Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa
File: DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa (raw, json)
Hash identifier: E1ibhwBfmIcFn7h/JxzOSZ/iplWkTSQE9ZGFZ1Ek2Kg=
Subject key identifier: 0E:79:67:6A:25:0E:9F:76:C6:46:37:70:F9:86:F5:7E:45:2C:36:DA
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 0198A1FE758EAB2FB4382DAF5F84624AC073
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa
Signing time: Wed 13 Aug 2025 05:54:24 +0000
ROA not before: Wed 13 Aug 2025 05:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21277
IP address blocks: 93.91.192.0/20 maxlen: 20
93.91.192.0/24 maxlen: 24
93.91.193.0/24 maxlen: 24
93.91.194.0/24 maxlen: 24
93.91.195.0/24 maxlen: 24
93.91.196.0/24 maxlen: 24
93.91.197.0/24 maxlen: 24
93.91.198.0/24 maxlen: 24
93.91.199.0/24 maxlen: 24
93.91.200.0/24 maxlen: 24
93.91.201.0/24 maxlen: 24
93.91.202.0/24 maxlen: 24
93.91.203.0/24 maxlen: 24
93.91.204.0/24 maxlen: 24
93.91.205.0/24 maxlen: 24
93.91.206.0/24 maxlen: 24
93.91.207.0/24 maxlen: 24
95.170.192.0/19 maxlen: 19
95.170.192.0/24 maxlen: 24
95.170.193.0/24 maxlen: 24
95.170.194.0/24 maxlen: 24
95.170.195.0/24 maxlen: 24
95.170.196.0/24 maxlen: 24
95.170.197.0/24 maxlen: 24
95.170.198.0/24 maxlen: 24
95.170.199.0/24 maxlen: 24
95.170.200.0/24 maxlen: 24
95.170.201.0/24 maxlen: 24
95.170.202.0/24 maxlen: 24
95.170.203.0/24 maxlen: 24
95.170.204.0/24 maxlen: 24
95.170.205.0/24 maxlen: 24
95.170.206.0/24 maxlen: 24
95.170.207.0/24 maxlen: 24
95.170.208.0/24 maxlen: 24
95.170.209.0/24 maxlen: 24
95.170.210.0/24 maxlen: 24
95.170.211.0/24 maxlen: 24
95.170.212.0/24 maxlen: 24
95.170.213.0/24 maxlen: 24
95.170.214.0/24 maxlen: 24
95.170.215.0/24 maxlen: 24
95.170.216.0/24 maxlen: 24
95.170.217.0/24 maxlen: 24
95.170.218.0/24 maxlen: 24
95.170.219.0/24 maxlen: 24
95.170.220.0/24 maxlen: 24
95.170.221.0/24 maxlen: 24
95.170.222.0/24 maxlen: 24
95.170.223.0/24 maxlen: 24
109.127.64.0/18 maxlen: 18
109.127.64.0/20 maxlen: 20
109.127.64.0/21 maxlen: 21
109.127.64.0/24 maxlen: 24
109.127.65.0/24 maxlen: 24
109.127.66.0/24 maxlen: 24
109.127.67.0/24 maxlen: 24
109.127.68.0/24 maxlen: 24
109.127.69.0/24 maxlen: 24
109.127.70.0/24 maxlen: 24
109.127.71.0/24 maxlen: 24
109.127.72.0/21 maxlen: 21
109.127.72.0/24 maxlen: 24
109.127.73.0/24 maxlen: 24
109.127.74.0/24 maxlen: 24
109.127.75.0/24 maxlen: 24
109.127.76.0/24 maxlen: 24
109.127.77.0/24 maxlen: 24
109.127.78.0/24 maxlen: 24
109.127.79.0/24 maxlen: 24
109.127.80.0/24 maxlen: 24
109.127.81.0/24 maxlen: 24
109.127.82.0/24 maxlen: 24
109.127.83.0/24 maxlen: 24
109.127.84.0/24 maxlen: 24
109.127.85.0/24 maxlen: 24
109.127.86.0/24 maxlen: 24
109.127.87.0/24 maxlen: 24
109.127.88.0/24 maxlen: 24
109.127.89.0/24 maxlen: 24
109.127.90.0/24 maxlen: 24
109.127.91.0/24 maxlen: 24
109.127.92.0/24 maxlen: 24
109.127.93.0/24 maxlen: 24
109.127.94.0/24 maxlen: 24
109.127.95.0/24 maxlen: 24
109.127.96.0/24 maxlen: 24
109.127.97.0/24 maxlen: 24
109.127.98.0/24 maxlen: 24
109.127.99.0/24 maxlen: 24
109.127.100.0/24 maxlen: 24
109.127.101.0/24 maxlen: 24
109.127.102.0/24 maxlen: 24
