Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/METktZ2idAiZeDz9hpktU55-5Jw.roa
File: METktZ2idAiZeDz9hpktU55-5Jw.roa (raw, json)
Hash identifier: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=
Subject key identifier: 30:44:E4:B5:9D:A2:74:08:99:78:3C:FD:86:99:2D:53:9E:7E:E4:9C
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 01990E7FBC1D6874ECECD21216D28C9065CA
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/METktZ2idAiZeDz9hpktU55-5Jw.roa
Signing time: Wed 03 Sep 2025 07:34:36 +0000
ROA not before: Wed 03 Sep 2025 07:34:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201735
IP address blocks: 37.152.80.0/21 maxlen: 21
77.220.200.0/22 maxlen: 22
79.108.240.0/20 maxlen: 20
85.204.146.0/24 maxlen: 24
86.106.88.0/24 maxlen: 24
89.33.160.0/23 maxlen: 23
89.35.24.0/24 maxlen: 24
89.35.134.0/24 maxlen: 24
89.35.205.0/24 maxlen: 24
109.232.64.0/21 maxlen: 21
146.66.136.0/21 maxlen: 21
185.15.148.0/22 maxlen: 22
185.65.64.0/22 maxlen: 22
185.160.230.0/24 maxlen: 24
185.192.182.0/24 maxlen: 24
185.201.72.0/22 maxlen: 22
185.230.146.0/23 maxlen: 23
185.247.180.0/22 maxlen: 22
185.249.60.0/22 maxlen: 22
185.249.84.0/22 maxlen: 22
188.214.56.0/24 maxlen: 24
194.36.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:7f:bc:1d:68:74:ec:ec:d2:12:16:d2:8c:90:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Sep 3 07:34:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3044e4b59da2740899783cfd86992d539e7ee49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:9f:92:5b:0b:57:f4:93:0c:f5:5d:ef:85:
17:55:0d:5d:81:73:ea:f3:49:a9:03:f3:6a:e3:45:
f6:cf:cb:0b:96:d5:9e:f1:eb:c2:bc:98:8c:22:84:
1c:e2:f0:53:b2:11:e5:cc:ec:70:e4:17:5b:7f:d9:
85:d2:72:9b:2c:e9:aa:06:a5:f2:96:f6:49:88:15:
8e:50:d8:23:45:3c:75:01:ba:53:fc:a0:04:0f:bf:
a9:8d:66:d9:fa:19:44:04:9d:80:49:39:45:a4:9c:
15:f9:2e:2a:7f:eb:92:a2:7c:5a:a1:ef:ea:a4:20:
a4:be:a8:c5:aa:95:be:85:c4:40:4c:64:ff:bf:c3:
44:9e:5b:58:82:1e:8c:9d:e4:73:64:95:00:56:6a:
ed:00:57:dc:68:87:0e:74:22:af:5e:6b:0a:97:6f:
e3:9e:92:1d:e3:38:83:d1:ac:d0:e9:a9:d3:4c:d4:
f6:02:f1:7b:d3:89:40:aa:cc:38:4d:d7:cc:1b:3e:
26:7d:4c:9d:ac:52:b1:a3:74:35:3e:f8:19:cd:ab:
a9:7f:10:0d:8e:5a:29:09:9a:93:9c:3c:30:ad:df:
a9:e6:8a:23:99:40:27:40:42:95:1c:b3:97:4c:4f:
28:4d:d6:c2:f8:9e:49:1f:a5:28:11:37:0b:14:37:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:E4:B5:9D:A2:74:08:99:78:3C:FD:86:99:2D:53:9E:7E:E4:9C
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/METktZ2idAiZeDz9hpktU55-5Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.80.0/21
77.220.200.0/22
79.108.240.0/20
85.204.146.0/24
86.106.88.0/24
89.33.160.0/23
89.35.24.0/24
89.35.134.0/24
