Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/burw7ViboU8T2PJghCZQ6EBQMD4.roa
File: burw7ViboU8T2PJghCZQ6EBQMD4.roa (raw, json)
Hash identifier: mSnt7Oq4rlVXYF8azRVIlELr/bG38i2/1WyCF/cFuGg=
Subject key identifier: 6E:EA:F0:ED:58:9B:A1:4F:13:D8:F2:60:84:26:50:E8:40:50:30:3E
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 01999B1A18E38720FB6797C4CDBB448B0F87
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/burw7ViboU8T2PJghCZQ6EBQMD4.roa
Signing time: Tue 30 Sep 2025 14:50:02 +0000
ROA not before: Tue 30 Sep 2025 14:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 83.217.200.0/24 maxlen: 24
83.217.201.0/24 maxlen: 24
83.217.202.0/24 maxlen: 24
83.217.203.0/24 maxlen: 24
83.217.220.0/24 maxlen: 24
83.217.221.0/24 maxlen: 24
83.217.223.0/24 maxlen: 24
85.198.80.0/24 maxlen: 24
85.198.81.0/24 maxlen: 24
85.198.82.0/24 maxlen: 24
85.198.83.0/24 maxlen: 24
89.169.0.0/24 maxlen: 24
89.169.1.0/24 maxlen: 24
89.169.2.0/24 maxlen: 24
89.169.3.0/24 maxlen: 24
89.169.44.0/24 maxlen: 24
89.169.45.0/24 maxlen: 24
89.169.46.0/24 maxlen: 24
89.169.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:1a:18:e3:87:20:fb:67:97:c4:cd:bb:44:8b:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Sep 30 14:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eeaf0ed589ba14f13d8f260842650e84050303e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:7a:2d:e2:24:87:3a:e6:ec:96:18:a5:4f:
c8:69:a7:b9:c2:f1:e3:80:c5:0b:4a:ae:e7:7c:19:
cb:f3:3c:f6:57:e5:d2:be:7d:1b:4c:ce:64:52:54:
69:cb:bf:30:8c:54:06:cb:57:80:cc:27:7e:50:41:
36:72:a0:7f:bf:3b:bb:7f:1d:ec:63:21:ff:61:7b:
a5:3e:6f:76:c4:e6:5d:8d:30:4d:22:c9:e1:85:f6:
fc:4a:00:05:5b:77:2e:d7:c8:42:57:a4:f3:9b:c8:
70:14:21:85:1d:2d:6f:7c:64:9d:00:05:07:3b:e4:
9d:45:c6:1d:1c:ab:d2:81:4e:fa:89:fc:ec:c4:28:
8c:ca:e8:d6:ab:72:3f:03:5e:df:be:ce:fa:c0:47:
e0:51:74:f6:0e:2a:5f:60:52:d4:a6:98:77:96:ae:
ce:bf:27:05:14:99:01:f0:17:02:4a:46:22:4c:66:
d2:b6:e8:d4:54:7b:16:27:c8:e3:41:31:f6:f7:6f:
35:af:61:f1:e3:bb:60:4b:13:97:ac:14:f3:d9:9b:
91:ae:9e:e1:95:79:f4:5f:47:0c:f5:f2:85:e6:ab:
a4:b2:f0:a2:02:5c:53:62:3f:47:eb:bc:db:6d:8d:
ec:33:56:58:fb:26:da:79:74:cc:31:61:c7:75:39:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EA:F0:ED:58:9B:A1:4F:13:D8:F2:60:84:26:50:E8:40:50:30:3E
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/burw7ViboU8T2PJghCZQ6EBQMD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.200.0/22