109.127.103.0/24 maxlen: 24
109.127.104.0/24 maxlen: 24
109.127.105.0/24 maxlen: 24
109.127.106.0/24 maxlen: 24
109.127.107.0/24 maxlen: 24
109.127.108.0/24 maxlen: 24
109.127.109.0/24 maxlen: 24
109.127.110.0/24 maxlen: 24
109.127.111.0/24 maxlen: 24
109.127.112.0/24 maxlen: 24
109.127.113.0/24 maxlen: 24
109.127.114.0/24 maxlen: 24
109.127.115.0/24 maxlen: 24
109.127.116.0/24 maxlen: 24
109.127.117.0/24 maxlen: 24
109.127.118.0/24 maxlen: 24
109.127.119.0/24 maxlen: 24
109.127.120.0/24 maxlen: 24
109.127.121.0/24 maxlen: 24
109.127.122.0/24 maxlen: 24
109.127.123.0/24 maxlen: 24
109.127.124.0/24 maxlen: 24
109.127.125.0/24 maxlen: 24
109.127.126.0/24 maxlen: 24
109.127.127.0/24 maxlen: 24
130.193.128.0/17 maxlen: 17
130.193.128.0/19 maxlen: 19
130.193.128.0/24 maxlen: 24
130.193.129.0/24 maxlen: 24
130.193.130.0/24 maxlen: 24
130.193.131.0/24 maxlen: 24
130.193.132.0/22 maxlen: 22
130.193.132.0/24 maxlen: 24
130.193.133.0/24 maxlen: 24
130.193.134.0/24 maxlen: 24
130.193.135.0/24 maxlen: 24
130.193.136.0/24 maxlen: 24
130.193.137.0/24 maxlen: 24
130.193.138.0/24 maxlen: 24
130.193.139.0/24 maxlen: 24
130.193.140.0/24 maxlen: 24
130.193.141.0/24 maxlen: 24
130.193.142.0/24 maxlen: 24
130.193.143.0/24 maxlen: 24
130.193.144.0/24 maxlen: 24
130.193.145.0/24 maxlen: 24
130.193.146.0/24 maxlen: 24
130.193.147.0/24 maxlen: 24
130.193.148.0/24 maxlen: 24
130.193.149.0/24 maxlen: 24
130.193.150.0/23 maxlen: 23
130.193.150.0/24 maxlen: 24
130.193.151.0/24 maxlen: 24
130.193.152.0/23 maxlen: 23
130.193.152.0/24 maxlen: 24
130.193.153.0/24 maxlen: 24
130.193.154.0/23 maxlen: 23
130.193.154.0/24 maxlen: 24
130.193.155.0/24 maxlen: 24
130.193.156.0/24 maxlen: 24
130.193.157.0/24 maxlen: 24
130.193.158.0/24 maxlen: 24
130.193.159.0/24 maxlen: 24
130.193.160.0/20 maxlen: 20
130.193.160.0/23 maxlen: 23
130.193.160.0/24 maxlen: 24
130.193.161.0/24 maxlen: 24
130.193.162.0/24 maxlen: 24
130.193.163.0/24 maxlen: 24
130.193.164.0/24 maxlen: 24
130.193.165.0/24 maxlen: 24
130.193.166.0/24 maxlen: 24
130.193.167.0/24 maxlen: 24
130.193.168.0/24 maxlen: 24
130.193.169.0/24 maxlen: 24
130.193.170.0/24 maxlen: 24
130.193.171.0/24 maxlen: 24
130.193.172.0/24 maxlen: 24
130.193.173.0/24 maxlen: 24
130.193.174.0/24 maxlen: 24
130.193.175.0/24 maxlen: 24
130.193.176.0/20 maxlen: 20
130.193.176.0/21 maxlen: 21
130.193.176.0/24 maxlen: 24
130.193.177.0/24 maxlen: 24
130.193.178.0/24 maxlen: 24
130.193.179.0/24 maxlen: 24
130.193.180.0/24 maxlen: 24
130.193.181.0/24 maxlen: 24
130.193.182.0/24 maxlen: 24
130.193.183.0/24 maxlen: 24
130.193.184.0/21 maxlen: 21
130.193.184.0/24 maxlen: 24
130.193.185.0/24 maxlen: 24
130.193.186.0/24 maxlen: 24
130.193.187.0/24 maxlen: 24
130.193.188.0/24 maxlen: 24
130.193.189.0/24 maxlen: 24
130.193.190.0/24 maxlen: 24
130.193.191.0/24 maxlen: 24
130.193.192.0/20 maxlen: 20
130.193.192.0/24 maxlen: 24
130.193.193.0/24 maxlen: 24
130.193.194.0/24 maxlen: 24
130.193.195.0/24 maxlen: 24
130.193.196.0/24 maxlen: 24
130.193.197.0/24 maxlen: 24
130.193.198.0/24 maxlen: 24
130.193.199.0/24 maxlen: 24
130.193.200.0/24 maxlen: 24
