Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IBAFRCxSBmVht5Gas-xwiEljRmg.roa
File: IBAFRCxSBmVht5Gas-xwiEljRmg.roa (raw, json)
Hash identifier: AkQu/IwVh7fD9Jh31b9eXObowdEjLL3RRHHxpNRsIgw=
Subject key identifier: 20:10:05:44:2C:52:06:65:61:B7:91:9A:B3:EC:70:88:49:63:46:68
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199E22DD3AC3CB597713FA188D75E84A925
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IBAFRCxSBmVht5Gas-xwiEljRmg.roa
Signing time: Tue 14 Oct 2025 10:04:38 +0000
ROA not before: Tue 14 Oct 2025 10:04:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138160
IP address blocks: 84.233.132.0/23 maxlen: 24
84.233.164.0/23 maxlen: 24
84.233.200.0/23 maxlen: 24
84.233.220.0/23 maxlen: 24
84.233.232.0/23 maxlen: 24
84.233.240.0/23 maxlen: 24
195.86.8.0/21 maxlen: 24
195.86.16.0/22 maxlen: 24
195.86.20.0/23 maxlen: 24
195.86.28.0/22 maxlen: 24
195.86.32.0/22 maxlen: 24
195.86.36.0/23 maxlen: 24
195.86.44.0/22 maxlen: 24
195.86.50.0/23 maxlen: 24
195.86.52.0/22 maxlen: 24
195.86.60.0/22 maxlen: 24
195.86.64.0/23 maxlen: 24
195.86.68.0/22 maxlen: 24
195.86.72.0/21 maxlen: 24
195.86.80.0/20 maxlen: 24
195.86.96.0/20 maxlen: 24
195.86.114.0/23 maxlen: 24
195.86.116.0/22 maxlen: 24
195.86.120.0/22 maxlen: 24
195.86.128.0/23 maxlen: 24
195.86.132.0/22 maxlen: 24
195.86.136.0/21 maxlen: 24
195.86.144.0/20 maxlen: 24
195.86.162.0/23 maxlen: 24
195.86.164.0/22 maxlen: 24
195.86.168.0/21 maxlen: 24
195.86.176.0/20 maxlen: 24
195.86.192.0/20 maxlen: 24
195.86.212.0/22 maxlen: 24
195.86.216.0/23 maxlen: 24
195.86.224.0/21 maxlen: 24
195.86.232.0/22 maxlen: 24
195.86.236.0/23 maxlen: 24
195.86.242.0/23 maxlen: 24
195.86.244.0/22 maxlen: 24
195.86.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:2d:d3:ac:3c:b5:97:71:3f:a1:88:d7:5e:84:a9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 14 10:04:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=201005442c52066561b7919ab3ec708849634668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:36:4e:7a:5f:5f:f8:74:3e:ca:78:42:76:
4c:bd:de:b3:18:26:79:20:f4:c8:fa:f4:a7:de:59:
45:b9:12:40:b2:13:85:22:fa:84:2f:e1:88:dc:cd:
c9:81:39:86:f3:7f:aa:77:c0:77:95:66:2d:a5:48:
3b:90:64:fd:b8:39:28:3b:b4:7c:79:e0:e7:0c:68:
b3:1d:65:cf:3e:36:30:10:a6:ba:b7:ca:fd:98:1d:
68:d6:e2:ce:dc:a6:75:6b:16:ec:fe:03:32:bc:03:
53:26:f7:4b:4b:cc:28:25:6c:5e:53:bf:d6:7d:9e:
13:d8:bc:f0:43:ab:d4:3f:3e:8f:82:60:9c:6a:25:
71:0a:95:b9:83:e7:7b:57:4b:9b:91:d3:94:80:0e:
e1:e4:ce:dd:b6:ed:a1:16:76:fc:a6:f4:67:b8:95:
b2:a2:77:f8:de:e8:77:3d:3e:10:be:5e:ef:39:45:
94:5c:63:e2:d7:4f:64:28:3a:99:0d:c7:bf:07:06:
7d:85:6d:2e:df:37:96:11:36:31:f0:fd:3d:47:55:
95:44:fe:70:1c:a2:17:36:e4:75:a4:cf:4d:0b:26:
7c:cb:a8:7c:66:48:a4:06:f5:25:37:3d:b8:25:08:
a4:d3:87:e5:4a:91:65:0a:5c:db:01:18:5f:b1:a7:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:05:44:2C:52:06:65:61:B7:91:9A:B3:EC:70:88:49:63:46:68
