Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/rGd99voSzroleDeVrTNABeoU6Jg.roa
File: rGd99voSzroleDeVrTNABeoU6Jg.roa (raw, json)
Hash identifier: UJYK4rx2XvhMh0V5UdV9K0pusDUwS3V+qxXywUzqr98=
Subject key identifier: AC:67:7D:F6:FA:12:CE:BA:25:78:37:95:AD:33:40:05:EA:14:E8:98
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 0199EC9AE7FAE24C511509A148AB2BDAB743
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/rGd99voSzroleDeVrTNABeoU6Jg.roa
Signing time: Thu 16 Oct 2025 10:39:58 +0000
ROA not before: Thu 16 Oct 2025 10:39:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8680
IP address blocks: 37.72.152.0/21 maxlen: 24
37.72.156.0/23 maxlen: 23
37.72.158.0/24 maxlen: 24
46.102.107.0/24 maxlen: 24
62.68.160.0/19 maxlen: 24
62.68.160.0/21 maxlen: 21
62.68.168.0/23 maxlen: 23
62.68.170.0/24 maxlen: 24
62.68.172.0/22 maxlen: 22
62.68.176.0/20 maxlen: 20
62.68.176.0/23 maxlen: 23
62.68.178.0/23 maxlen: 23
62.68.180.0/24 maxlen: 24
62.68.181.0/24 maxlen: 24
62.68.182.0/24 maxlen: 24
62.68.183.0/24 maxlen: 24
62.68.184.0/24 maxlen: 24
62.68.185.0/24 maxlen: 24
62.68.188.0/22 maxlen: 22
77.81.75.0/24 maxlen: 24
78.111.192.0/20 maxlen: 24
84.247.1.0/24 maxlen: 24
85.204.71.0/24 maxlen: 24
85.204.135.0/24 maxlen: 24
85.204.144.0/24 maxlen: 24
85.204.192.0/24 maxlen: 24
86.104.12.0/24 maxlen: 24
86.104.64.0/24 maxlen: 24
86.105.10.0/23 maxlen: 24
88.81.128.0/19 maxlen: 24
88.81.157.0/24 maxlen: 24
89.32.207.0/24 maxlen: 24
89.33.15.0/24 maxlen: 24
89.35.82.0/23 maxlen: 24
89.37.59.0/24 maxlen: 24
89.40.64.0/24 maxlen: 24
89.42.115.0/24 maxlen: 24
89.42.174.0/23 maxlen: 24
89.42.179.0/24 maxlen: 24
89.43.49.0/24 maxlen: 24
89.43.172.0/23 maxlen: 24
89.44.107.0/24 maxlen: 24
89.47.248.0/24 maxlen: 24
89.47.253.0/24 maxlen: 24
91.190.160.0/21 maxlen: 24
92.114.55.0/24 maxlen: 24
93.114.188.0/23 maxlen: 24
93.187.144.0/21 maxlen: 24
146.247.48.0/20 maxlen: 24
185.3.100.0/22 maxlen: 24
188.214.59.0/24 maxlen: 24
188.241.17.0/24 maxlen: 24
212.30.0.0/19 maxlen: 24
212.30.4.0/24 maxlen: 24
212.30.8.0/24 maxlen: 24
212.30.9.0/24 maxlen: 24
212.30.16.0/24 maxlen: 24
217.19.128.0/20 maxlen: 24
2a02:7380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:9a:e7:fa:e2:4c:51:15:09:a1:48:ab:2b:da:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Oct 16 10:39:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac677df6fa12ceba25783795ad334005ea14e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:ec:4f:8e:2f:09:db:df:5e:dc:91:e1:10:
