Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/u_ghsQLM6dmD-XVgn-Vg2mnh0tk.roa
File: u_ghsQLM6dmD-XVgn-Vg2mnh0tk.roa (raw, json)
Hash identifier: lRkXttFTDs1AOwYwNPIjE7pzB4e1N5TVkpZRKvN8plQ=
Subject key identifier: BB:F8:21:B1:02:CC:E9:D9:83:F9:75:60:9F:E5:60:DA:69:E1:D2:D9
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 01992AD9D920C516A8D2F2BA68CD4C6A649F
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/u_ghsQLM6dmD-XVgn-Vg2mnh0tk.roa
Signing time: Mon 08 Sep 2025 19:42:23 +0000
ROA not before: Mon 08 Sep 2025 19:42:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.232.0/21 maxlen: 24
37.98.232.0/22 maxlen: 24
37.98.232.0/23 maxlen: 23
37.98.232.0/24 maxlen: 24
37.98.233.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.234.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 24
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
136.242.128.0/17 maxlen: 17
138.12.128.0/17 maxlen: 17
148.139.0.0/16 maxlen: 16
148.139.0.0/24 maxlen: 24
148.139.1.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.4.0/22 maxlen: 24
148.139.8.0/22 maxlen: 24
148.139.12.0/22 maxlen: 24
148.139.16.0/22 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.29.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 24
148.139.48.0/20 maxlen: 24
148.139.64.0/20 maxlen: 24
148.139.80.0/20 maxlen: 24
148.139.96.0/22 maxlen: 24
148.139.100.0/22 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.105.0/24 maxlen: 24
148.139.108.0/22 maxlen: 24
148.139.112.0/22 maxlen: 24
148.139.116.0/22 maxlen: 24
148.139.120.0/22 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.125.0/24 maxlen: 24
148.139.136.0/22 maxlen: 24
148.139.140.0/24 maxlen: 24
148.139.141.0/24 maxlen: 24
148.139.142.0/24 maxlen: 24
148.139.143.0/24 maxlen: 24
148.139.144.0/22 maxlen: 24
148.139.144.0/24 maxlen: 24
148.139.148.0/22 maxlen: 24
148.139.152.0/22 maxlen: 24
148.139.156.0/22 maxlen: 24
148.139.160.0/20 maxlen: 24
148.139.176.0/20 maxlen: 24
148.139.192.0/24 maxlen: 24
148.139.193.0/24 maxlen: 24
148.139.214.0/24 maxlen: 24
148.139.215.0/24 maxlen: 24
148.139.224.0/22 maxlen: 24
148.139.228.0/22 maxlen: 24
157.5.128.0/17 maxlen: 17
157.70.0.0/17 maxlen: 17
163.120.128.0/17 maxlen: 17
165.171.0.0/17 maxlen: 17
2a04:37c0::/29 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:3910::/48 maxlen: 48
2a04:37c0:3920::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:d9:d9:20:c5:16:a8:d2:f2:ba:68:cd:4c:6a:64:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 8 19:42:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbf821b102cce9d983f975609fe560da69e1d2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:c5:c6:3c:4e:b2:2d:c8:d6:85:7d:6a:bd:
6a:76:f7:83:9c:5a:2e:a3:d5:f6:c8:c9:a0:ad:d3:
3a:55:35:f9:ca:fc:35:20:90:3c:9b:2e:53:29:aa:
ae:5b:d6:6d:ef:f8:7e:5e:83:ad:03:92:f0:cd:28:
6a:39:7b:87:be:3a:2e:1b:02:97:6c:94:fe:9b:b0:
43:e1:15:31:32:f0:ef:14:40:b6:e3:dd:b4:a7:da:
e5:90:17:9c:fd:48:8d:13:25:57:1e:ce:a7:fa:9a:
1f:d3:f0:67:2a:d2:e2:26:7b:10:e4:4c:72:64:09:
f2:30:a0:8b:b9:9e:25:58:87:4a:ab:2d:3a:d4:95:
2a:26:da:71:1e:6b:d7:2d:a2:a3:9c:83:fe:c6:9d:
e5:7e:dd:e7:c6:86:ab:b9:31:17:82:56:74:2d:70:
3f:a2:a8:74:af:74:9f:5d:cd:02:eb:bc:cf:4e:03:
92:8e:4e:28:df:33:a1:aa:db:a6:72:d1:a7:de:38:
ff:28:61:9a:36:b6:52:3e:b5:15:d2:6d:da:03:d6:
1c:e1:80:c2:bb:c8:06:22:17:74:c5:b9:37:da:b9:
6c:ca:e3:54:c4:51:b8:99:32:6f:40:6b:6f:6f:5a:
78:b3:51:6d:9b:f2:53:fa:79:b3:04:68:eb:f1:70:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:21:B1:02:CC:E9:D9:83:F9:75:60:9F:E5:60:DA:69:E1:D2:D9
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/u_ghsQLM6dmD-XVgn-Vg2mnh0tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:32:03:f9:00:fa:95:99:22:91:ed:dc:c5:8d:0c:7f:79:63:
3f:18:79:ad:70:e4:00:6f:3b:ea:ea:a7:3b:3d:ec:fb:75:49:
10:f3:a1:eb:c4:63:ac:31:55:65:2b:42:27:6f:0c:90:29:39:
4e:0b:19:fe:44:9a:de:3b:de:50:ed:0e:fc:c3:f5:e0:6e:39:
24:7a:88:2a:fe:e2:be:a7:1e:fa:0e:be:15:08:d8:14:7f:28:
3b:57:6b:77:0e:c1:c5:a5:6e:20:35:ed:df:fe:f5:4f:26:12:
c1:f7:b2:12:0a:79:40:09:32:d1:e1:0b:28:e8:39:2e:5d:66:
c2:07:34:10:40:58:79:1d:7c:36:7a:e7:a1:5c:72:3e:16:48:
2b:8e:ab:d6:8f:10:34:fa:f1:4a:fa:8a:b6:f7:01:c0:00:3b:
e6:e7:fd:17:13:ef:ca:07:22:f6:17:07:44:f9:63:10:f5:44:
75:d7:58:2b:87:89:4f:d9:ff:7e:d8:43:f6:f6:09:6f:83:2b:
91:78:e6:24:0b:b7:d8:77:c9:7a:2d:a7:f0:29:5a:3a:f0:ad:
73:0d:dc:2d:33:f3:c8:14:33:ec:6f:07:7d:27:b6:a3:af:d6:
69:f8:9d:99:4d:59:6a:14:0f:5b:7e:02:51:7f:73:33:0b:24:
12:a7:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:52:15 2025 by rpki-client