c:04:fa:8e:f2:0a:1e:65:3e:76:35:
e5:54:cc:0a:3e:06:f0:18:b2:c7:7b:90:6b:84:37:
bc:f3:4e:cd:b1:8b:d6:7b:8a:22:59:4e:93:59:4d:
21:7e:46:a4:1a:04:89:3a:3d:12:fd:4a:45:62:a2:
cb:df:8f:ce:5e:35:75:ba:63:b2:28:21:f4:e2:9c:
b3:b3:cb:bb:a7:56:47:69:ce:d7:be:93:c3:ce:b1:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:51:CD:09:FC:F4:B0:DA:A4:FC:C5:8D:FC:C0:E8:D4:97:E8:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A4VRzQn89LDapPzFjfzA6NSX6Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.61.0/24
85.217.144.0/23
185.225.74.0/23
193.148.253.0/24
193.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:49:b4:c1:89:e3:a5:de:ff:ff:c4:f6:48:c4:7b:83:be:07:
c5:51:e5:bc:10:13:e5:7a:f5:39:5c:7b:de:77:d4:ae:14:2e:
bf:48:b1:72:ea:e2:14:c4:23:f2:4c:cb:41:b1:91:7e:48:bc:
32:2d:35:c8:70:9c:3c:d7:42:f8:ee:dc:b5:ab:ba:00:93:68:
ca:5e:30:5a:1e:c0:4c:77:ad:90:d3:19:7e:ba:a9:d8:e8:93:
34:7f:11:9a:50:85:3f:3a:77:6f:05:5f:b0:7d:bf:4e:b6:e1:
45:6d:a6:73:7c:67:ce:e2:90:99:b4:c6:6f:54:fd:f0:7f:d2:
b8:15:49:a3:b3:83:38:ff:e5:22:ed:82:f3:d7:be:40:e4:86:
52:83:7b:31:ae:ea:94:69:61:fd:7f:98:cc:3b:19:2c:53:06:
d4:8e:a6:3c:28:ad:39:e9:58:8a:dc:af:81:dd:14:59:b7:cd:
a7:70:ed:1f:4b:0f:67:1d:52:ec:c4:5a:73:12:df:20:c1:55:
63:a3:ba:ea:bf:a0:44:c4:a6:90:65:d6:0c:ce:83:5a:88:ae:
a9:c4:f4:80:94:4b:64:a9:cc:e7:fa:b6:2a:63:de:06:77:d2:
49:b3:3c:af:0e:f6:b2:f9:c0:c2:79:78:64:0c:d2:e2:27:a5:
45:c6:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:06 2025 by rpki-client