Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/vQzAhMwpPmutdIaZx4pns-t0q-U.roa
File: vQzAhMwpPmutdIaZx4pns-t0q-U.roa (raw, json)
Hash identifier: Tkj980CBDkBPyZLJsGJn51P4EivgB58wkSryfRQwrD0=
Subject key identifier: BD:0C:C0:84:CC:29:3E:6B:AD:74:86:99:C7:8A:67:B3:EB:74:AB:E5
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0199F2EE7A49ADCD11D6AB4602293F86CF91
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/vQzAhMwpPmutdIaZx4pns-t0q-U.roa
Signing time: Fri 17 Oct 2025 16:08:59 +0000
ROA not before: Fri 17 Oct 2025 16:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 5.181.20.0/24 maxlen: 24
5.181.21.0/24 maxlen: 24
5.181.22.0/24 maxlen: 24
45.14.244.0/24 maxlen: 24
45.14.245.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.140.146.0/24 maxlen: 24
45.140.147.0/24 maxlen: 24
45.140.167.0/24 maxlen: 24
45.144.28.0/24 maxlen: 24
45.144.29.0/24 maxlen: 24
45.150.65.0/24 maxlen: 24
45.150.67.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
146.19.106.0/24 maxlen: 24
146.19.230.0/24 maxlen: 24
185.33.24.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
185.234.247.0/24 maxlen: 24
195.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:ee:7a:49:ad:cd:11:d6:ab:46:02:29:3f:86:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 17 16:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0cc084cc293e6bad748699c78a67b3eb74abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:f8:e0:30:60:6b:3b:0e:3e:e6:ed:c0:42:
6c:5a:a1:4f:57:4e:61:3c:2d:8e:d4:05:01:5f:a3:
6d:d8:34:ee:59:06:31:a6:f2:ef:c9:e2:22:67:64:
dd:37:a1:d2:8e:da:e2:17:e9:9f:c4:1f:56:46:6a:
9c:61:88:08:4f:ef:13:35:34:b9:a2:76:55:44:9a:
ad:1e:1c:f3:d5:57:7c:72:95:7d:99:03:4f:f5:2c:
ca:33:93:1d:c3:a2:2c:d4:9e:f2:2f:d0:30:cb:ad:
fc:a7:ce:26:14:e7:2e:db:9f:93:76:43:15:12:39:
dc:81:de:11:03:ac:b8:d4:1e:fd:f1:39:32:c1:44:
c1:e9:38:71:0b:fb:eb:22:4a:30:4c:df:c1:4d:85:
2d:2b:38:1a:bf:bf:f5:9b:c0:57:ee:9d:14:18:c9:
68:54:eb:2d:47:60:03:64:b6:4d:45:f5:c8:a2:e2:
c7:bc:b3:92:de:c2:ce:ca:17:ff:64:a0:be:50:85:
a5:6b:6b:e0:e0:60:6e:b0:f7:af:c5:4f:96:57:a2:
6d:80:2c:f3:73:d8:57:cc:b8:12:d6:b6:f1:64:ff:
ac:1b:59:e8:3a:7a:b1:c2:32:eb:d0:45:88:5c:ca:
17:85:9b:3a:cb:6c:a1:1a:c8:20:65:b8:a1:e6:c3:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:C0:84:CC:29:3E:6B:AD:74:86:99:C7:8A:67:B3:EB:74:AB:E5
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/vQzAhMwpPmutdIaZx4pns-t0q-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0-5.181.22.255
45.14.244.0/23
45.14.247.0/24
45.140.146.0/23
45.140.167.0/24
45.144.28.0/23
45.150.65.0/24
45.150.67.0/24
91.194.11.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
146.19.106.0/24
146.19.230.0/24
185.33.24.0/24
185.74.222.0/24
185.234.247.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:26:1b:8c:1a:7f:72:c7:66:e1:eb:25:78:ad:fc:f9:e9:70:
84:9d:e5:ee:c0:ef:54:8d:0a:f0:0f:69:c5:05:a0:e4:6b:29:
ec:9c:f9:fd:b0:78:ce:18:35:4a:e7:f6:89:79:fb:ab:c6:6f:
f9:92:e0:63:da:02:69:50:97:65:0b:c9:eb:d2:31:ab:61:4a:
f4:2b:94:db:67:76:f8:72:25:f5:e1:0c:3b:38:6c:ad:da:04:
4c:0f:d0:f8:38:aa:a4:9d:cf:0b:25:4c:80:04:25:35:32:23:
5a:e9:0e:b4:db:13:ca:a4:46:58:d7:9d:6a:59:a4:f5:55:02:
17:30:1f:88:35:74:84:2d:60:60:1c:3f:96:2c:70:4f:97:d7:
83:16:25:89:3c:18:08:75:cc:61:89:de:e2:a6:91:2d:cb:f7:
2e:2b:39:fe:80:c9:bc:50:96:56:ce:c1:ec:f8:6a:62:98:07:
1d:db:13:d9:81:5a:cb:95:b8:f3:71:f1:07:a0:2f:94:76:55:
d2:13:4b:1f:8d:a9:87:2d:80:3a:3c:be:68:e4:47:4a:75:07:
9e:ac:89:20:a8:b4:8f:ee:26:ef:59:a4:e0:13:0b:bf:40:4e:
70:07:a4:3d:73:ce:e6:47:48:e1:32:12:f1:78:92:f9:a4:2b:
79:4d:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:18 2025 by rpki-client