Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/gA1d2jY3nghc_kTFDgqzR_V4tPo.roa
File: gA1d2jY3nghc_kTFDgqzR_V4tPo.roa (raw, json)
Hash identifier: MVElriob5MX1tbQ4YiwNJ86SZ2jP9GGb5E+1TagXoxo=
Subject key identifier: 80:0D:5D:DA:36:37:9E:08:5C:FE:44:C5:0E:0A:B3:47:F5:78:B4:FA
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01997259FAF0364D6B12CC6AA200CF765FA2
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/gA1d2jY3nghc_kTFDgqzR_V4tPo.roa
Signing time: Mon 22 Sep 2025 16:55:23 +0000
ROA not before: Mon 22 Sep 2025 16:55:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
103.220.220.0/22 maxlen: 24
103.220.220.0/24 maxlen: 24
103.220.221.0/24 maxlen: 24
103.220.222.0/24 maxlen: 24
103.220.223.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.255.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
2a02:7980:200::/45 maxlen: 48
2a02:7980:200::/48 maxlen: 48
2a02:7980:300::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:59:fa:f0:36:4d:6b:12:cc:6a:a2:00:cf:76:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Sep 22 16:55:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800d5dda36379e085cfe44c50e0ab347f578b4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:73:4c:28:7b:3c:1d:16:e3:a4:fe:b5:2f:
5b:85:2a:f5:3f:c1:c1:5c:4a:8a:cd:47:2d:88:6b:
45:66:1d:7b:30:f2:28:e2:8d:21:2f:4b:9a:a4:6a:
f4:b4:fd:52:5d:40:92:af:b5:d8:a9:a7:a5:9d:9b:
1f:bd:f5:0a:13:cf:3a:d5:29:42:0b:1b:13:1e:f6:
c7:28:10:ef:e7:74:88:c2:e5:a8:7d:ea:c0:eb:8b:
7f:91:75:66:66:14:88:9c:ce:7b:d3:8d:07:f4:c2:
a0:05:bc:50:40:bc:d4:3f:37:95:87:3b:cd:3e:ac:
14:8d:82:1c:9d:e0:cb:ac:d6:3c:53:a2:bf:ca:6b:
61:88:68:be:bd:5f:d3:c0:57:65:9d:8e:13:0c:d4:
83:8b:55:35:ca:6d:5d:5b:ff:02:5d:21:11:fe:06:
67:2d:8c:d5:48:e3:e0:53:29:c7:33:ca:93:bb:0b:
7a:37:f2:30:b5:18:db:df:e8:55:06:ae:1e:7e:1e:
61:37:8e:4d:50:16:b7:6d:ca:5a:7c:78:3c:c5:71:
d2:27:a2:02:f6:ad:6a:ea:56:2c:9d:ee:0a:d3:50:
7a:f2:90:ac:3f:44:4e:bd:7b:e8:32:0b:3e:c7:5e:
a7:72:00:11:30:59:0f:61:a1:51:76:cb:a5:7d:41:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:5D:DA:36:37:9E:08:5C:FE:44:C5:0E:0A:B3:47:F5:78:B4:FA
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/gA1d2jY3nghc_kTFDgqzR_V4tPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
103.220.220.0/22
103.245.116.0/22
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
01:9f:29:20:6a:44:4c:86:47:57:de:88:5a:49:27:0d:92:e1:
f6:e8:26:82:48:d5:ae:1a:e3:ed:01:18:7a:63:04:b9:b4:41:
67:12:85:2e:1c:38:9a:ee:1e:0c:1d:e9:e4:b0:dc:e0:15:5d:
c7:ce:b0:82:00:f1:ce:35:87:27:5e:2d:ba:f4:0d:d8:f4:5c:
b2:e0:95:4b:60:fd:3f:be:98:b3:50:fe:66:e6:76:64:7e:c5:
57:5e:e2:1d:71:97:2b:10:2f:80:eb:bb:76:40:e7:7b:17:10:
2d:0b:d3:5b:c3:6e:dc:90:dc:95:20:31:6c:47:f9:00:52:34:
bb:c7:48:e5:e6:df:87:e1:1d:c2:dd:30:43:00:6d:d4:07:06:
f4:0f:c4:cd:a0:cc:76:b6:ff:17:61:dc:48:08:8f:15:0d:46:
33:ec:22:ec:bf:82:c5:d3:7f:85:73:6e:b2:4e:f8:ce:7c:37:
c7:82:2a:b6:a3:da:01:6b:14:af:88:19:b8:68:10:1e:cd:48:
5d:7e:7a:78:38:2e:d1:34:04:fd:64:aa:43:51:68:aa:35:b2:
5a:9a:25:c9:9e:63:14:13:1e:4b:5c:65:c2:1f:e6:f2:f9:eb:
60:0a:38:f2:85:22:f8:02:a0:a1:6c:0a:90:ce:af:79:9c:1d:
b6:4a:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:16 2025 by rpki-client