Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/39kjkNJ6QYdQayRiJz7yaztk3VY.roa
File: 39kjkNJ6QYdQayRiJz7yaztk3VY.roa (raw, json)
Hash identifier: b8NlZZsizMpAxfarUtz0o7Vf6Wtx2a1Rwx225pOIAX0=
Subject key identifier: DF:D9:23:90:D2:7A:41:87:50:6B:24:62:27:3E:F2:6B:3B:64:DD:56
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01997C285C3E0E5335F6C0C81411C33778D4
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/39kjkNJ6QYdQayRiJz7yaztk3VY.roa
Signing time: Wed 24 Sep 2025 14:37:23 +0000
ROA not before: Wed 24 Sep 2025 14:37:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 79.132.72.0/24 maxlen: 24
79.132.73.0/24 maxlen: 24
79.132.74.0/24 maxlen: 24
79.132.75.0/24 maxlen: 24
79.132.76.0/24 maxlen: 24
79.132.77.0/24 maxlen: 24
79.132.78.0/24 maxlen: 24
79.132.79.0/24 maxlen: 24
79.132.80.0/24 maxlen: 24
79.132.81.0/24 maxlen: 24
79.132.82.0/24 maxlen: 24
79.132.83.0/24 maxlen: 24
79.132.84.0/24 maxlen: 24
79.132.85.0/24 maxlen: 24
79.132.86.0/24 maxlen: 24
79.132.87.0/24 maxlen: 24
79.132.88.0/24 maxlen: 24
79.132.89.0/24 maxlen: 24
79.132.90.0/24 maxlen: 24
79.132.91.0/24 maxlen: 24
79.135.152.0/24 maxlen: 24
79.135.153.0/24 maxlen: 24
79.135.155.0/24 maxlen: 24
80.81.40.0/24 maxlen: 24
80.81.41.0/24 maxlen: 24
80.81.49.0/24 maxlen: 24
80.81.50.0/24 maxlen: 24
80.81.52.0/24 maxlen: 24
80.81.56.0/24 maxlen: 24
80.254.212.0/24 maxlen: 24
80.254.213.0/24 maxlen: 24
80.254.214.0/24 maxlen: 24
80.254.215.0/24 maxlen: 24
80.254.220.0/24 maxlen: 24
80.254.221.0/24 maxlen: 24
80.254.222.0/24 maxlen: 24
80.254.223.0/24 maxlen: 24
83.223.128.0/24 maxlen: 24
83.223.129.0/24 maxlen: 24
83.223.144.0/24 maxlen: 24
85.115.96.0/24 maxlen: 24
85.115.97.0/24 maxlen: 24
85.115.98.0/24 maxlen: 24
85.115.99.0/24 maxlen: 24
85.115.100.0/24 maxlen: 24
85.115.101.0/24 maxlen: 24
85.115.102.0/24 maxlen: 24
85.115.103.0/24 maxlen: 24
85.115.104.0/24 maxlen: 24
85.115.105.0/24 maxlen: 24
85.115.106.0/24 maxlen: 24
85.115.107.0/24 maxlen: 24
85.115.108.0/24 maxlen: 24
85.115.109.0/24 maxlen: 24
85.115.110.0/24 maxlen: 24
85.115.111.0/24 maxlen: 24
85.115.112.0/24 maxlen: 24
85.115.113.0/24 maxlen: 24
85.115.114.0/24 maxlen: 24
85.115.115.0/24 maxlen: 24
85.115.116.0/24 maxlen: 24
85.115.117.0/24 maxlen: 24
85.115.118.0/24 maxlen: 24
85.115.119.0/24 maxlen: 24
85.115.120.0/24 maxlen: 24
85.115.121.0/24 maxlen: 24
85.115.122.0/24 maxlen: 24
85.115.123.0/24 maxlen: 24
85.115.124.0/24 maxlen: 24
85.115.125.0/24 maxlen: 24
85.115.126.0/24 maxlen: 24
85.115.127.0/24 maxlen: 24
85.254.8.0/24 maxlen: 24
