
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa
File: d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa (raw, json)
Hash identifier: 9Q/igSSvicy+uaz1oiXNOi9srP/C2heBicDy8Enec1Y=
Subject key identifier: 77:D3:B5:65:B0:16:D8:23:59:65:6B:FD:D0:9B:7C:A5:6D:78:3A:03
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0199E17CD0CDD8595E5050F3C31F1C7B5B49
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa
Signing time: Tue 14 Oct 2025 06:51:17 +0000
ROA not before: Tue 14 Oct 2025 06:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:7c:d0:cd:d8:59:5e:50:50:f3:c3:1f:1c:7b:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 14 06:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77d3b565b016d82359656bfdd09b7ca56d783a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:cc:60:11:a2:5b:90:ac:6d:4d:3c:db:78:
b5:8f:dd:b5:da:01:a7:b7:8c:66:e6:ee:55:8e:a4:
4d:9f:49:10:0f:22:ba:f8:79:19:17:be:f1:7a:a1:
cb:47:56:43:63:6f:a0:bd:a1:42:2d:b4:2c:d8:ae:
8f:4b:86:7a:8e:a4:fb:6e:2f:d6:3f:0c:21:42:b0:
e4:ea:ea:31:0e:5e:b0:02:9a:64:33:2f:3e:45:88:
a6:1f:bb:51:0c:29:ee:26:15:80:96:60:8c:cc:e4:
72:68:85:66:ec:05:3a:17:02:4d:f3:0e:30:74:fd:
d4:23:9a:69:ad:63:46:b3:f7:c9:27:94:9b:17:c9:
0e:3b:60:8e:8a:a3:85:9d:df:45:f4:2a:96:20:e0:
f9:98:4a:fc:20:3e:92:5c:dc:5e:b8:1c:32:99:92:
f3:53:76:17:e6:b8:2f:48:5f:27:6b:a2:04:23:5e:
a0:0a:9b:9c:72:ea:a8:74:46:c0:76:d9:ef:9c:03:
07:53:d6:1a:f0:55:1d:98:08:76:3f:f7:fa:24:08:
c5:98:2e:bf:f4:67:3d:46:9a:42:35:4e:07:39:4c:
54:7f:b8:e9:92:3d:e9:f2:d5:23:58:f8:bf:15:e4:
72:18:8c:46:77:b2:00:e1:dd:d7:31:e0:64:db:36:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:B5:65:B0:16:D8:23:59:65:6B:FD:D0:9B:7C:A5:6D:78:3A:03
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d9O1ZbAW2CNZZWv90Jt8pW14OgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.40.70.0/24
94.177.13.0/24
94.177.145.0/24
103.56.84.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
167.17.191.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.134.255
206.245.157.0/24
208.123.185.0/24
208.123.190.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:29:5c:e4:2f:dc:cb:a3:64:a4:19:11:84:62:bc:70:39:c2:
5d:c8:90:3c:49:7e:e1:8c:f9:9d:3e:5f:c7:2d:c0:c0:20:a9:
6e:2b:13:f7:f2:d2:67:cc:d5:a4:e0:99:56:04:e3:94:e3:f5:
0b:f2:ae:5d:75:e6:92:87:68:0e:23:98:58:d9:e0:86:55:8a:
a5:01:95:e4:f9:73:43:83:42:2b:64:6e:e7:5f:59:f5:78:1c:
c7:8c:c3:80:c8:3a:f8:c3:9e:8e:65:c3:c2:0d:6d:f4:58:b7:
f3:ec:df:61:d0:d8:65:37:2b:b8:52:c4:11:68:61:a5:a5:b9:
17:76:33:00:93:0c:93:d4:90:2b:c4:f8:9f:25:5d:97:53:6e:
9f:6f:31:12:d8:e1:bc:cd:b3:2f:46:65:09:fd:64:39:c7:3a:
b6:e4:e6:6e:ee:f5:55:6b:a3:e5:c9:4c:24:32:ee:0f:b3:cf:
e4:5d:0b:20:6d:3f:ef:ac:d6:59:b0:4c:0c:ac:48:78:e4:57:
17:2e:27:88:99:ef:59:04:86:5e:10:7c:9c:0b:e4:f9:bb:0b:
70:f4:22:5c:6f:4e:5f:e4:6e:22:4c:56:e3:15:af:3f:75:6e:
29:26:5b:6b:15:2d:cd:d7:f6:c8:68:85:a8:e8:de:db:e3:8c:
83:d2:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:46 2025 by rpki-client