Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oQ2AeIz7TJta6nFPLAIXcDXhUQY.roa
File: oQ2AeIz7TJta6nFPLAIXcDXhUQY.roa (raw, json)
Hash identifier: zA0FrRbNYU5XxtE2T0vicEZa4SShcBw739jboBEwoEk=
Subject key identifier: A1:0D:80:78:8C:FB:4C:9B:5A:EA:71:4F:2C:02:17:70:35:E1:51:06
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199E49425DA7756A2A7A7A302F477A8036E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oQ2AeIz7TJta6nFPLAIXcDXhUQY.roa
Signing time: Tue 14 Oct 2025 21:15:38 +0000
ROA not before: Tue 14 Oct 2025 21:15:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.175.194.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
94.249.178.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
185.119.18.0/24 maxlen: 24
185.119.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:94:25:da:77:56:a2:a7:a7:a3:02:f4:77:a8:03:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 14 21:15:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10d80788cfb4c9b5aea714f2c02177035e15106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:80:a5:5a:15:b6:cc:9c:5f:27:5c:32:27:
c3:15:fd:15:fe:6d:26:33:ce:02:b9:2c:21:9c:75:
78:3a:7e:d7:74:29:4a:31:73:64:1e:f8:6f:55:4f:
6d:9b:10:65:74:c9:8c:9a:d9:a0:08:f4:fe:97:3a:
6d:88:72:1e:62:d6:a0:ce:af:cc:65:4b:3c:14:b2:
63:a9:4e:88:80:bb:1e:10:e0:fa:77:a9:dd:68:0e:
ca:1e:a6:a1:a0:19:93:e3:68:9e:1c:10:f5:c8:cf:
fc:95:2d:2d:c8:2f:b9:c6:34:e2:43:90:1a:0e:09:
71:54:a5:b7:2c:67:63:45:50:11:ef:47:3e:74:b5:
f9:52:ae:8e:7a:3a:70:14:3d:79:03:9e:57:b1:b9:
d7:2c:1b:bb:6a:4e:6e:43:68:2d:da:19:1a:ac:b2:
28:29:85:03:91:84:66:29:79:a6:5d:a7:86:db:de:
fc:50:27:eb:62:b8:54:3e:f1:40:68:3b:0d:a0:52:
a4:d5:8c:8e:40:a6:81:95:8f:4d:b8:1f:83:48:cf:
6e:07:0d:35:08:0e:dd:bb:4f:6c:78:3c:a7:bd:fc:
f5:c7:ee:ce:95:49:10:29:dc:16:14:31:3c:67:22:
d3:03:13:b0:87:32:f3:56:f8:f6:a8:d7:d4:bd:23:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0D:80:78:8C:FB:4C:9B:5A:EA:71:4F:2C:02:17:70:35:E1:51:06
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oQ2AeIz7TJta6nFPLAIXcDXhUQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.194.0/24
5.231.203.0/24
89.106.86.0/23
89.144.53.0-89.144.54.255
94.249.178.0-94.249.182.255
94.249.184.0-94.249.188.255
94.249.198.0-94.249.206.255
94.249.225.0-94.249.227.255
94.249.243.0-94.249.244.255
94.249.246.0-94.249.249.255
178.18.149.0/24
185.119.18.0/23
Signature Algorithm: sha256WithRSAEncryption
29:10:47:77:0c:cd:54:c2:2a:2f:9f:d6:d8:5f:29:c8:17:7f:
20:21:3c:87:b7:db:d2:ab:a7:1c:85:e6:73:59:92:ff:d2:93:
d6:2d:bf:44:61:bb:c9:2e:e7:4f:0b:df:1a:a3:ad:a8:4f:9e:
c2:c6:32:67:bc:a6:8b:4a:71:50:67:6f:8f:dd:10:96:77:18:
22:29:95:86:38:03:8d:85:a2:cc:5d:18:56:31:25:b8:fc:61:
a5:7c:fb:38:ca:94:6a:6c:f8:74:1d:c7:51:8d:cf:a1:5b:38:
e4:41:7d:a4:0d:1b:f5:ff:d7:03:5e:85:d8:32:f8:5e:e3:82:
0f:07:88:65:9b:7d:b4:55:be:15:ca:01:a9:78:fe:9b:35:ac:
df:7c:ec:2e:8b:8a:ca:54:22:d9:74:83:90:c0:f8:8d:c9:1a:
b7:e6:e0:52:17:35:c9:0d:2e:e7:29:14:1e:e8:d0:93:f8:da:
40:76:59:df:12:93:fe:0b:a6:31:55:9d:42:9c:7a:45:bb:b9:
bc:8c:f9:63:e2:4d:85:08:b2:64:94:29:bf:a4:5e:b4:f4:fa:
da:83:eb:a4:b1:5b:6c:4d:03:1d:8a:a0:ea:bc:aa:50:39:72:
28:20:0f:26:bd:da:2e:3a:1b:43:ee:9d:0c:29:1e:43:a1:fc:
1f:93:8e:a7
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZnklCXad1aip6ejAvR3qANuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDE0MjExNTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTBkODA3ODhjZmI0YzliNWFlYTcxNGYyYzAyMTc3MDM1ZTE1MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2mApVoVtsycXydcMifDFf0V/m0m
M84CuSwhnHV4On7XdClKMXNkHvhvVU9tmxBldMmMmtmgCPT+lzptiHIeYtagzq/M
ZUs8FLJjqU6IgLseEOD6d6ndaA7KHqahoBmT42ieHBD1yM/8lS0tyC+5xjTiQ5Aa
DglxVKW3LGdjRVAR70c+dLX5Uq6OejpwFD15A55XsbnXLBu7ak5uQ2gt2hkarLIo
KYUDkYRmKXmmXaeG2978UCfrYrhUPvFAaDsNoFKk1YyOQKaBlY9NuB+DSM9uBw01
CA7du09seDynvfz1x+7OlUkQKdwWFDE8ZyLTAxOwhzLzVvj2qNfUvSO3AwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFKENgHiM+0ybWupxTywCF3A14VEGMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvb1EyQWVJejdUSnRhNm5GUExBSVhjRFhoVVFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAF
r8IDBAAF58sDBAFZalYwDAMEAFmQNQMEAFmQNjAMAwQBXvmyAwQAXvm2MAwDBANe
+bgDBABe+bwwDAMEAV75xgMEAF75zjAMAwQAXvnhAwQCXvngMAwDBABe+fMDBABe
+fQwDAMEAV759gMEAV75+AMEALISlQMEAbl3EjANBgkqhkiG9w0BAQsFAAOCAQEA
KRBHdwzNVMIqL5/W2F8pyBd/ICE8h7fb0qunHIXmc1mS/9KT1i2/RGG7yS7nTwvf
GqOtqE+ewsYyZ7ymi0pxUGdvj90QlncYIimVhjgDjYWizF0YVjEluPxhpXz7OMqU
amz4dB3HUY3PoVs45EF9pA0b9f/XA16F2DL4XuOCDweIZZt9tFW+FcoBqXj+mzWs
33zsLouKylQi2XSDkMD4jckat+bgUhc1yQ0u5ykUHujQk/jaQHZZ3xKT/gumMVWd
Qpx6Rbu5vIz5Y+JNhQiyZJQpv6RetPT62oPrpLFbbE0DHYqg6ryqUDlyKCAPJr3a
LjobQ+6dDCkeQ6H8H5OOpw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:19 2025 by rpki-client