85.254.9.0/24 maxlen: 24
85.254.10.0/24 maxlen: 24
85.254.11.0/24 maxlen: 24
85.254.45.0/24 maxlen: 24
85.254.47.0/24 maxlen: 24
85.254.52.0/24 maxlen: 24
85.254.53.0/24 maxlen: 24
85.254.54.0/24 maxlen: 24
85.254.55.0/24 maxlen: 24
85.254.62.0/24 maxlen: 24
85.254.66.0/24 maxlen: 24
85.254.67.0/24 maxlen: 24
85.254.70.0/24 maxlen: 24
85.254.72.0/24 maxlen: 24
85.254.104.0/24 maxlen: 24
85.254.105.0/24 maxlen: 24
85.254.106.0/24 maxlen: 24
85.254.107.0/24 maxlen: 24
85.254.108.0/24 maxlen: 24
85.254.109.0/24 maxlen: 24
85.254.110.0/24 maxlen: 24
85.254.111.0/24 maxlen: 24
85.254.116.0/24 maxlen: 24
85.254.122.0/24 maxlen: 24
85.254.133.0/24 maxlen: 24
85.254.135.0/24 maxlen: 24
85.254.136.0/24 maxlen: 24
85.254.165.0/24 maxlen: 24
85.254.166.0/24 maxlen: 24
85.254.167.0/24 maxlen: 24
85.254.171.0/24 maxlen: 24
85.254.188.0/24 maxlen: 24
85.254.189.0/24 maxlen: 24
85.254.190.0/24 maxlen: 24
85.254.191.0/24 maxlen: 24
89.18.192.0/24 maxlen: 24
89.18.193.0/24 maxlen: 24
89.18.194.0/24 maxlen: 24
89.18.195.0/24 maxlen: 24
89.18.196.0/24 maxlen: 24
89.18.197.0/24 maxlen: 24
89.18.198.0/24 maxlen: 24
89.18.199.0/24 maxlen: 24
89.18.200.0/24 maxlen: 24
89.18.201.0/24 maxlen: 24
89.18.202.0/24 maxlen: 24
89.18.203.0/24 maxlen: 24
89.18.204.0/24 maxlen: 24
89.18.205.0/24 maxlen: 24
89.18.206.0/24 maxlen: 24
89.18.207.0/24 maxlen: 24
89.18.208.0/24 maxlen: 24
89.18.209.0/24 maxlen: 24
89.18.210.0/24 maxlen: 24
89.18.211.0/24 maxlen: 24
89.18.212.0/24 maxlen: 24
89.18.213.0/24 maxlen: 24
89.18.214.0/24 maxlen: 24
89.18.215.0/24 maxlen: 24
89.18.216.0/24 maxlen: 24
89.18.217.0/24 maxlen: 24
89.18.218.0/24 maxlen: 24
89.18.219.0/24 maxlen: 24
89.18.220.0/24 maxlen: 24
89.18.221.0/24 maxlen: 24
89.18.222.0/24 maxlen: 24
89.18.223.0/24 maxlen: 24
91.190.38.0/24 maxlen: 24
91.190.39.0/24 maxlen: 24
91.190.40.0/24 maxlen: 24
91.190.41.0/24 maxlen: 24
91.190.43.0/24 maxlen: 24
91.190.44.0/24 maxlen: 24
91.190.46.0/24 maxlen: 24
91.190.62.0/24 maxlen: 24
91.190.63.0/24 maxlen: 24
159.148.125.0/24 maxlen: 24
159.148.138.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
159.148.150.0/24 maxlen: 24
159.148.222.0/24 maxlen: 24
159.148.242.0/24 maxlen: 24
159.148.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7c:28:5c:3e:0e:53:35:f6:c0:c8:14:11:c3:37:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 24 14:37:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfd92390d27a4187506b2462273ef26b3b64dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:85:20:8d:6c:12:cb:d8:00:40:1b:ee:b1:
82:de:72:4b:44:a2:ad:88:0b:4e:ce:a9:d3:b6:6c:
be:3c:74:54:ef:5b:f7:67:cf:71:af:ec:4e:d1:eb:
83:92:5b:e3:ae:b1:bd:b2:70:0b:b9:32:e6:ae:c3:
1e:c4:01:d8:ad:2f:53:ea:fa:32:04:6c:52:93:e6:
7b:6c:af:7f:60:0d:55:fc:32:9f:d9:5b:2a:1e:96:
da:2c:fd:f3:42:44:5a:6c:d6:7f:a2:a8:03:87:7e:
4e:2f:c9:22:70:cb:a5:4e:0d:a7:10:2a:57:10:0b:
ea:46:71:a7:51:a1:a2:7a:d4:75:0e:96:53:fd:80:
f5:b2:1b:5e:66:74:79:36:19:2c:0b:4d:d7:d3:a0:
08:6e:d1:26:bd:2b:5f:a7:21:cf:65:5e:22:a2:58:
39:7e:81:df:22:39:23:73:52:6b:8c:ca:53:61:96:
cb:1b:c4:f7:d9:9c:e6:ac:20:48:3f:02:ab:86:e7:
0c:ae:2e:93:12:02:94:1d:6d:73:fa:37:86:f7:8f:
5f:c8:7c:79:ed:a1:94:44:c2:bd:dd:c1:f0:05:42:
96:b5:4f:5f:5b:e2:c9:08:2f:58:97:20:ac:92:af:
0c:1c:e0:f3:2c:37:0d:67:59:09:62:a7:55:23:a4:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:23:90:D2:7A:41:87:50:6B:24:62:27:3E:F2:6B:3B:64:DD:56
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/39kjkNJ6QYdQayRiJz7yaztk3VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.72.0-79.132.91.255
79.135.152.0/23
79.135.155.0/24
80.81.40.0/23
80.81.49.0-80.81.50.255
80.81.52.0/24
80.81.56.0/24
80.254.212.0/22
80.254.220.0/22
83.223.128.0/23
83.223.144.0/24
85.115.96.0/19
85.254.8.0/22
85.254.45.0/24
85.254.47.0/24
85.254.52.0/22
85.254.62.0/24
85.254.66.0/23
85.254.70.0/24
85.254.72.0/24
85.254.104.0/21
85.254.116.0/24
85.254.122.0/24
85.254.133.0/24
85.254.135.0-85.254.136.255
85.254.165.0-85.254.167.255
85.254.171.0/24
85.254.188.0/22
89.18.192.0/19
91.190.38.0-91.190.41.255
91.190.43.0-91.190.44.255
91.190.46.0/24
91.190.62.0/23
159.148.125.0/24
159.148.138.0/24
159.148.148.0/24
159.148.150.0/24
159.148.222.0/24
159.148.242.0/23
Signature Algorithm: sha256WithRSAEncryption
28:49:78:dc:1c:e0:24:7d:14:8a:0c:76:8e:0a:5b:a6:83:2c:
f1:73:80:2c:23:6f:08:16:4f:93:20:e3:db:03:73:8b:82:8d:
c4:c9:01:68:c4:16:a6:b3:ea:02:ee:c1:49:f0:32:d0:37:5e:
32:2f:f8:6e:5f:86:04:c9:eb:c3:c5:d4:52:40:cd:58:83:7b:
2d:02:03:5f:7b:48:b0:9a:32:2a:1f:02:31:5f:de:61:ea:d7:
79:15:06:e8:69:40:58:21:b6:d8:89:56:0f:9c:01:4c:e3:39:
26:90:f9:27:ac:de:fc:59:75:92:a5:76:ad:a5:2a:93:94:73:
2a:bf:52:ff:a0:8e:f6:3f:f9:6b:ce:41:b8:05:29:5d:4b:8b:
df:b0:dd:e9:a8:1a:a9:2a:a8:59:a2:cd:c0:ff:68:c1:ab:85:
53:8c:4d:6f:37:da:eb:61:2e:ca:53:42:73:57:4b:4d:38:35:
41:aa:ba:f2:d3:46:a1:d5:87:a6:5c:15:07:7c:ec:2a:2d:19:
22:a8:19:06:ea:e4:f3:fa:f5:c1:bc:c9:1a:0d:6f:db:b4:5f:
61:86:09:b5:06:4f:2f:80:0f:20:f3:7c:13:c5:fa:d3:be:3a:
5a:a1:00:79:f1:92:15:1c:ba:0e:5d:b5:b6:bd:1a:41:29:71:
07:dc:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:12 2025 by rpki-client