Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/XWeLaQRNmMMpYCYdyNQgJRyrkeY.roa
File: XWeLaQRNmMMpYCYdyNQgJRyrkeY.roa (raw, json)
Hash identifier: t6vfIHPS+szsJap3PogIhDfyApwnBiHa1W0rev84vXg=
Subject key identifier: 5D:67:8B:69:04:4D:98:C3:29:60:26:1D:C8:D4:20:25:1C:AB:91:E6
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0198A8FB176F21E31AACB1F1805B34AF5983
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/XWeLaQRNmMMpYCYdyNQgJRyrkeY.roa
Signing time: Thu 14 Aug 2025 14:28:04 +0000
ROA not before: Thu 14 Aug 2025 14:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.68.245.0/24 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 23
185.81.186.0/23 maxlen: 23
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 22
185.96.132.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.175.224.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:fb:17:6f:21:e3:1a:ac:b1:f1:80:5b:34:af:59:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 14 14:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d678b69044d98c32960261dc8d420251cab91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:e0:9b:ae:cf:5a:ee:58:e8:43:ce:0b:4a:
1d:8f:dd:63:f9:24:d9:34:80:ba:15:10:66:3b:21:
4e:02:a5:13:c3:d4:6c:62:78:36:3d:99:ac:d9:b6:
4f:68:b9:75:60:f4:fe:b1:b7:00:d0:db:ea:c9:b0:
c5:81:7d:a8:34:0a:8f:46:d3:bf:c0:e6:08:5a:e1:
f0:63:a4:db:75:22:43:f7:aa:27:a0:37:5f:27:b3:
93:a0:c0:43:3b:26:33:40:50:ef:b4:1a:34:b1:4b:
fe:a5:e9:59:b4:57:11:dd:23:6f:ef:dc:5b:df:0a:
90:4c:03:4c:27:14:75:9b:d0:70:18:49:f4:3d:d2:
12:d0:22:60:18:fd:4e:61:2b:d5:10:5b:2c:f6:8d:
3c:84:58:f6:12:ae:84:d4:90:d1:32:c7:59:23:48:
75:b7:8f:f3:80:cb:84:55:20:ee:f1:1e:14:91:13:
e1:6a:e5:5d:cf:73:8d:00:e8:ef:1e:53:4d:20:20:
fb:dd:41:af:88:0a:c9:36:48:aa:9e:f2:72:57:23:
f2:d2:43:36:21:7d:c5:29:0b:0e:b2:97:50:85:00:
11:bf:bf:ea:64:56:d1:b9:17:18:30:71:f2:24:8a:
1c:eb:12:2e:cb:9b:28:e6:62:fb:90:d8:41:eb:5d:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:8B:69:04:4D:98:C3:29:60:26:1D:C8:D4:20:25:1C:AB:91:E6
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/XWeLaQRNmMMpYCYdyNQgJRyrkeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.68.245.0/24
185.81.174.0/24
185.81.184.0/22
185.89.104.0/21
185.96.132.0/24
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ef:d7:98:e6:63:ba:bf:61:73:1b:d4:45:01:4f:1e:68:4b:
21:e5:74:f0:56:7f:fb:67:83:d7:90:a7:34:61:cf:10:b6:45:
92:a8:f3:bb:5b:07:67:85:ad:e3:68:b9:c5:05:e8:43:c7:d1:
94:95:48:fe:89:f9:eb:61:d1:91:f3:38:3f:df:ff:7c:b6:9f:
a7:6b:8c:81:7c:b1:1f:c3:8b:7c:b9:53:ab:13:6a:b5:30:58:
3e:97:a2:37:67:64:4c:ac:21:82:b9:46:f6:fb:5e:e3:89:e8:
8b:6b:b0:48:23:13:7f:84:93:1b:fc:9c:6b:23:9d:b4:56:bc:
a9:00:57:fa:70:e4:d2:76:e7:13:87:36:30:1e:48:28:14:e5:
8e:4e:ad:77:53:e2:5c:0c:59:2d:99:27:e8:99:03:c2:d5:7a:
d8:72:5e:78:b4:0c:10:90:28:48:70:60:54:2e:35:af:81:0c:
d8:a1:e2:5b:81:5a:80:fa:84:ea:73:0f:53:99:9f:11:fc:14:
92:d0:70:ae:c1:83:39:b9:6f:d5:ef:de:31:c2:da:d2:9a:e3:
15:99:eb:98:05:23:91:d2:41:33:82:a1:5d:b6:e1:ca:27:b4:
9d:fe:2b:63:7f:fe:59:d1:e5:83:95:b0:1b:5e:6c:6d:18:17:
39:ad:c0:b1
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZio+xdvIeMarLHxgFs0r1mDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjUwODE0MTQyODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDY3OGI2OTA0NGQ5OGMzMjk2MDI2MWRjOGQ0MjAyNTFjYWI5MWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOLgm67PWu5Y6EPOC0odj91j+STZ
NIC6FRBmOyFOAqUTw9RsYng2PZms2bZPaLl1YPT+sbcA0NvqybDFgX2oNAqPRtO/
wOYIWuHwY6TbdSJD96onoDdfJ7OToMBDOyYzQFDvtBo0sUv+pelZtFcR3SNv79xb
3wqQTANMJxR1m9BwGEn0PdIS0CJgGP1OYSvVEFss9o08hFj2Eq6E1JDRMsdZI0h1
t4/zgMuEVSDu8R4UkRPhauVdz3ONAOjvHlNNICD73UGviArJNkiqnvJyVyPy0kM2
IX3FKQsOspdQhQARv7/qZFbRuRcYMHHyJIoc6xIuy5so5mL7kNhB610IsQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFF1ni2kETZjDKWAmHcjUICUcq5HmMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvWFdlTGFRUk5tTU1wWUNZZHlOUWdKUnlya2VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCWRM4AwQA
uUT1AwQAuVGuAwQCuVG4AwQDuVloAwQAuWCEAwQCuWEAAwQAuWIrAwQAuWXLAwQA
uWiXAwQBua/gAwQA1arfMA0GCSqGSIb3DQEBCwUAA4IBAQB479eY5mO6v2FzG9RF
AU8eaEsh5XTwVn/7Z4PXkKc0Yc8QtkWSqPO7Wwdnha3jaLnFBehDx9GUlUj+ifnr
YdGR8zg/3/98tp+na4yBfLEfw4t8uVOrE2q1MFg+l6I3Z2RMrCGCuUb2+17jieiL
a7BIIxN/hJMb/JxrI520VrypAFf6cOTSducThzYwHkgoFOWOTq13U+JcDFktmSfo
mQPC1XrYcl54tAwQkChIcGBULjWvgQzYoeJbgVqA+oTqcw9TmZ8R/BSS0HCuwYM5
uW/V794xwtrSmuMVmeuYBSOR0kEzgqFdtuHKJ7Sd/itjf/5Z0eWDlbAbXmxtGBc5
rcCx
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:11 2025 by rpki-client