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IBAFRCxSBmVht5Gas-xwiEljRmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.233.132.0/23
84.233.164.0/23
84.233.200.0/23
84.233.220.0/23
84.233.232.0/23
84.233.240.0/23
195.86.8.0-195.86.21.255
195.86.28.0-195.86.37.255
195.86.44.0/22
195.86.50.0-195.86.55.255
195.86.60.0-195.86.65.255
195.86.68.0-195.86.111.255
195.86.114.0-195.86.123.255
195.86.128.0/23
195.86.132.0-195.86.159.255
195.86.162.0-195.86.207.255
195.86.212.0-195.86.217.255
195.86.224.0-195.86.237.255
195.86.242.0-195.86.255.255
Signature Algorithm: sha256WithRSAEncryption
c2:db:b4:c4:46:02:bd:ef:aa:00:76:44:19:b1:91:b9:f4:de:
8e:1b:0e:c5:8a:7d:ef:87:b6:3d:a2:98:f8:d2:89:87:c5:14:
cf:70:3e:4d:86:f9:b2:16:09:47:c2:62:ac:60:90:a4:c6:79:
e1:2a:db:84:44:58:bc:0b:c0:dd:2e:7d:b1:7c:54:81:fb:11:
00:28:25:4e:8f:95:52:0b:17:8b:9f:2f:48:e8:59:e3:5f:c3:
a5:a8:69:62:82:b7:77:db:bf:01:2e:22:81:16:89:aa:87:ef:
1f:cb:7c:82:5b:3a:d9:82:27:bb:d6:fe:44:70:8b:45:f4:46:
ec:07:be:99:1d:9e:08:9a:11:e3:e8:f9:c7:56:2b:bb:e3:7a:
b3:28:36:61:63:c9:d4:d0:e5:a0:46:11:d7:67:ae:46:08:e1:
ea:ab:41:c5:3e:cf:6d:77:70:3d:f1:f4:d8:0c:1f:1d:a8:e6:
a3:5a:22:0e:5f:b0:b9:a4:0a:b9:32:04:4a:c4:70:84:64:f3:
fb:f7:fc:a4:0b:e4:0b:e9:98:d1:2c:8a:ac:ff:29:80:0b:19:
3e:b3:a4:ad:d4:5c:a1:df:d1:9f:71:33:5e:e8:70:09:b9:55:
6a:21:b9:69:f0:94:43:cb:8a:ca:08:ae:32:75:2f:7e:32:09:
83:80:11:1d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgISAZniLdOsPLWXcT+hiNdehKklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDE0MTAwNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDEwMDU0NDJjNTIwNjY1NjFiNzkxOWFiM2VjNzA4ODQ5NjM0NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jg2TnpfX/h0Psp4QnZMvd6zGCZ5
IPTI+vSn3llFuRJAshOFIvqEL+GI3M3JgTmG83+qd8B3lWYtpUg7kGT9uDkoO7R8
eeDnDGizHWXPPjYwEKa6t8r9mB1o1uLO3KZ1axbs/gMyvANTJvdLS8woJWxeU7/W
fZ4T2LzwQ6vUPz6PgmCcaiVxCpW5g+d7V0ubkdOUgA7h5M7dtu2hFnb8pvRnuJWy
onf43uh3PT4Qvl7vOUWUXGPi109kKDqZDce/BwZ9hW0u3zeWETYx8P09R1WVRP5w
HKIXNuR1pM9NCyZ8y6h8ZkikBvUlNz24JQik04flSpFlClzbARhfsadY6wIDAQAB
o4IC0TCCAs0wHQYDVR0OBBYEFCAQBUQsUgZlYbeRmrPscIhJY0ZoMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSUJBRlJDeFNCbVZodDVHYXMteHdpRWxqUm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHmBggrBgEFBQcBBwEB/wSB1jCB0zCB0AQCAAEwgckDBAFU
6YQDBAFU6aQDBAFU6cgDBAFU6dwDBAFU6egDBAFU6fAwDAMEA8NWCAMEAcNWFDAM
AwQCw1YcAwQBw1YkAwQCw1YsMAwDBAHDVjIDBAPDVjAwDAMEAsNWPAMEAcNWQDAM
AwQCw1ZEAwQEw1ZgMAwDBAHDVnIDBALDVngDBAHDVoAwDAMEAsNWhAMEBcNWgDAM
AwQBw1aiAwQEw1bAMAwDBALDVtQDBAHDVtgwDAMEBcNW4AMEAcNW7DALAwQBw1by
AwMAw1YwDQYJKoZIhvcNAQELBQADggEBAMLbtMRGAr3vqgB2RBmxkbn03o4bDsWK
fe+Htj2imPjSiYfFFM9wPk2G+bIWCUfCYqxgkKTGeeEq24REWLwLwN0ufbF8VIH7
EQAoJU6PlVILF4ufL0joWeNfw6WoaWKCt3fbvwEuIoEWiaqH7x/LfIJbOtmCJ7vW
/kRwi0X0RuwHvpkdngiaEePo+cdWK7vjerMoNmFjydTQ5aBGEddnrkYI4eqrQcU+
z213cD3x9NgMHx2o5qNaIg5fsLmkCrkyBErEcIRk8/v3/KQL5AvpmNEsiqz/KYAL
GT6zpK3UXKHf0Z9xM17ocAm5VWohuWnwlEPLisoIrjJ1L34yCYOAER0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:04 2025 by rpki-client