Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/1-oqovYb6kXA48Esy0lEB4Qe7ANA.roa
File: 1-oqovYb6kXA48Esy0lEB4Qe7ANA.roa (raw, json)
Hash identifier: VGdtLijiKCzB7l2xXJsLZyHSJ1X/Htcad4QuCTd7vY8=
Subject key identifier: FA:8A:A8:BD:86:FA:91:70:38:F0:4B:32:D2:51:01:E1:07:BB:00:D0
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019889BA9B3BB0EF442F87187C84EA86FE24
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/1-oqovYb6kXA48Esy0lEB4Qe7ANA.roa
Signing time: Fri 08 Aug 2025 12:49:24 +0000
ROA not before: Fri 08 Aug 2025 12:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
94.131.10.0/24 maxlen: 24
94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
94.131.20.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
146.19.75.0/24 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf40::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c00::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c01::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d84::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d86::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3082::/32 maxlen: 32
2a14:3083::/32 maxlen: 32
2a14:3084::/32 maxlen: 32
2a14:3085::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
2a14:3087::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:ba:9b:3b:b0:ef:44:2f:87:18:7c:84:ea:86:fe:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Aug 8 12:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa8aa8bd86fa917038f04b32d25101e107bb00d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:62:9a:b6:75:e3:d9:33:41:ce:a2:82:5a:
52:65:ae:fb:16:44:bb:a0:ce:3f:1c:d6:c2:c1:ef:
ff:e2:ae:b9:3d:52:fa:21:a2:79:ce:74:36:19:2b:
36:9b:12:21:c9:bf:5d:52:9e:8f:59:7e:e7:cf:74:
77:3d:13:21:ea:aa:da:da:95:94:ee:0c:c2:f3:dc:
22:79:c2:27:74:9e:47:c1:ce:20:01:2c:99:0d:8b:
21:3b:fd:5f:f0:85:fd:58:ab:8b:fe:df:ab:82:27:
19:e4:81:12:8c:90:f3:97:98:e4:6e:a0:8e:ac:60:
13:7f:d5:9f:24:09:60:c8:c4:a0:e3:50:79:04:9a:
86:10:9f:f7:db:68:d9:54:57:55:75:c3:c3:79:2c:
e6:c6:c9:df:8e:53:15:5e:d7:ca:35:d1:c2:bb:e4:
4a:b1:8a:1f:9f:59:3c:ac:cd:ba:f0:06:8c:a3:6b:
86:6c:8a:38:ad:21:92:ab:60:48:4f:ae:de:52:a6:
3a:6a:fb:11:fd:60:a1:df:25:7b:c7:75:ba:d6:69:
eb:ea:8c:0b:dc:3d:6b:78:ba:29:2e:a1:cc:ba:98:
f0:b1:b4:24:58:63:35:f6:58:48:d4:57:14:02:54:
2f:45:53:ba:21:72:47:52:2e:a3:7c:58:69:4c:14:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:A8:BD:86:FA:91:70:38:F0:4B:32:D2:51:01:E1:07:BB:00:D0
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/1-oqovYb6kXA48Esy0lEB4Qe7ANA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/23
45.67.231.0/24
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
94.131.10.0/24
94.131.13.0-94.131.14.255
94.131.20.0/24
94.131.96.0/24
94.131.100.0/24
94.131.104.0/24
94.131.117.0/24
94.131.119.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
146.19.75.0/24
146.19.170.0/24
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/24
185.250.150.0/23
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf40::/32
2a0b:cf43::/32
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c00::/30
2a11:4c00::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e06::/32
2a14:2d80::/29
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/29
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
1e:91:bc:aa:5d:ff:dc:87:64:02:98:a9:42:d7:ab:c8:df:b2:
57:b2:97:de:84:6e:94:73:e7:0a:32:8e:6a:cd:a0:bb:ed:b0:
ea:ee:9e:d6:f2:2b:75:3c:ce:eb:6a:f1:04:30:45:c4:a8:f7:
e9:38:99:90:78:e6:12:4a:5b:4e:5f:f3:74:10:f4:d5:d9:e4:
33:38:b8:1c:e5:ca:1a:f6:a3:20:ce:3d:ec:38:61:fe:53:19:
27:cd:2c:9a:01:81:b4:f5:69:3a:93:a4:9a:95:81:ae:b2:16:
e0:d8:e7:98:ae:ef:f5:fd:c6:85:48:39:58:79:20:f4:c4:f8:
d9:83:fc:79:05:09:98:04:40:b0:82:f6:2c:76:b0:50:5b:94:
fb:4b:28:aa:62:7b:d5:b8:5b:01:a5:a1:46:ff:eb:74:30:46:
fc:28:fc:17:ec:3f:5b:1e:af:1d:6e:ea:30:da:43:76:b3:d4:
81:85:38:54:79:52:71:f6:8d:c3:c1:48:97:dd:fc:9b:7e:e6:
14:7f:ce:0c:35:58:d8:92:5e:b3:3c:a2:28:0d:59:72:66:85:
02:0c:d6:b9:bb:4f:6a:d9:07:26:42:88:0b:7f:a2:3f:a5:19:
fd:fc:2c:d7:99:aa:84:22:d4:5b:55:1f:c0:b7:ef:0c:8c:de:
3b:a7:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:13 2025 by rpki-client