00:52:14:31:9c:0d:2b:e9:01:20:22:a3:b1:ff:51:
34:e3:58:19:ef:0b:80:52:72:0e:6b:73:28:ea:57:
83:54:bf:42:ad:10:ae:2b:0d:58:80:25:f0:a6:a2:
bc:b2:67:84:73:01:49:68:79:dc:67:b4:22:2d:e9:
db:27:02:0d:84:3d:fc:c3:a6:1d:c9:c2:f3:84:27:
81:5a:88:dc:ac:5e:54:e1:ea:75:6a:af:04:b6:44:
a6:c9:b6:13:6b:43:cb:02:9a:68:58:d7:f1:52:c7:
50:13:69:13:2b:f8:da:c4:54:30:ba:ff:65:42:cf:
0d:51:a2:7c:e0:ae:97:ba:8f:28:1e:3b:f1:41:a2:
d9:e1:60:19:67:f1:70:bc:8b:1c:c8:d9:87:2a:58:
67:4a:31:52:70:20:78:af:1d:58:1d:cb:ee:49:81:
d3:3c:22:2c:ac:9c:9e:b5:88:35:63:d7:c1:b6:51:
1e:9a:26:13:83:80:6d:30:0e:b0:1b:2b:4b:10:2c:
22:ea:0f:6b:12:2f:98:c2:2e:4b:c7:66:53:90:b9:
a5:5a:02:c9:be:4b:bf:9d:d7:1e:ba:78:f1:2e:1e:
4a:9a:13:64:61:5d:38:4c:b9:bf:a5:86:4b:1b:15:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:7D:F6:FA:12:CE:BA:25:78:37:95:AD:33:40:05:EA:14:E8:98
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/rGd99voSzroleDeVrTNABeoU6Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.152.0/21
46.102.107.0/24
62.68.160.0/19
77.81.75.0/24
78.111.192.0/20
84.247.1.0/24
85.204.71.0/24
85.204.135.0/24
85.204.144.0/24
85.204.192.0/24
86.104.12.0/24
86.104.64.0/24
86.105.10.0/23
88.81.128.0/19
89.32.207.0/24
89.33.15.0/24
89.35.82.0/23
89.37.59.0/24
89.40.64.0/24
89.42.115.0/24
89.42.174.0/23
89.42.179.0/24
89.43.49.0/24
89.43.172.0/23
89.44.107.0/24
89.47.248.0/24
89.47.253.0/24
91.190.160.0/21
92.114.55.0/24
93.114.188.0/23
93.187.144.0/21
146.247.48.0/20
185.3.100.0/22
188.214.59.0/24
188.241.17.0/24
212.30.0.0/19
217.19.128.0/20
IPv6:
2a02:7380::/32
Signature Algorithm: sha256WithRSAEncryption
63:79:01:7e:85:ea:9b:76:05:ed:eb:fe:c4:e2:5f:0a:31:19:
e0:c7:12:c3:52:e3:63:d4:bf:72:32:2d:fa:4e:b0:c2:31:ee:
9a:27:60:dc:90:40:17:69:81:03:3a:fa:b5:9f:00:27:1f:8b:
9b:cd:f0:e7:89:16:07:89:b6:26:c5:ba:cc:fe:2a:cd:9f:7d:
dd:f3:39:0d:a6:80:c6:35:fb:dc:1a:50:a0:5b:6a:cd:fd:5e:
ee:e9:3f:22:db:05:60:30:3d:c3:41:3b:11:22:45:47:f6:dd:
c3:49:81:76:cf:8a:8c:a3:b1:ea:83:02:7b:2a:17:3d:19:50:
26:6d:38:ad:2f:05:d3:64:a0:ba:37:cb:21:b0:6a:ea:4b:7a:
d9:b8:b8:0a:cb:72:f4:20:9c:53:6c:f6:cf:87:25:2f:05:df:
b7:26:43:04:1a:5e:e9:38:88:d2:0b:f5:fe:c7:28:56:04:4a:
77:d1:77:51:d5:d5:c6:ca:cf:2e:6a:79:bb:20:d1:e9:35:f3:
4a:90:64:65:88:0b:72:eb:01:1a:db:15:eb:fe:ef:74:86:5c:
69:e1:41:39:ce:f1:42:be:6a:4c:56:9c:01:f5:fc:38:68:a0:
30:78:fc:6d:38:ae:3c:db:54:36:2b:45:81:32:2e:96:86:06:
b5:95:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:14 2025 by rpki-client