Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ATnU0XW_a-fQgNgM4bksVOz5qO0.roa
File: ATnU0XW_a-fQgNgM4bksVOz5qO0.roa (raw, json)
Hash identifier: KvgYw2bKyUh59arBiz8XfHglyETOEd7hEYYsA1g44Qc=
Subject key identifier: 01:39:D4:D1:75:BF:6B:E7:D0:80:D8:0C:E1:B9:2C:54:EC:F9:A8:ED
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 01999EBE1A663FC3D5A3673F712F303194DC
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ATnU0XW_a-fQgNgM4bksVOz5qO0.roa
Signing time: Wed 01 Oct 2025 07:48:02 +0000
ROA not before: Wed 01 Oct 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29522
IP address blocks: 91.198.146.0/24 maxlen: 24
91.225.28.0/22 maxlen: 24
94.152.0.0/16 maxlen: 24
94.152.254.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
185.11.100.0/22 maxlen: 24
185.140.120.0/22 maxlen: 24
194.60.251.0/24 maxlen: 24
195.149.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:be:1a:66:3f:c3:d5:a3:67:3f:71:2f:30:31:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Oct 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0139d4d175bf6be7d080d80ce1b92c54ecf9a8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:32:0b:1f:66:e2:1f:e4:76:c2:a1:88:a3:5b:
10:44:01:fd:9d:6c:81:2b:b0:fc:d8:5d:eb:d6:15:
2b:32:10:d7:81:01:08:d4:1c:67:a4:a2:16:ed:15:
79:1a:92:73:57:70:1d:c0:90:85:68:fc:f6:95:eb:
40:6e:fb:f8:4c:27:64:77:1b:29:f2:3e:fa:2f:28:
d2:90:7a:47:16:d7:08:9e:e5:19:4f:7f:b1:3c:b0:
19:b8:91:d5:86:2e:65:77:50:63:7d:ae:cb:17:67:
20:3b:ef:fd:86:42:da:b2:c6:6f:b8:23:c5:c3:24:
8e:91:a5:cc:ea:ed:86:87:81:2e:f8:c2:31:02:e3:
1c:57:36:d9:13:de:c4:fb:b0:59:f4:62:c8:4a:65:
06:94:95:06:97:6e:5f:ea:07:42:a8:1f:d1:3b:eb:
ea:be:5c:ba:8f:92:20:df:3c:cc:8a:33:50:6a:1e:
a4:bc:46:f2:da:e2:4e:21:14:81:34:80:d4:a0:9d:
f5:aa:b1:c0:97:d4:44:ca:c7:bd:bf:5c:60:e0:c1:
a9:39:cc:78:24:a5:e4:4d:2f:66:3e:cf:7c:38:cf:
06:31:21:2e:36:cb:a8:17:02:27:aa:8c:6d:f0:8d:
96:b2:1e:67:70:95:ab:07:fa:71:7c:51:be:4e:27:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:D4:D1:75:BF:6B:E7:D0:80:D8:0C:E1:B9:2C:54:EC:F9:A8:ED
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ATnU0XW_a-fQgNgM4bksVOz5qO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.225.28.0/22
94.152.0.0/16
185.11.100.0/22
185.140.120.0/22
194.60.251.0/24
195.149.224.0/21
Signature Algorithm: sha256WithRSAEncryption
80:a6:94:95:47:2a:d3:78:25:40:bf:1e:29:48:ab:7f:b1:93:
43:b8:b3:27:47:44:17:84:17:ed:f1:e2:83:df:31:e3:d3:a6:
25:3a:1d:7b:69:3e:5c:77:92:41:8e:a3:1b:ee:47:a7:89:37:
44:da:3e:30:fc:49:7a:62:a2:f0:18:79:d5:a2:38:90:31:65:
78:e3:47:82:9f:0d:fe:43:f5:f0:49:de:6e:12:c9:43:66:55:
08:82:36:90:f4:02:8b:dd:10:9d:3d:88:f7:a1:05:0b:4b:e2:
ca:28:54:56:09:4b:37:8d:b3:2d:80:f3:50:57:51:3f:d4:b2:
c3:f2:42:36:fe:88:1a:ea:2f:0a:52:82:0c:a3:3a:8e:d8:b8:
0b:48:b2:1b:54:30:26:1d:d8:c7:d9:20:4b:f3:78:a8:e1:3f:
89:ea:df:64:58:a7:32:03:86:73:ac:31:4d:b5:96:c2:ff:11:
ff:1b:78:1f:be:0c:7f:39:8f:ae:ef:a2:59:2d:4b:ed:d5:bc:
d1:65:0d:a2:59:22:a3:4d:4e:40:0a:cd:5b:f0:fd:7a:00:2c:
a8:99:16:39:be:36:fd:d8:f5:08:39:ce:1b:33:16:8b:4a:cc:
57:8f:dd:31:4f:42:b3:1a:61:97:ec:11:a6:aa:3e:fa:bb:17:
5e:1b:34:96
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZmevhpmP8PVo2c/cS8wMZTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw
N2IzNDMwHhcNMjUxMDAxMDc0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTM5ZDRkMTc1YmY2YmU3ZDA4MGQ4MGNlMWI5MmM1NGVjZjlhOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jILH2biH+R2wqGIo1sQRAH9nWyB
K7D82F3r1hUrMhDXgQEI1BxnpKIW7RV5GpJzV3AdwJCFaPz2letAbvv4TCdkdxsp
8j76LyjSkHpHFtcInuUZT3+xPLAZuJHVhi5ld1Bjfa7LF2cgO+/9hkLassZvuCPF
wySOkaXM6u2Gh4Eu+MIxAuMcVzbZE97E+7BZ9GLISmUGlJUGl25f6gdCqB/RO+vq
vly6j5Ig3zzMijNQah6kvEby2uJOIRSBNIDUoJ31qrHAl9REyse9v1xg4MGpOcx4
JKXkTS9mPs98OM8GMSEuNsuoFwInqoxt8I2Wsh5ncJWrB/pxfFG+TidcQQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFAE51NF1v2vn0IDYDOG5LFTs+ajtMB8GA1UdIwQY
MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt
Mjk3ZTI4MmQ2NmE4LzEvQVRuVTBYV19hLWZRZ05nTTRia3NWT3o1cU8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4
LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAATApAwQAW8aSAwQC
W+EcAwMAXpgDBAK5C2QDBAK5jHgDBADCPPsDBAPDleAwDQYJKoZIhvcNAQELBQAD
ggEBAICmlJVHKtN4JUC/HilIq3+xk0O4sydHRBeEF+3x4oPfMePTpiU6HXtpPlx3
kkGOoxvuR6eJN0TaPjD8SXpiovAYedWiOJAxZXjjR4KfDf5D9fBJ3m4SyUNmVQiC
NpD0AovdEJ09iPehBQtL4sooVFYJSzeNsy2A81BXUT/UssPyQjb+iBrqLwpSggyj
Oo7YuAtIshtUMCYd2MfZIEvzeKjhP4nq32RYpzIDhnOsMU21lsL/Ef8beB++DH85
j67volktS+3VvNFlDaJZIqNNTkAKzVvw/XoALKiZFjm+Nv3Y9Qg5zhszFotKzFeP
3TFPQrMaYZfsEaaqPvq7F14bNJY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:34:20 2025 by rpki-client