Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1Stz4l2X2HFH1fPM2I46rcyM8-w.roa
File: 1Stz4l2X2HFH1fPM2I46rcyM8-w.roa (raw, json)
Hash identifier: aNzFkC5HxtmUp8RkD+pz5wpyUzaa7GJm9FAU14mfpzw=
Subject key identifier: D5:2B:73:E2:5D:97:D8:71:47:D5:F3:CC:D8:8E:3A:AD:CC:8C:F3:EC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0199C3983D8F5D25C933F7B043F150F12880
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1Stz4l2X2HFH1fPM2I46rcyM8-w.roa
Signing time: Wed 08 Oct 2025 11:32:38 +0000
ROA not before: Wed 08 Oct 2025 11:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 78.135.72.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
188.132.141.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.163.0/24 maxlen: 24
188.132.171.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.203.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:98:3d:8f:5d:25:c9:33:f7:b0:43:f1:50:f1:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 8 11:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d52b73e25d97d87147d5f3ccd88e3aadcc8cf3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:3c:dc:c5:e1:b4:08:cc:f3:5f:47:1d:80:
06:dd:ac:4e:3f:86:90:eb:34:89:db:a8:7c:a0:e8:
c7:9e:39:14:bd:df:49:bd:c3:b1:ff:8d:83:c1:d1:
e7:7e:ea:c2:a2:2a:d2:e5:7b:df:a9:ce:57:ad:4f:
53:41:68:32:bc:62:9b:02:07:5e:98:cd:f6:af:ed:
ea:8f:29:c6:54:d5:16:70:ad:64:c4:f5:76:ea:72:
24:b7:06:27:5f:ab:54:e6:ab:fe:2f:10:67:17:b6:
29:2c:0e:b5:42:87:9a:44:2a:fb:cd:e1:25:7a:ff:
c3:2e:3f:4d:64:bf:5c:2c:00:5c:94:b4:9d:23:55:
c5:5c:25:ca:6a:45:44:d3:25:bb:da:96:d6:b5:44:
5d:03:47:8b:78:2d:cd:09:b6:ad:b8:70:b9:6e:b5:
b3:f4:81:36:b0:8f:c3:77:20:bc:2b:14:99:70:a6:
1d:71:74:bb:56:60:2c:ac:92:6c:5b:5e:5d:9d:4e:
62:ce:8b:a4:c0:c2:1e:3e:94:16:56:f0:92:f9:a5:
41:1e:a3:00:3f:78:54:dc:67:a4:47:61:65:ef:85:
c1:ce:98:87:35:7f:d8:f6:83:26:7d:d0:7c:a4:be:
b7:06:bb:22:00:4e:da:fd:7c:b6:fb:3d:80:85:32:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:73:E2:5D:97:D8:71:47:D5:F3:CC:D8:8E:3A:AD:CC:8C:F3:EC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1Stz4l2X2HFH1fPM2I46rcyM8-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
78.135.74.0/24
78.135.78.0/24
78.135.81.0/24
78.135.88.0/24
188.132.141.0/24
188.132.146.0/24
188.132.152.0/24
188.132.163.0/24
188.132.171.0/24
188.132.188.0/23
188.132.191.0/24
188.132.203.0/24
188.132.212.0/23
188.132.216.0/23
188.132.229.0/24
188.132.236.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
90:d4:53:d5:07:a2:4a:5b:3e:ad:64:0e:3a:7b:85:72:61:40:
bf:b3:46:7a:6d:6d:da:09:ba:e4:ce:48:1a:bb:c9:2a:a7:f4:
29:41:77:c2:50:c8:31:58:0f:aa:11:6a:33:86:a0:83:d1:9b:
81:c3:92:5e:91:18:53:51:d0:f1:4b:3e:c9:f4:6d:50:b6:25:
c4:55:a3:c5:b5:c7:2a:ed:0e:bc:f2:21:56:1c:ac:46:0e:af:
5f:7c:37:93:89:88:dc:81:f8:15:87:15:81:8d:d6:15:93:ec:
cb:7f:94:6e:dd:f8:38:ad:94:21:32:2f:26:e6:ce:26:04:91:
84:66:41:7d:e0:03:4d:00:4a:7e:cc:26:37:7c:2f:c5:16:12:
00:45:25:ce:15:5f:92:a1:1d:3d:30:20:8e:ff:2f:72:0b:59:
96:b7:e3:76:74:2a:09:ab:ba:65:65:3b:3f:e7:4d:5d:a7:fc:
25:f5:9e:b5:cd:30:e2:d1:30:02:31:d3:56:4d:f2:05:98:9e:
7f:74:2e:b5:1e:75:9a:4d:c6:81:03:b3:b0:a4:00:d0:46:fa:
6f:8f:bc:70:d1:10:e7:1d:75:37:bc:d3:85:3d:4d:f8:c2:7c:
3c:d3:47:fe:a0:12:c7:d3:1d:c3:79:d4:b7:a2:9e:b6:10:b6:
d2:0f:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:26 2025 by rpki-client