Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/TO40FjbIwGNQNwtqPj8kwc1ZTTA.roa
File: TO40FjbIwGNQNwtqPj8kwc1ZTTA.roa (raw, json)
Hash identifier: CxCIaev63Gqq5Rl8++kPvXMtj4T/C8ceRG4EudeHUmA=
Subject key identifier: 4C:EE:34:16:36:C8:C0:63:50:37:0B:6A:3E:3F:24:C1:CD:59:4D:30
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 0199DF1B63AC4429D878A55018408D3E7BC3
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/TO40FjbIwGNQNwtqPj8kwc1ZTTA.roa
Signing time: Mon 13 Oct 2025 19:45:38 +0000
ROA not before: Mon 13 Oct 2025 19:45:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12663
IP address blocks: 37.25.128.0/17 maxlen: 24
46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
47.73.0.0/16 maxlen: 24
47.73.1.0/24 maxlen: 24
47.73.8.0/21 maxlen: 21
47.73.8.0/23 maxlen: 23
47.73.10.0/23 maxlen: 23
47.73.12.0/23 maxlen: 23
47.73.15.0/24 maxlen: 24
47.73.36.0/23 maxlen: 23
47.73.37.0/24 maxlen: 24
47.73.40.0/24 maxlen: 24
47.73.42.0/24 maxlen: 24
47.73.44.0/22 maxlen: 22
47.73.44.0/23 maxlen: 23
47.73.46.0/23 maxlen: 23
47.73.56.0/23 maxlen: 23
47.73.63.0/24 maxlen: 24
47.73.67.0/24 maxlen: 24
47.73.68.0/24 maxlen: 24
47.73.73.0/24 maxlen: 24
47.73.75.0/24 maxlen: 24
47.73.77.0/24 maxlen: 24
47.73.78.0/24 maxlen: 24
47.73.79.0/24 maxlen: 24
47.73.88.0/22 maxlen: 22
47.73.88.0/24 maxlen: 24
47.73.89.0/24 maxlen: 24
47.73.90.0/24 maxlen: 24
47.73.91.0/24 maxlen: 24
47.73.93.0/24 maxlen: 24
47.73.94.0/24 maxlen: 24
47.73.96.0/21 maxlen: 21
47.73.104.0/23 maxlen: 23
47.73.104.0/24 maxlen: 24
47.73.105.0/24 maxlen: 24
47.73.106.0/24 maxlen: 24
47.73.108.0/23 maxlen: 23
47.73.108.0/24 maxlen: 24
47.73.109.0/24 maxlen: 24
47.73.110.0/24 maxlen: 24
47.73.120.0/24 maxlen: 24
47.73.121.0/24 maxlen: 24
47.73.123.0/24 maxlen: 24
47.73.124.0/24 maxlen: 24
47.73.125.0/24 maxlen: 24
47.73.141.0/24 maxlen: 24
47.73.212.0/24 maxlen: 24
47.73.218.0/24 maxlen: 24
47.73.220.0/24 maxlen: 24
47.73.224.0/21 maxlen: 21
47.73.248.0/24 maxlen: 24
47.73.252.0/22 maxlen: 22
62.213.128.0/19 maxlen: 19
85.205.0.0/16 maxlen: 24
86.104.216.0/22 maxlen: 22
89.32.48.0/21 maxlen: 21
92.114.8.0/21 maxlen: 21
108.179.64.0/18 maxlen: 24
130.195.32.0/20 maxlen: 20
130.195.64.0/19 maxlen: 19
130.195.96.0/19 maxlen: 19
130.195.128.0/18 maxlen: 24
130.195.200.0/21 maxlen: 21
139.47.160.0/19 maxlen: 24
139.47.192.0/18 maxlen: 24
145.230.0.0/16 maxlen: 24
176.125.0.0/19 maxlen: 24
188.240.84.0/22 maxlen: 22
192.125.128.0/17 maxlen: 24
195.232.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
208.53.128.0/18 maxlen: 18
2a01:818:1000::/44 maxlen: 44
