Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/1rlq_fWBh0L2EOdc4wOrveymX9M.roa
File: 1rlq_fWBh0L2EOdc4wOrveymX9M.roa (raw, json)
Hash identifier: uLo8jSiIQHULdrJ1vEY1CI4ik+HqFZYLJVcuGGK3Myc=
Subject key identifier: D6:B9:6A:FD:F5:81:87:42:F6:10:E7:5C:E3:03:AB:BD:EC:A6:5F:D3
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0199C43D07B5F6E568DA03D5882D0F22F23E
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/1rlq_fWBh0L2EOdc4wOrveymX9M.roa
Signing time: Wed 08 Oct 2025 14:32:38 +0000
ROA not before: Wed 08 Oct 2025 14:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205516
IP address blocks: 5.35.80.0/24 maxlen: 24
5.35.81.0/24 maxlen: 24
37.233.81.0/24 maxlen: 24
45.94.23.0/24 maxlen: 24
45.130.145.0/24 maxlen: 24
45.133.234.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
77.73.232.0/24 maxlen: 24
83.222.22.0/23 maxlen: 24
89.40.233.0/24 maxlen: 24
89.169.36.0/23 maxlen: 24
90.156.252.0/23 maxlen: 24
91.218.140.0/24 maxlen: 24
91.218.141.0/24 maxlen: 24
109.94.211.0/24 maxlen: 24
109.196.165.0/24 maxlen: 24
178.236.16.0/24 maxlen: 24
178.236.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:3d:07:b5:f6:e5:68:da:03:d5:88:2d:0f:22:f2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Oct 8 14:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6b96afdf5818742f610e75ce303abbdeca65fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:9b:ca:2c:99:3a:92:40:7c:97:2e:ae:55:
2c:2b:0c:dc:4f:a1:d4:3a:b0:ce:45:5b:e5:79:22:
3e:04:4a:43:a2:f7:c5:a4:30:1a:7d:8d:85:68:71:
7d:81:22:8b:d2:ce:14:48:35:15:4e:f1:18:87:df:
32:c6:d3:9f:46:3b:8f:20:0f:fd:25:a3:a4:31:7b:
80:fe:e1:db:d1:2f:23:62:16:ed:fc:17:60:2d:c3:
e4:c3:64:f8:22:d1:a7:41:84:4f:58:db:2d:6b:69:
65:fa:4d:8f:24:bb:14:39:85:58:79:63:05:c9:2c:
b4:4e:2a:df:09:07:b1:f2:6c:45:42:da:80:bf:60:
0a:44:44:53:78:fc:38:53:b6:f9:0f:c8:80:c2:14:
e6:7e:be:33:a6:56:19:b2:77:20:e8:ff:01:3a:86:
da:18:da:c9:ba:68:f7:56:fc:6f:72:6d:65:cd:db:
02:06:c0:57:29:64:03:7e:df:c1:03:06:32:de:ec:
17:d5:3b:a3:1f:39:c3:45:5e:85:16:fc:d7:3b:2e:
b7:0f:a7:c1:d4:50:e8:43:5e:b0:07:b1:53:ff:22:
69:99:25:01:5a:e4:b3:6b:ec:7a:00:64:04:a5:36:
05:c7:99:7b:c4:51:30:25:29:4c:7d:ab:74:ec:c0:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:6A:FD:F5:81:87:42:F6:10:E7:5C:E3:03:AB:BD:EC:A6:5F:D3
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/1rlq_fWBh0L2EOdc4wOrveymX9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/23
37.233.81.0/24
45.94.23.0/24
45.130.145.0/24
45.133.234.0/24
45.139.29.0/24
77.73.232.0/24
83.222.22.0/23
89.40.233.0/24
89.169.36.0/23
90.156.252.0/23
91.218.140.0/23
109.94.211.0/24
109.196.165.0/24
178.236.16.0/23
Signature Algorithm: sha256WithRSAEncryption
17:41:44:d3:16:71:3b:c2:2e:64:8c:55:f6:20:b1:97:c8:0a:
82:79:82:b7:22:70:fe:86:59:56:73:7c:7f:b7:eb:69:15:78:
27:d7:e6:ce:99:4c:98:9e:0b:30:a0:0e:e4:a4:d3:94:8e:91:
c9:f4:ad:28:2e:0e:17:a1:f1:e5:e5:b2:38:e7:4c:3b:c4:5d:
37:d7:73:b0:51:af:9d:e9:f2:4e:16:26:9e:84:59:dc:f3:ca:
ea:1e:47:5d:7e:a4:91:78:f0:e3:dd:c1:cb:09:68:e3:78:6c:
cb:90:a3:7d:d2:ca:28:c2:6c:a8:b2:d5:9e:94:33:07:b5:5c:
43:5b:c1:15:4d:de:b1:fd:6b:1e:8c:d6:75:2b:a7:87:61:3e:
47:3d:fe:ab:ce:c4:09:ed:b0:78:4a:e8:03:3e:21:a9:bb:e7:
8f:c4:a1:7d:28:4a:fc:69:53:fc:a5:3d:06:0b:e0:1f:91:6e:
0e:7b:7e:52:39:82:0e:d6:d7:86:f7:07:6e:a8:9c:b3:ed:04:
51:c3:dc:13:c8:ba:36:4b:9e:e6:96:fa:87:9f:91:02:50:73:
d8:8d:a9:de:08:3f:51:a8:16:70:7c:12:c1:e0:ad:7c:83:81:
1d:52:fb:c7:f5:43:53:87:2c:53:c6:7c:63:86:de:d9:c1:28:
9d:96:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:49 2025 by rpki-client