89.35.205.0/24
109.232.64.0/21
146.66.136.0/21
185.15.148.0/22
185.65.64.0/22
185.160.230.0/24
185.192.182.0/24
185.201.72.0/22
185.230.146.0/23
185.247.180.0/22
185.249.60.0/22
185.249.84.0/22
188.214.56.0/24
194.36.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:09:1b:8a:e0:d0:08:a4:ac:99:73:02:80:7c:ce:74:fc:f6:
c3:55:99:f2:62:0e:f1:81:a1:ee:a9:dd:c1:f9:e7:54:2c:9b:
84:96:b7:85:02:af:cf:86:46:c3:0f:2c:2c:dc:b0:81:d4:d9:
5a:ef:08:6a:26:21:cb:56:f7:49:12:f7:99:da:ed:5a:d5:ac:
d2:6c:4d:1e:a4:c2:d2:4f:ea:62:aa:cd:8d:e4:31:11:c8:f7:
91:f5:d5:8d:40:00:ba:e1:22:3e:e7:05:14:87:39:c2:a1:42:
7c:a6:27:c1:5c:ea:5b:c4:05:a9:f0:d4:3d:53:ba:88:ca:9b:
0d:ee:53:27:1b:a1:4e:85:39:86:0c:88:e3:b5:89:e9:81:8e:
22:57:08:44:67:6c:2c:d5:7d:03:5c:d6:1a:62:b7:2a:9e:e1:
c3:19:d8:a3:da:35:6e:fd:1c:10:69:81:80:a6:01:5a:06:c8:
e8:e1:ac:13:dd:41:6d:a7:b9:37:16:9b:62:5a:a5:44:c5:6e:
03:96:0b:ca:4b:2d:32:b5:dd:b7:03:69:a1:59:f3:34:d9:04:
06:fc:70:4e:8b:3c:04:3e:c2:34:d9:33:fc:cd:38:50:a7:39:
aa:1e:54:79:aa:b6:fe:51:3f:d0:52:d5:d6:ff:6a:57:7c:66:
5b:92:59:7e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZkOf7wdaHTs7NISFtKMkGXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz
Y2U1ZDIwHhcNMjUwOTAzMDczNDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDQ0ZTRiNTlkYTI3NDA4OTk3ODNjZmQ4Njk5MmQ1MzllN2VlNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWefklsLV/STDPVd74UXVQ1dgXPq
80mpA/Nq40X2z8sLltWe8evCvJiMIoQc4vBTshHlzOxw5Bdbf9mF0nKbLOmqBqXy
lvZJiBWOUNgjRTx1AbpT/KAED7+pjWbZ+hlEBJ2ASTlFpJwV+S4qf+uSonxaoe/q
pCCkvqjFqpW+hcRATGT/v8NEnltYgh6MneRzZJUAVmrtAFfcaIcOdCKvXmsKl2/j
npId4ziD0azQ6anTTNT2AvF704lAqsw4TdfMGz4mfUydrFKxo3Q1PvgZzaupfxAN
jlopCZqTnDwwrd+p5oojmUAnQEKVHLOXTE8oTdbC+J5JH6UoETcLFDc/MQIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFDBE5LWdonQImXg8/YaZLVOefuScMB8GA1UdIwQY
MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt
MTliMTJhOTU1MDY1LzEvTUVUa3RaMmlkQWlaZUR6OWhwa3RVNTUtNUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1
LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAMl
mFADBAJN3MgDBARPbPADBABVzJIDBABWalgDBAFZIaADBABZIxgDBABZI4YDBABZ
I80DBANt6EADBAOSQogDBAK5D5QDBAK5QUADBAC5oOYDBAC5wLYDBAK5yUgDBAG5
5pIDBAK597QDBAK5+TwDBAK5+VQDBAC81jgDBALCJBwwDQYJKoZIhvcNAQELBQAD
ggEBAMoJG4rg0AikrJlzAoB8znT89sNVmfJiDvGBoe6p3cH551Qsm4SWt4UCr8+G
RsMPLCzcsIHU2VrvCGomIctW90kS95na7VrVrNJsTR6kwtJP6mKqzY3kMRHI95H1
1Y1AALrhIj7nBRSHOcKhQnymJ8Fc6lvEBanw1D1TuojKmw3uUycboU6FOYYMiOO1
iemBjiJXCERnbCzVfQNc1hpityqe4cMZ2KPaNW79HBBpgYCmAVoGyOjhrBPdQW2n
uTcWm2JapUTFbgOWC8pLLTK13bcDaaFZ8zTZBAb8cE6LPAQ+wjTZM/zNOFCnOaoe
VHmqtv5RP9BS1db/ald8ZluSWX4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:10 2025 by rpki-client