83.217.220.0/23
83.217.223.0/24
85.198.80.0/22
89.169.0.0/22
89.169.44.0/22
Signature Algorithm: sha256WithRSAEncryption
25:82:6f:c1:f6:f7:41:0d:e2:c4:c1:d1:a0:6d:dd:05:4d:4f:
08:50:ea:22:de:20:0f:fb:b6:e0:76:5f:59:26:ec:7e:98:c9:
99:81:d2:1e:c1:95:3a:29:78:6c:f9:5e:32:ac:3f:bc:dd:78:
d7:84:3f:08:2c:84:3c:d4:72:d4:e9:fa:6e:c1:7c:d9:42:81:
3d:f8:cf:88:c4:58:08:c5:17:28:73:49:56:0b:7f:b9:43:76:
9a:70:85:bc:44:ea:82:69:3a:c5:21:df:81:9d:f7:13:a5:fa:
5d:60:6d:a2:29:6e:e0:56:7c:85:70:6d:b2:02:8b:24:81:70:
28:16:b4:09:bc:b7:7c:de:3c:fc:2d:13:13:a7:45:64:e3:43:
93:80:ec:db:b2:71:08:9a:e2:9c:cb:55:3a:3c:0d:53:47:0e:
72:b0:1f:ff:d2:56:c2:c3:88:fd:54:46:1d:be:53:c1:58:ea:
89:0b:d9:e5:83:fb:9f:db:06:37:10:d8:c3:0e:e0:5b:5d:ba:
2b:cf:ce:29:62:6c:31:45:7a:4c:3b:5f:36:ff:65:49:64:7d:
f9:dd:7d:92:2b:20:2f:b5:00:6a:a5:79:42:2e:be:ab:15:6f:
23:4e:c8:cb:6e:d8:42:7f:80:19:58:d6:d6:6c:d2:3a:a1:89:
90:01:29:35
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZmbGhjjhyD7Z5fEzbtEiw+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjUwOTMwMTQ1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWVhZjBlZDU4OWJhMTRmMTNkOGYyNjA4NDI2NTBlODQwNTAzMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqN6LeIkhzrm7JYYpU/Iaae5wvHj
gMULSq7nfBnL8zz2V+XSvn0bTM5kUlRpy78wjFQGy1eAzCd+UEE2cqB/vzu7fx3s
YyH/YXulPm92xOZdjTBNIsnhhfb8SgAFW3cu18hCV6Tzm8hwFCGFHS1vfGSdAAUH
O+SdRcYdHKvSgU76ifzsxCiMyujWq3I/A17fvs76wEfgUXT2DipfYFLUpph3lq7O
vycFFJkB8BcCSkYiTGbStujUVHsWJ8jjQTH29281r2Hx47tgSxOXrBTz2ZuRrp7h
lXn0X0cM9fKF5quksvCiAlxTYj9H67zbbY3sM1ZY+ybaeXTMMWHHdTmPCQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFG7q8O1Ym6FPE9jyYIQmUOhAUDA+MB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvYnVydzdWaWJvVThUMlBKZ2hDWlE2RUJRTUQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCU9nIAwQB
U9ncAwQAU9nfAwQCVcZQAwQCWakAAwQCWaksMA0GCSqGSIb3DQEBCwUAA4IBAQAl
gm/B9vdBDeLEwdGgbd0FTU8IUOoi3iAP+7bgdl9ZJux+mMmZgdIewZU6KXhs+V4y
rD+83XjXhD8ILIQ81HLU6fpuwXzZQoE9+M+IxFgIxRcoc0lWC3+5Q3aacIW8ROqC
aTrFId+BnfcTpfpdYG2iKW7gVnyFcG2yAoskgXAoFrQJvLd83jz8LRMTp0Vk40OT
gOzbsnEImuKcy1U6PA1TRw5ysB//0lbCw4j9VEYdvlPBWOqJC9nlg/uf2wY3ENjD
DuBbXborz84pYmwxRXpMO182/2VJZH353X2SKyAvtQBqpXlCLr6rFW8jTsjLbthC
f4AZWNbWbNI6oYmQASk1
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:37 2025 by rpki-client