Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jTpWt5-pHTXU1Npbh06cRYT2irM.roa
File: jTpWt5-pHTXU1Npbh06cRYT2irM.roa (raw, json)
Hash identifier: MA72/XTCtRcIW2OvEaG7AQits1kPrbhbxCuf9cys5HQ=
Subject key identifier: 8D:3A:56:B7:9F:A9:1D:35:D4:D4:DA:5B:87:4E:9C:45:84:F6:8A:B3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0199E69302B724F8AE7F5D0867E595D591EE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jTpWt5-pHTXU1Npbh06cRYT2irM.roa
Signing time: Wed 15 Oct 2025 06:33:38 +0000
ROA not before: Wed 15 Oct 2025 06:33:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.57.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.147.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.217.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.20.0/23 maxlen: 23
217.156.41.0/24 maxlen: 24
217.156.92.0/24 maxlen: 24
217.156.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:93:02:b7:24:f8:ae:7f:5d:08:67:e5:95:d5:91:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 15 06:33:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d3a56b79fa91d35d4d4da5b874e9c4584f68ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:da:24:44:03:1c:5f:b5:02:f9:ab:db:b1:
52:50:24:59:79:69:57:a1:8a:3b:5e:45:66:b3:57:
62:4e:92:85:4a:5a:c5:30:50:75:f6:51:17:15:64:
4a:2a:47:b9:e0:90:79:00:b0:9b:37:4b:22:69:9a:
97:47:9a:09:ca:32:24:54:50:36:1e:c3:49:e8:d0:
da:ec:04:e5:8d:52:e6:16:43:6c:f5:8e:1e:98:26:
2a:65:16:1b:35:6a:e2:bc:4a:db:54:cf:34:35:da:
00:1f:ec:a0:26:9b:d8:07:21:5b:b8:82:29:f2:d4:
5b:c5:39:e5:88:73:3d:7d:9e:00:08:5c:01:4c:6f:
bb:5a:6d:7d:ce:23:97:73:f5:1c:1a:dd:c3:ff:02:
3a:cb:1f:f4:96:a2:d0:f4:67:69:3b:33:58:d1:8a:
d9:b4:94:ab:dc:44:ee:34:4d:c0:f6:bd:9b:6b:ab:
25:fd:32:81:46:47:7b:ee:1b:50:c3:d8:19:7a:a7:
54:c0:df:af:72:2d:01:b5:84:e9:63:09:45:9d:bf:
ce:b3:bc:57:93:90:6e:a4:46:b1:f6:f2:85:b7:52:
86:56:60:53:cb:57:c7:03:30:91:87:f3:ef:4a:7e:
0f:cb:28:02:2c:91:c6:26:95:24:2f:06:4e:13:77:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:56:B7:9F:A9:1D:35:D4:D4:DA:5B:87:4E:9C:45:84:F6:8A:B3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jTpWt5-pHTXU1Npbh06cRYT2irM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.57.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.147.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.217.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
217.156.14.0/24
217.156.20.0/23
217.156.41.0/24
217.156.92.0/24
217.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
22:83:a0:97:d3:af:0c:ee:14:46:c0:13:42:47:c2:b8:44:9b:
8e:b6:95:ff:69:6b:f1:a7:0e:00:76:ec:eb:48:f7:c7:da:d3:
d7:0c:6f:83:a3:64:64:9f:26:5e:26:fc:d1:5f:66:5c:ac:c0:
6d:44:fd:06:e5:72:60:6b:3f:c4:3e:c9:f4:86:6c:36:1b:de:
81:ab:cd:e5:a1:cc:9a:0b:db:3f:a9:95:3c:9a:44:86:83:06:
c4:3b:d3:e6:d6:1d:74:82:31:ec:45:cd:9f:a0:98:3a:42:8d:
6a:23:19:27:f0:0d:08:11:c8:fe:6c:7d:46:ac:1a:88:14:c3:
ac:77:12:59:90:90:cb:d0:00:62:2a:dd:53:60:91:f8:e4:28:
c1:fa:29:6d:4f:0d:38:ce:9d:34:80:51:dc:33:b8:a9:04:e7:
cd:75:16:1c:68:e7:11:a1:7e:d4:79:0c:bc:a5:9c:ba:59:bb:
2f:4c:b5:55:35:6e:bd:56:8f:a0:a0:b2:d2:41:2d:44:ee:e3:
02:50:91:0b:13:d6:25:1f:26:15:75:9b:e9:d9:7c:79:dc:ec:
ec:38:9f:5f:05:cc:4b:82:94:7d:4b:af:82:38:93:14:96:67:
c4:71:48:f4:ef:25:86:22:92:f5:6f:0a:10:6b:dd:36:50:46:
d7:c5:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:27 2025 by rpki-client