Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/M9Dq4WfgFsI7fE1iog2ayq06W-A.roa
File: M9Dq4WfgFsI7fE1iog2ayq06W-A.roa (raw, json)
Hash identifier: hT0E1FXKzpYQfTVoBTqyYYdLOXrtXgyvkEbdkV/2lUc=
Subject key identifier: 33:D0:EA:E1:67:E0:16:C2:3B:7C:4D:62:A2:0D:9A:CA:AD:3A:5B:E0
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0198C2972DD8BF47CB25442F95E4867E7EF0
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/M9Dq4WfgFsI7fE1iog2ayq06W-A.roa
Signing time: Tue 19 Aug 2025 13:49:04 +0000
ROA not before: Tue 19 Aug 2025 13:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.12.207.0/24 maxlen: 24
45.66.132.0/24 maxlen: 24
45.66.135.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.90.140.0/24 maxlen: 24
45.128.152.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
89.31.124.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
152.89.210.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.224.0/24 maxlen: 24
185.167.117.0/24 maxlen: 24
185.167.118.0/24 maxlen: 24
185.167.119.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.171.123.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
185.187.236.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
192.54.59.0/24 maxlen: 24
193.37.56.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
193.38.136.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
194.156.229.0/24 maxlen: 24
2a0c:8a40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:97:2d:d8:bf:47:cb:25:44:2f:95:e4:86:7e:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Aug 19 13:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33d0eae167e016c23b7c4d62a20d9acaad3a5be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:fa:c8:0d:6f:e2:6f:55:07:ef:06:91:21:
67:7d:f4:34:1b:e4:ed:bc:9a:8a:2a:09:41:46:3f:
43:6b:05:12:96:93:b5:99:5e:99:75:64:ab:a4:f3:
4b:ff:26:8b:7c:65:a1:ab:6f:6a:90:61:9d:c0:5c:
67:a5:d7:9c:49:a9:4d:8c:a1:05:8e:cd:52:a9:ec:
5f:58:80:06:52:89:09:4b:54:a5:e5:75:c6:c0:bc:
d7:f5:f9:0e:2b:f3:69:ce:cf:51:d6:39:2f:a5:6e:
e1:1b:8e:32:86:00:ab:55:dc:8a:69:f5:ce:1f:e4:
a7:cf:47:dc:54:dc:54:b0:cf:5d:5c:49:e0:45:ce:
c3:a5:2a:d1:9b:e2:bc:09:17:76:57:4d:84:02:3e:
c8:d1:e5:4e:bb:0d:a2:f6:06:22:f4:d4:f2:88:e4:
98:94:ff:6c:6c:73:76:3e:52:e3:93:6f:14:18:94:
7a:3f:07:ed:8e:14:eb:c0:92:da:d9:5f:fd:e1:0b:
b7:af:10:60:ab:c5:3e:f8:b5:06:56:8f:ef:c5:f4:
57:2a:0f:12:dc:88:61:b6:02:e9:b5:cc:3a:1d:03:
93:c6:c2:fa:1c:92:fc:74:12:ca:b0:6a:e9:99:1b:
f0:4e:d8:c2:b3:db:0f:43:46:78:5a:c9:38:a6:24:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:EA:E1:67:E0:16:C2:3B:7C:4D:62:A2:0D:9A:CA:AD:3A:5B:E0
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/M9Dq4WfgFsI7fE1iog2ayq06W-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.207.0/24
45.66.132.0/24
45.66.135.0/24
45.82.165.0/24
45.85.2.0/24
45.90.140.0/24
45.128.152.0/24
