Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Sp_AwQEQ502wSAdDoXALwwjuTq0.roa
File: Sp_AwQEQ502wSAdDoXALwwjuTq0.roa (raw, json)
Hash identifier: x3326z+EE69lKq3xqRD9lBhKqDvCEycDJkLt0CfCGyI=
Subject key identifier: 4A:9F:C0:C1:01:10:E7:4D:B0:48:07:43:A1:70:0B:C3:08:EE:4E:AD
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 0199F1E7B80D1DA608BFD8D10F3B53C2BC9C
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Sp_AwQEQ502wSAdDoXALwwjuTq0.roa
Signing time: Fri 17 Oct 2025 11:21:58 +0000
ROA not before: Fri 17 Oct 2025 11:21:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.153.0/24 maxlen: 24
45.91.225.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:e7:b8:0d:1d:a6:08:bf:d8:d1:0f:3b:53:c2:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Oct 17 11:21:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9fc0c10110e74db0480743a1700bc308ee4ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:24:4b:f5:a2:37:e6:9a:40:fb:bf:18:0d:
74:4d:94:13:db:3e:f5:b3:bf:b0:83:9f:6f:23:49:
91:4b:1f:c6:41:60:5c:9d:68:8f:dd:4c:7e:61:1e:
f5:2f:ba:43:0e:3b:dd:d8:8c:9e:78:7d:b1:31:53:
6c:90:3e:05:7a:34:64:e9:a9:3b:98:29:17:ee:f5:
30:8e:9f:53:54:e6:e3:1e:a4:aa:3b:82:21:be:35:
02:95:27:f9:d0:ad:cf:c6:85:be:73:c1:d9:0c:d4:
21:e0:17:61:6e:01:78:84:39:66:1b:cb:27:ff:68:
96:38:af:53:c4:e2:7d:ad:cd:8c:1d:a5:27:11:0e:
c7:a9:ed:bc:d5:e2:7f:df:8f:3a:8c:c7:f6:6f:30:
a9:0e:cc:d7:4b:8a:8e:1b:e6:05:ec:15:fd:d5:4e:
85:e7:00:f0:11:64:86:11:ce:81:34:26:ab:08:16:
51:f0:f7:60:ce:c9:ce:f8:48:76:96:6c:77:e9:df:
68:cf:5a:b8:f7:5d:6c:49:2f:dc:41:17:cb:6a:84:
b7:f0:bf:4d:42:bd:c0:f5:ca:af:b7:d3:22:13:a8:
04:48:ca:4f:fe:48:e7:a7:80:4b:bc:d1:62:50:41:
c1:8b:0c:76:db:b3:3c:09:ba:79:88:2c:4c:2a:17:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:C0:C1:01:10:E7:4D:B0:48:07:43:A1:70:0B:C3:08:EE:4E:AD
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Sp_AwQEQ502wSAdDoXALwwjuTq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0/24
45.91.225.0-45.91.227.255
91.204.224.0/22
185.202.101.0/24
193.239.150.0/23
193.239.154.0/24
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2e:2d:6b:b3:00:f6:53:e9:55:a0:53:52:98:84:ab:d1:23:
92:45:67:64:05:e2:10:4c:b3:b6:0e:4d:ad:b7:98:15:bd:10:
05:33:97:ce:91:fb:e8:fe:41:de:3e:06:c9:93:3b:80:76:90:
c1:87:ee:a4:b2:76:5f:7f:9b:88:86:4d:ab:f9:7b:4f:8d:c3:
35:55:54:96:f3:86:a2:47:0c:39:7c:8d:e0:c3:c2:81:e8:8b:
2b:8e:09:7c:4a:ae:ba:10:f3:a4:8e:c4:4b:8e:26:1e:f2:fc:
7d:57:c2:c9:59:e4:b9:c5:47:c9:35:a6:07:d2:f4:57:65:ee:
b4:2c:97:41:c4:a2:cf:5a:c3:6d:f9:7e:4b:70:e8:30:6c:f7:
ae:08:a5:af:e9:4b:32:a7:bc:dc:ba:be:87:51:4d:63:6c:a3:
f5:9e:35:66:04:52:ad:6a:43:d6:1c:94:4f:66:08:5c:74:0b:
65:eb:bb:53:df:5e:49:d0:5a:b5:01:94:26:4b:a4:91:37:ac:
7f:95:3e:d5:8e:5c:c1:cc:9b:eb:61:e9:6e:5d:24:20:cc:a3:
8e:e5:c3:99:f0:d0:39:d1:3a:9a:7b:29:9c:2d:95:f3:08:7d:
97:37:01:20:47:5a:78:7c:fc:d2:39:f0:ac:44:56:6f:1f:11:
d2:95:54:ab
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZnx57gNHaYIv9jRDztTwrycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjUxMDE3MTEyMTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTlmYzBjMTAxMTBlNzRkYjA0ODA3NDNhMTcwMGJjMzA4ZWU0ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q0kS/WiN+aaQPu/GA10TZQT2z71
s7+wg59vI0mRSx/GQWBcnWiP3Ux+YR71L7pDDjvd2IyeeH2xMVNskD4FejRk6ak7
mCkX7vUwjp9TVObjHqSqO4IhvjUClSf50K3PxoW+c8HZDNQh4BdhbgF4hDlmG8sn
/2iWOK9TxOJ9rc2MHaUnEQ7Hqe281eJ/3486jMf2bzCpDszXS4qOG+YF7BX91U6F
5wDwEWSGEc6BNCarCBZR8PdgzsnO+Eh2lmx36d9oz1q4911sSS/cQRfLaoS38L9N
Qr3A9cqvt9MiE6gESMpP/kjnp4BLvNFiUEHBiwx227M8Cbp5iCxMKhcPawIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFEqfwMEBEOdNsEgHQ6FwC8MI7k6tMB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvU3BfQXdRRVE1MDJ3U0FkRG9YQUx3d2p1VHEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAAjuZMAwD
BAAtW+EDBAItW+ADBAJbzOADBAC5ymUDBAHB75YDBADB75oDBADCftcwDQYJKoZI
hvcNAQELBQADggEBACUuLWuzAPZT6VWgU1KYhKvRI5JFZ2QF4hBMs7YOTa23mBW9
EAUzl86R++j+Qd4+BsmTO4B2kMGH7qSydl9/m4iGTav5e0+NwzVVVJbzhqJHDDl8
jeDDwoHoiyuOCXxKrroQ86SOxEuOJh7y/H1XwslZ5LnFR8k1pgfS9Fdl7rQsl0HE
os9aw235fktw6DBs964Ipa/pSzKnvNy6vodRTWNso/WeNWYEUq1qQ9YclE9mCFx0
C2Xru1PfXknQWrUBlCZLpJE3rH+VPtWOXMHMm+th6W5dJCDMo47lw5nw0DnROpp7
KZwtlfMIfZc3ASBHWnh8/NI58KxEVm8fEdKVVKs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:16 2025 by rpki-client