Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p-_QyTfK4iIcT8JqbD61wsfj_xk.roa
File: p-_QyTfK4iIcT8JqbD61wsfj_xk.roa (raw, json)
Hash identifier: BtXyrx6eYS7GowoGOsiVbO89f++5RMcLrKMkSWEmgZM=
Subject key identifier: A7:EF:D0:C9:37:CA:E2:22:1C:4F:C2:6A:6C:3E:B5:C2:C7:E3:FF:19
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199F1B907A0B9610CBBA038B6C2C7E47494
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p-_QyTfK4iIcT8JqbD61wsfj_xk.roa
Signing time: Fri 17 Oct 2025 10:30:59 +0000
ROA not before: Fri 17 Oct 2025 10:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.61.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.152.250.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.153.41.0/24 maxlen: 24
82.153.58.0/24 maxlen: 24
82.153.86.0/24 maxlen: 24
82.153.91.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.180.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
89.213.0.0/22 maxlen: 24
89.213.0.0/24 maxlen: 24
89.213.1.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.45.0/24 maxlen: 24
89.213.49.0/24 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.50.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
89.213.55.0/24 maxlen: 24
89.213.56.0/22 maxlen: 22
89.213.56.0/24 maxlen: 24
89.213.59.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.105.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
89.213.128.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.144.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.179.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.192.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.208.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
89.213.225.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.231.0/24 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.239.0/24 maxlen: 24
89.213.248.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.20.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.125.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.49.127.0/24 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.83.0/24 maxlen: 24
194.105.88.0/24 maxlen: 24
194.105.89.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
194.105.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.134.0/23 maxlen: 24
213.130.156.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
213.218.236.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.144.145.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:b9:07:a0:b9:61:0c:bb:a0:38:b6:c2:c7:e4:74:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 10:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7efd0c937cae2221c4fc26a6c3eb5c2c7e3ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:9f:9e:fa:34:1f:41:ad:50:4d:70:73:62:
25:bb:cc:97:5e:1b:1f:d9:89:c7:dd:5c:13:ff:e2:
61:fa:95:a0:30:80:b2:63:02:7b:ba:62:05:b1:78:
34:9e:17:fd:bf:80:b7:ae:46:7e:44:3b:93:fe:03:
17:37:18:35:8e:61:9b:a1:4a:72:db:2c:05:8d:a5:
30:86:34:aa:15:8f:8e:23:50:01:26:30:9d:62:35:
39:6d:54:6b:83:cc:6f:a2:09:24:49:79:44:1c:1f:
70:ff:69:3a:ff:5e:72:44:cc:54:3e:68:7c:74:b6:
95:4d:26:97:fb:36:9e:f2:d0:37:e3:94:b6:49:81:
66:90:e9:4b:c2:ca:d6:1b:26:8d:82:5a:a8:98:a0:
ec:55:17:0d:2b:35:4d:e9:38:a3:2c:0d:0e:79:5b:
f4:f8:f8:7d:13:d6:7f:60:49:9f:07:c1:8a:cb:ea:
8e:7a:6e:a8:24:8c:7a:27:21:36:e2:eb:18:5c:e5:
1a:a1:d9:12:9e:5e:4e:82:51:5d:b9:fb:b5:3c:41:
14:78:55:37:4e:80:ac:af:fd:dc:91:76:b9:08:ff:
3f:58:71:88:a3:b4:b2:b5:a5:2b:57:04:a9:ba:9d:
1d:1c:a7:5f:de:85:b7:45:38:8a:eb:b9:54:10:b8:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:D0:C9:37:CA:E2:22:1C:4F:C2:6A:6C:3E:B5:C2:C7:E3:FF:19
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p-_QyTfK4iIcT8JqbD61wsfj_xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/24
82.152.8.0/24
82.152.61.0/24
82.152.176.0/23
82.152.250.0/23
82.153.41.0/24
82.153.58.0/24
82.153.86.0/24
82.153.91.0/24
82.153.136.0/22
82.153.180.0/24
82.153.217.0/24
89.213.0.0/22
89.213.5.0-89.213.7.255
89.213.42.0-89.213.45.255
89.213.49.0-89.213.51.255
89.213.55.0-89.213.59.255
89.213.104.0/23
89.213.123.0/24
89.213.128.0/24
89.213.130.0/24
89.213.133.0/24
89.213.140.0/24
89.213.143.0-89.213.145.255
89.213.147.0-89.213.148.255
89.213.150.0/23
89.213.154.0-89.213.159.255
89.213.162.0/24
89.213.172.0/22
89.213.179.0/24
89.213.181.0/24
89.213.183.0/24
89.213.192.0/24
89.213.196.0-89.213.208.255
89.213.215.0/24
89.213.219.0/24
89.213.225.0/24
89.213.228.0-89.213.239.255
89.213.248.0/24
109.176.16.0/21
109.176.91.0/24
109.176.204.0/22
109.176.242.0/23
185.49.125.0-185.49.127.255
185.101.47.0/24
194.105.80.0/20
212.38.81.0/24
212.38.88.0/23
213.130.132.0/22
213.130.156.0/24
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.227.0-213.218.228.255
213.218.232.0/24
213.218.235.0-213.218.237.255
213.218.239.0/24
213.218.244.0/22
217.144.145.0/24
217.145.66.0/24
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:37:01:1e:6a:fc:58:67:fc:e9:bf:08:1c:d0:6d:8f:b3:eb:
43:e9:76:1f:4d:19:5e:89:56:b2:1d:f3:63:3d:c2:87:88:b9:
37:6d:20:7e:35:cf:f3:77:37:f0:c5:4e:71:39:a3:90:e9:d3:
c1:91:d8:db:2c:72:49:4b:50:b5:b2:7d:df:55:13:2c:cf:7c:
7e:97:70:c2:fe:e7:e9:08:49:9e:18:6b:85:0f:93:13:07:c5:
6a:42:00:b2:91:66:7e:ff:95:28:f5:cf:bf:73:e6:15:3e:b6:
fb:5f:c1:2f:03:9b:83:0a:4e:51:16:a6:ba:d8:7d:bb:03:25:
90:8e:d6:4f:29:af:13:37:f1:cf:c0:e1:a7:90:5c:48:71:5e:
df:de:02:3a:a4:b6:d6:60:ec:26:2e:52:2d:f1:21:e2:21:59:
ee:74:1b:e6:78:8e:f4:dd:e1:1c:a1:1a:54:e7:7e:6e:57:ed:
e6:f8:42:46:fc:09:e6:bf:fc:22:98:3c:d8:ae:25:cb:9c:fc:
6b:12:a0:a2:a7:6a:d3:4d:ed:93:94:c1:94:3a:7a:31:d5:6b:
0d:2e:26:27:dc:e8:9f:73:2b:ef:b0:f9:1d:4f:61:25:c5:48:
d7:74:68:d4:1a:02:e4:69:5e:68:41:e3:21:0b:bc:0b:da:eb:
fb:45:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:14 2025 by rpki-client