45.134.18.0/24
45.144.242.0/23
89.31.124.0/24
91.220.202.0/23
147.78.14.0/24
152.89.210.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.224.0/24
185.167.117.0-185.167.119.255
185.171.122.0/23
185.172.114.0/24
185.175.142.0/23
185.187.236.0/24
188.119.102.0/24
192.54.58.0/23
193.37.56.0/23
193.38.136.0/24
194.124.32.0/24
194.156.229.0/24
IPv6:
2a0c:8a40:2::/48
Signature Algorithm: sha256WithRSAEncryption
1f:33:43:ca:fb:8e:f3:b4:f0:68:a1:e2:5c:ac:18:7e:82:8d:
0c:b8:8a:97:b7:f0:ea:39:19:cf:9c:df:5e:2f:1d:e4:ec:28:
03:fc:ed:45:2b:12:97:72:7e:11:63:ce:b4:48:cb:0b:0f:28:
2f:ed:e4:52:9f:d2:9c:6e:98:c8:0a:4f:e3:1c:46:22:6e:91:
4a:8c:24:75:9b:b2:88:0c:5b:1c:c6:bf:3c:da:22:6c:ce:08:
19:e2:f9:a1:57:ef:30:28:c8:fe:da:42:a9:80:16:68:69:f7:
97:4c:cb:71:68:0a:9c:b5:c7:b6:57:6b:da:57:00:60:d3:fe:
b4:bf:56:52:8a:49:ec:39:1f:d0:07:d5:58:8e:25:fd:1c:8a:
f0:10:42:b1:8d:cd:0d:ed:d8:4d:a3:6d:f9:33:7d:c1:69:8a:
26:71:b7:1b:fb:ed:95:51:2e:be:2c:07:7b:bc:b9:32:29:b5:
4d:66:4d:8a:eb:d5:c2:e9:7d:b7:d0:be:ab:6c:9f:ba:01:bd:
f3:71:5e:8e:ed:10:67:c2:1c:b6:4f:48:60:b7:67:5c:b1:46:
af:56:cc:7d:58:ac:06:db:07:bc:e5:aa:b5:81:1e:05:58:a5:
8f:43:24:6e:27:99:7e:a8:72:85:b4:4d:e4:5d:55:c1:f2:e5:
16:3c:f5:98
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAZjCly3Yv0fLJUQvleSGfn7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjUwODE5MTM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2QwZWFlMTY3ZTAxNmMyM2I3YzRkNjJhMjBkOWFjYWFkM2E1YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGr6yA1v4m9VB+8GkSFnffQ0G+Tt
vJqKKglBRj9DawUSlpO1mV6ZdWSrpPNL/yaLfGWhq29qkGGdwFxnpdecSalNjKEF
js1SqexfWIAGUokJS1Sl5XXGwLzX9fkOK/Npzs9R1jkvpW7hG44yhgCrVdyKafXO
H+Snz0fcVNxUsM9dXEngRc7DpSrRm+K8CRd2V02EAj7I0eVOuw2i9gYi9NTyiOSY
lP9sbHN2PlLjk28UGJR6PwftjhTrwJLa2V/94Qu3rxBgq8U++LUGVo/vxfRXKg8S
3IhhtgLptcw6HQOTxsL6HJL8dBLKsGrpmRvwTtjCs9sPQ0Z4Wsk4piSZPQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFDPQ6uFn4BbCO3xNYqINmsqtOlvgMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvTTlEcTRXZmdGc0k3ZkUxaW9nMmF5cTA2Vy1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TCBvQQCAAEwgbYDBAAt
DM8DBAAtQoQDBAAtQocDBAAtUqUDBAAtVQIDBAAtWowDBAAtgJgDBAAthhIDBAEt
kPIDBABZH3wDBAFb3MoDBACTTg4DBACYWdIDBAC5ab8DBAC5eBEDBAC5fkQDBAG5
fogDBAC5fuAwDAMEALmndQMEA7mncAMEAbmregMEALmscgMEAbmvjgMEALm77AME
ALx3ZgMEAcA2OgMEAcElOAMEAMEmiAMEAMJ8IAMEAMKc5TAPBAIAAjAJAwcAKgyK
QAACMA0GCSqGSIb3DQEBCwUAA4IBAQAfM0PK+47ztPBooeJcrBh+go0MuIqXt/Dq
ORnPnN9eLx3k7CgD/O1FKxKXcn4RY860SMsLDygv7eRSn9KcbpjICk/jHEYibpFK
jCR1m7KIDFscxr882iJszggZ4vmhV+8wKMj+2kKpgBZoafeXTMtxaAqctce2V2va
VwBg0/60v1ZSiknsOR/QB9VYjiX9HIrwEEKxjc0N7dhNo235M33BaYomcbcb++2V
US6+LAd7vLkyKbVNZk2K69XC6X230L6rbJ+6Ab3zcV6O7RBnwhy2T0hgt2dcsUav
Vsx9WKwG2we85aq1gR4FWKWPQyRuJ5l+qHKFtE3kXVXB8uUWPPWY
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:57:32 2025 by rpki-client