2a01:818:1060::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:1b:63:ac:44:29:d8:78:a5:50:18:40:8d:3e:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Oct 13 19:45:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cee341636c8c06350370b6a3e3f24c1cd594d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:9f:78:3e:b0:84:1b:df:af:98:b1:96:85:
63:7f:06:4e:17:25:7a:2a:d4:bf:85:bc:6d:0e:73:
e6:4a:24:31:45:6b:fc:22:b6:f1:8f:2f:84:39:58:
c9:42:7f:07:a9:2e:d7:88:1b:73:3a:bf:6c:87:b4:
62:ff:af:41:6a:f7:1b:c0:f7:96:4f:a2:ae:a4:23:
37:85:61:0e:4b:68:b1:01:e3:dc:18:74:9c:82:a6:
bb:6f:9c:96:69:eb:67:5a:98:f5:17:3c:cf:ad:4a:
8d:1d:01:95:15:22:0f:d5:e8:2e:88:5d:9a:db:7b:
be:09:51:af:d1:cb:3d:fb:6b:f3:24:31:cf:66:d8:
af:40:df:95:09:45:69:01:7b:95:f0:46:f5:04:4e:
2b:3f:c6:57:40:5a:c7:07:b3:f9:09:1c:dc:cf:2a:
f6:79:90:8d:89:ac:1f:47:72:45:f2:ac:53:3d:88:
c9:8d:2b:19:0e:e2:46:0d:ae:1e:cc:d5:fb:8c:09:
1b:4e:84:a7:ff:d9:a9:3a:46:4d:40:da:5b:ec:d0:
32:87:2a:6f:09:27:d8:3d:f5:53:e1:5d:b1:4c:fb:
d3:c9:66:3b:e8:24:48:d1:2d:63:69:79:10:1d:48:
c5:4a:0e:4e:9f:c6:47:45:d0:b0:90:4b:c1:b4:08:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:34:16:36:C8:C0:63:50:37:0B:6A:3E:3F:24:C1:CD:59:4D:30
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/TO40FjbIwGNQNwtqPj8kwc1ZTTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
46.108.0.0/16
46.190.128.0/17
47.73.0.0/16
62.213.128.0/19
85.205.0.0/16
86.104.216.0/22
89.32.48.0/21
92.114.8.0/21
108.179.64.0/18
130.195.32.0/20
130.195.64.0-130.195.191.255
130.195.200.0/21
139.47.160.0-139.47.255.255
145.230.0.0/16
176.125.0.0/19
188.240.84.0/22
192.125.128.0/17
195.232.128.0-195.233.255.255
208.53.128.0/18
IPv6:
2a01:818:1000::/44
2a01:818:1060::/44
Signature Algorithm: sha256WithRSAEncryption
21:7b:ae:9a:41:8b:66:83:15:85:bb:a0:dd:b0:fa:20:3c:c1:
fa:88:eb:ef:cc:42:b5:8a:ee:f0:be:8f:cd:cb:8c:17:24:1e:
a3:3b:4c:2d:35:79:6c:bb:4a:c5:ea:be:13:91:12:de:4c:ea:
15:ff:56:8f:4c:26:06:6e:50:66:ee:42:70:ec:f6:c1:b7:54:
37:41:3a:aa:37:6c:99:97:e7:84:6e:61:4e:1c:8c:70:01:2a:
74:38:93:55:b6:66:8c:d2:6f:b3:c8:c2:bb:5d:f6:6d:64:ce:
43:bf:b1:75:29:87:e9:7d:38:cb:84:ee:53:9e:9a:47:f7:1d:
9f:cf:7d:b6:a1:08:6e:bc:e8:85:3d:a2:9e:7e:fd:57:65:48:
83:8f:2a:c6:57:91:b6:65:8a:a2:ac:2d:1d:68:a4:48:0d:9e:
df:03:69:6a:29:f5:e7:72:c7:ea:d7:4a:d2:34:7b:2a:8b:7c:
4e:a4:5e:f4:5f:97:a9:4b:a2:30:a3:6d:0f:b1:d3:e6:dd:5d:
51:b6:72:2e:48:66:64:e1:fd:a1:23:c7:ea:e6:e8:b1:19:43:
bf:07:f8:4f:76:b9:20:2a:b4:81:da:4c:2d:d8:74:03:be:fa:
3d:f9:58:74:79:28:a9:10:78:ee:d0:da:dc:31:f8:8c:ba:09:
a7:4d:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:06 2025 by rpki-client