Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/iZmuXhgkUDMI8rD0nnDFSslLpSc.roa
File: iZmuXhgkUDMI8rD0nnDFSslLpSc.roa (raw, json)
Hash identifier: HIW2261XLHIAaOOH5eBKS78OF9zXA7RurRmyIK9yhLk=
Subject key identifier: 89:99:AE:5E:18:24:50:33:08:F2:B0:F4:9E:70:C5:4A:C9:4B:A5:27
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 019957675BB3AA6CEDEE7551F8777F8C6DFE
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/iZmuXhgkUDMI8rD0nnDFSslLpSc.roa
Signing time: Wed 17 Sep 2025 11:20:15 +0000
ROA not before: Wed 17 Sep 2025 11:20:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1759
IP address blocks: 46.132.0.0/16 maxlen: 16
62.71.0.0/16 maxlen: 16
62.73.32.0/19 maxlen: 19
80.74.192.0/19 maxlen: 19
80.220.0.0/14 maxlen: 21
81.16.64.0/20 maxlen: 20
84.34.0.0/16 maxlen: 16
84.248.0.0/14 maxlen: 21
86.114.0.0/16 maxlen: 21
86.115.0.0/16 maxlen: 16
88.86.128.0/19 maxlen: 19
88.192.0.0/14 maxlen: 21
93.106.0.0/16 maxlen: 16
109.240.0.0/16 maxlen: 16
131.177.0.0/16 maxlen: 16
141.208.0.0/16 maxlen: 16
176.72.0.0/16 maxlen: 16
188.238.0.0/16 maxlen: 16
192.58.42.0/23 maxlen: 23
192.58.44.0/22 maxlen: 22
192.58.48.0/21 maxlen: 21
192.58.64.0/20 maxlen: 20
192.58.80.0/21 maxlen: 21
192.58.88.0/23 maxlen: 23
192.83.0.0/18 maxlen: 18
192.83.64.0/19 maxlen: 19
192.83.96.0/22 maxlen: 22
192.83.100.0/24 maxlen: 24
192.89.0.0/16 maxlen: 16
192.89.123.0/24 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 22
192.103.116.0/24 maxlen: 24
192.130.0.0/16 maxlen: 24
192.194.0.0/16 maxlen: 24
193.178.133.0/24 maxlen: 24
193.208.0.0/14 maxlen: 14
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
194.89.0.0/16 maxlen: 16
194.111.0.0/16 maxlen: 16
194.137.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 16
194.197.68.0/24 maxlen: 24
194.215.0.0/16 maxlen: 16
194.251.0.0/16 maxlen: 16
194.252.0.0/16 maxlen: 16
195.156.0.0/16 maxlen: 16
195.165.0.0/16 maxlen: 16
212.83.96.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
212.182.192.0/18 maxlen: 18
212.213.0.0/16 maxlen: 16
213.28.0.0/16 maxlen: 16
213.140.160.0/19 maxlen: 19
213.173.128.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
2001:8b8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:67:5b:b3:aa:6c:ed:ee:75:51:f8:77:7f:8c:6d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Sep 17 11:20:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8999ae5e1824503308f2b0f49e70c54ac94ba527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:e2:92:5a:60:ed:39:c6:c1:03:dd:a7:60:
05:b0:36:e2:58:6e:93:3b:35:f4:1f:1b:a9:43:20:
f1:88:41:4f:6a:03:b4:1a:bd:b7:f9:52:54:c1:dc:
81:57:23:20:f5:fa:9e:13:30:6d:70:86:d1:dd:7b:
92:7f:f7:1e:08:56:b6:b2:8d:c4:ae:49:23:2b:8d:
cc:90:65:74:1a:91:d3:c0:80:2b:3d:81:54:5c:5c:
16:8d:70:2a:a2:16:02:af:ca:ea:5b:ae:68:a0:0f:
34:c4:a7:bb:3b:66:a5:17:d7:3d:f0:18:dc:a8:da:
9e:9a:9c:5e:c2:04:fe:ff:e1:db:7b:c6:c9:c8:83:
7f:d5:eb:cd:45:78:4b:43:46:42:63:6c:a2:69:93:
88:35:bf:03:f4:66:44:6c:78:53:7c:ec:46:3f:11:
5c:a2:d1:20:6a:86:42:b8:9a:b1:14:1c:88:1f:c9:
83:17:d9:5d:a1:d7:9c:13:63:95:32:5c:07:bd:3e:
20:3b:79:04:3d:f6:f8:f1:43:54:f2:17:23:3c:57:
84:96:f0:a6:75:81:4b:c5:a6:e7:b1:a9:cb:0a:62:
96:0d:2d:11:33:2b:87:97:ef:70:be:67:a2:3f:ce:
6a:c2:85:97:55:b9:47:de:17:9a:2e:de:e4:cc:6d:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:AE:5E:18:24:50:33:08:F2:B0:F4:9E:70:C5:4A:C9:4B:A5:27
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/iZmuXhgkUDMI8rD0nnDFSslLpSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.55.255
192.58.64.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.86.0/24
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
9e:23:46:2b:91:d5:d9:d5:52:9c:99:f4:a2:54:63:04:c9:07:
c2:4c:2d:01:a9:29:83:fc:26:3f:31:53:6c:30:72:ea:1e:10:
5f:e5:06:7c:07:7a:d7:25:15:7f:a3:72:14:f5:b2:55:7b:6a:
2f:12:29:4f:4d:92:a4:ea:c4:f0:af:d6:6d:68:28:17:12:9b:
c3:3c:7a:86:51:1d:fb:2e:49:6c:11:69:ea:19:3b:7b:81:98:
25:2f:5c:81:eb:4b:7e:53:33:1d:de:ed:27:95:38:70:b1:ec:
17:65:25:15:d9:8c:a0:40:ce:7f:bb:55:80:d3:a6:6e:3b:27:
a8:2d:0d:f5:1f:b3:44:e9:5f:66:61:cb:04:e4:4f:08:c1:38:
e2:71:30:23:e3:66:8b:f5:76:63:39:8d:05:4a:3c:6c:ee:9b:
3c:bb:66:fe:4d:f9:35:80:1a:01:fb:e9:1e:07:e5:35:47:78:
db:dc:3c:ae:21:d4:41:5c:3a:d1:23:9c:90:60:45:05:16:22:
2f:b4:fb:c8:a6:d6:4c:32:10:41:d0:7a:85:8e:d3:5a:2d:c7:
0b:2b:49:b4:03:0f:e5:d7:ba:e9:69:1e:96:ec:ae:07:6a:ed:
37:41:6f:81:82:95:94:5c:81:09:e7:e9:9b:09:e6:ea:f8:7f:
3f:6d:9b:24
-----BEGIN CERTIFICATE-----
MIIGPjCCBSagAwIBAgISAZlXZ1uzqmzt7nVR+Hd/jG3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjUwOTE3MTEyMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTk5YWU1ZTE4MjQ1MDMzMDhmMmIwZjQ5ZTcwYzU0YWM5NGJhNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvHiklpg7TnGwQPdp2AFsDbiWG6T
OzX0HxupQyDxiEFPagO0Gr23+VJUwdyBVyMg9fqeEzBtcIbR3XuSf/ceCFa2so3E
rkkjK43MkGV0GpHTwIArPYFUXFwWjXAqohYCr8rqW65ooA80xKe7O2alF9c98Bjc
qNqempxewgT+/+Hbe8bJyIN/1evNRXhLQ0ZCY2yiaZOINb8D9GZEbHhTfOxGPxFc
otEgaoZCuJqxFByIH8mDF9ldodecE2OVMlwHvT4gO3kEPfb48UNU8hcjPFeElvCm
dYFLxabnsanLCmKWDS0RMyuHl+9wvmeiP85qwoWXVblH3heaLt7kzG1bFwIDAQAB
o4IDSjCCA0YwHQYDVR0OBBYEFImZrl4YJFAzCPKw9J5wxUrJS6UnMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvaVptdVhoZ2tVRE1JOHJEMG5uREZTc2xMcFNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXgYIKwYBBQUHAQcBAf8EggFNMIIBSTCCATYEAgABMIIB
LgMDAC6EAwMAPkcDBAU+SSADBAVQSsADAwJQ3AMEBFEQQAMDAFQiAwMCVPgDAwFW
cgMEBVhWgAMDAljAAwMAXWoDAwBt8AMDAIOxAwMAjdADAwCwSAMDALzuMAwDBAHA
OioDBAPAOjAwDAMEBsA6QAMEAcA6WDALAwMAwFMDBADAU2QDAwDAWQMEAMBnVjAM
AwQAwGdbAwQAwGdcMAwDBADAZ2kDBADAZ2owDAMEBMBncAMEAMBndAMDAMCCAwMA
wMIDBADBsoUDAwLB0AMDAMJZAwMAwm8DAwDCiQMDAMKOAwMAwsUDAwDC1zAKAwMA
wvsDAwDC/AMDAMOcAwMAw6UDBAXUU2ADBAbUlUADBAbUtsADAwDU1QMDANUcAwQF
1YygAwQF1a2AAwQH2YyAMA0EAgACMAcDBQMgAQi4MA0GCSqGSIb3DQEBCwUAA4IB
AQCeI0YrkdXZ1VKcmfSiVGMEyQfCTC0BqSmD/CY/MVNsMHLqHhBf5QZ8B3rXJRV/
o3IU9bJVe2ovEilPTZKk6sTwr9ZtaCgXEpvDPHqGUR37LklsEWnqGTt7gZglL1yB
60t+UzMd3u0nlThwsewXZSUV2YygQM5/u1WA06ZuOyeoLQ31H7NE6V9mYcsE5E8I
wTjicTAj42aL9XZjOY0FSjxs7ps8u2b+Tfk1gBoB++keB+U1R3jb3DyuIdRBXDrR
I5yQYEUFFiIvtPvIptZMMhBB0HqFjtNaLccLK0m0Aw/l17rpaR6W7K4Hau03QW+B
gpWUXIEJ5+mbCebq+H8/bZsk
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:30 2025 by rpki-client