130.193.201.0/24 maxlen: 24
130.193.202.0/24 maxlen: 24
130.193.203.0/24 maxlen: 24
130.193.204.0/24 maxlen: 24
130.193.205.0/24 maxlen: 24
130.193.206.0/24 maxlen: 24
130.193.207.0/24 maxlen: 24
130.193.208.0/20 maxlen: 20
130.193.208.0/24 maxlen: 24
130.193.209.0/24 maxlen: 24
130.193.210.0/24 maxlen: 24
130.193.211.0/24 maxlen: 24
130.193.212.0/24 maxlen: 24
130.193.213.0/24 maxlen: 24
130.193.214.0/24 maxlen: 24
130.193.215.0/24 maxlen: 24
130.193.216.0/24 maxlen: 24
130.193.217.0/24 maxlen: 24
130.193.218.0/24 maxlen: 24
130.193.219.0/24 maxlen: 24
130.193.220.0/24 maxlen: 24
130.193.221.0/24 maxlen: 24
130.193.222.0/24 maxlen: 24
130.193.223.0/24 maxlen: 24
130.193.224.0/20 maxlen: 20
130.193.224.0/24 maxlen: 24
130.193.225.0/24 maxlen: 24
130.193.240.0/20 maxlen: 20
2a04:a040::/29 maxlen: 29
2a04:a040::/32 maxlen: 32
2a04:a041::/32 maxlen: 32
2a04:a042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:fe:75:8e:ab:2f:b4:38:2d:af:5f:84:62:4a:c0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Aug 13 05:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e79676a250e9f76c6463770f986f57e452c36da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:94:fc:e5:8b:eb:0b:b8:d3:71:0c:7e:bc:
f9:1c:55:57:c8:c9:d8:bb:23:03:47:e1:0f:56:0c:
ad:f7:1e:62:98:7a:c4:00:33:7d:e5:de:18:ff:3d:
ee:2c:df:d4:6d:b5:ae:3b:eb:1a:18:2b:01:4e:d8:
9a:4d:f5:00:a6:82:26:99:98:2e:ae:b3:fe:d6:3b:
61:fa:9a:51:25:41:f6:10:e1:b2:62:ba:7c:d8:5c:
9d:be:a3:dc:be:a3:d8:d1:d7:f0:bd:b1:e7:8a:f1:
e0:57:0b:0d:47:c2:18:ad:39:7a:bf:10:e5:15:4d:
1e:92:4c:6b:76:b7:19:c5:ae:6b:ab:81:dc:83:c1:
96:08:36:70:bd:5d:10:29:bc:0c:ad:3c:a4:f4:2a:
c1:bc:57:72:f3:0f:f4:65:68:e7:b3:d2:89:c9:c1:
1c:29:6c:07:ca:be:a3:7c:c7:4b:42:41:38:1f:a3:
05:31:0b:8a:56:7d:3a:94:76:ce:92:38:98:40:52:
9b:33:39:36:60:a1:cb:74:4b:30:c5:1a:5a:2f:84:
31:4f:67:9a:00:3a:11:8f:92:bf:38:21:39:c2:84:
a2:e6:55:fa:33:30:e7:97:42:a0:5e:43:42:3b:b7:
3e:59:5c:06:22:6f:b1:20:97:4b:e7:dd:a2:63:71:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:67:6A:25:0E:9F:76:C6:46:37:70:F9:86:F5:7E:45:2C:36:DA
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.192.0/20
95.170.192.0/19
109.127.64.0/18
130.193.128.0/17
IPv6:
2a04:a040::/29
Signature Algorithm: sha256WithRSAEncryption
26:74:b4:84:70:19:1f:44:1e:fc:20:40:98:a9:03:d5:1f:eb:
cf:e4:1f:23:98:a5:38:36:40:64:99:61:53:e1:d3:01:1f:91:
b9:f0:68:4d:ac:00:22:91:29:c4:73:a5:34:b2:bd:89:3b:39:
93:46:dc:95:6f:4e:bd:63:4d:78:54:09:5b:68:7b:e9:19:b3:
fc:ad:c6:fe:fc:11:b9:e9:4a:79:fe:7d:a1:56:c4:50:75:c6:
90:7a:d1:d5:36:da:d3:85:c6:64:c8:0c:ff:2e:fd:80:ef:eb:
4c:b9:30:19:5d:ce:f5:83:9c:2e:22:48:d6:d3:cf:ef:50:67:
d6:33:35:7d:5c:de:4f:aa:bd:8f:2e:ad:b1:9b:c5:d4:3d:8e:
32:53:b0:87:41:7a:41:e3:d2:5f:f7:5b:f7:07:4a:e1:30:7d:
03:0b:de:c4:dd:8c:b8:cc:53:55:17:5e:8b:ea:e3:63:01:ce:
db:cc:72:3e:5e:d9:17:ac:a0:8b:57:3b:00:0a:52:e5:bb:90:
fc:bd:67:4c:71:6e:04:27:1a:92:98:c9:d3:a8:34:8f:5e:2d:
a0:c4:48:f0:3c:86:4a:c0:9e:2b:b2:89:7e:9f:99:53:82:4e:
df:9f:4d:b2:10:d2:01:46:f7:76:71:8c:f4:b4:dd:2f:ed:c4:
28:c1:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:54 2025 by rpki-client