Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ll0sY2OE3Zn46qY5JlGYvtLl7Xs.roa
File: ll0sY2OE3Zn46qY5JlGYvtLl7Xs.roa (raw, json)
Hash identifier: uICBvePHH26ZnEOUDyEGetCnDDAiofNJKq9IFV1xei0=
Subject key identifier: 96:5D:2C:63:63:84:DD:99:F8:EA:A6:39:26:51:98:BE:D2:E5:ED:7B
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 0199E6A2D5A494E50DD196FE0DE1D9398EC1
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ll0sY2OE3Zn46qY5JlGYvtLl7Xs.roa
Signing time: Wed 15 Oct 2025 06:50:55 +0000
ROA not before: Wed 15 Oct 2025 06:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8849
IP address blocks: 5.42.206.0/24 maxlen: 24
5.44.249.0/24 maxlen: 24
31.222.226.0/24 maxlen: 24
62.122.187.0/24 maxlen: 24
88.210.36.0/23 maxlen: 24
89.36.162.0/24 maxlen: 24
89.36.163.0/24 maxlen: 24
89.40.226.0/24 maxlen: 24
91.192.81.0/24 maxlen: 24
95.81.85.0/24 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.107.0/24 maxlen: 24
95.81.110.0/24 maxlen: 24
95.174.68.0/24 maxlen: 24
95.174.69.0/24 maxlen: 24
95.174.70.0/24 maxlen: 24
95.174.71.0/24 maxlen: 24
103.97.91.0/24 maxlen: 24
103.111.112.0/22 maxlen: 24
103.253.36.0/24 maxlen: 24
109.122.200.0/23 maxlen: 24
109.122.207.0/24 maxlen: 24
146.19.196.0/24 maxlen: 24
158.255.76.0/24 maxlen: 24
176.97.192.0/24 maxlen: 24
185.140.210.0/24 maxlen: 24
185.140.211.0/24 maxlen: 24
185.147.53.0/24 maxlen: 24
185.224.249.0/24 maxlen: 24
185.230.245.0/24 maxlen: 24
185.234.144.0/23 maxlen: 23
193.35.224.0/24 maxlen: 24
213.111.130.0/24 maxlen: 24
213.111.131.0/24 maxlen: 24
213.111.142.0/24 maxlen: 24
2a06:f901:4000::/36 maxlen: 36
2a06:f901:8000::/36 maxlen: 36
2a06:f901:c000::/36 maxlen: 36
2a06:f902:4000::/36 maxlen: 36
2a06:f902:8000::/36 maxlen: 36
2a06:f903:4000::/36 maxlen: 36
2a06:f903:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:a2:d5:a4:94:e5:0d:d1:96:fe:0d:e1:d9:39:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Oct 15 06:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=965d2c636384dd99f8eaa639265198bed2e5ed7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:11:aa:7f:ee:ba:d5:d1:07:5b:f4:fa:36:
74:4b:52:97:3a:3e:8a:5f:4f:0b:4b:b4:cb:30:4a:
ff:d3:68:8d:f9:0a:a1:98:f5:fd:80:70:8f:c1:52:
d7:40:c6:2b:bb:84:76:01:d8:b3:cf:c3:90:cf:27:
ab:5c:df:bf:3a:e4:c1:3e:11:9e:dd:b3:c9:da:96:
57:f0:98:f4:9b:72:4a:27:4b:f5:e6:91:11:9c:d4:
be:fb:94:91:54:58:8d:97:7a:42:b6:67:90:f7:0e:
9e:59:5c:b0:da:94:a7:95:f7:28:48:da:80:04:16:
09:74:34:93:4f:42:6e:2b:f7:92:a0:ef:e0:96:52:
78:28:56:4c:69:1b:77:21:3d:b3:75:7d:97:a4:7a:
39:79:66:e8:b0:4c:13:6f:40:bb:3c:3b:f2:dc:e9:
a2:a3:2c:0e:1f:ff:10:3b:da:eb:13:8a:2a:a9:8c:
81:93:28:4f:a5:87:b5:ee:9e:b7:e6:fd:72:be:e2:
21:7b:48:72:18:fa:0c:91:96:65:95:ce:73:b3:4c:
98:09:64:5c:1c:e1:92:62:43:65:44:e5:40:d2:94:
41:99:41:6b:46:43:b8:e2:61:11:7c:5b:07:f5:bb:
3c:2b:51:36:d6:b2:79:59:7d:a3:ec:1c:20:ed:88:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:2C:63:63:84:DD:99:F8:EA:A6:39:26:51:98:BE:D2:E5:ED:7B
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ll0sY2OE3Zn46qY5JlGYvtLl7Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.206.0/24
5.44.249.0/24
31.222.226.0/24
62.122.187.0/24
88.210.36.0/23
89.36.162.0/23
89.40.226.0/24
91.192.81.0/24
95.81.85.0-95.81.86.255
95.81.107.0/24
95.81.110.0/24
95.174.68.0/22
103.97.91.0/24
103.111.112.0/22
103.253.36.0/24
109.122.200.0/23
109.122.207.0/24
146.19.196.0/24
158.255.76.0/24
176.97.192.0/24
185.140.210.0/23
185.147.53.0/24
185.224.249.0/24
185.230.245.0/24
185.234.144.0/23
193.35.224.0/24
213.111.130.0/23
213.111.142.0/24
IPv6:
2a06:f901:4000::/36
2a06:f901:8000::/36
2a06:f901:c000::/36
2a06:f902:4000::/36
2a06:f902:8000::/36
2a06:f903:4000::/36
2a06:f903:8000::/36
Signature Algorithm: sha256WithRSAEncryption
1f:43:b5:a1:e5:5f:77:e9:3d:14:fe:5a:ec:bc:8b:ad:e7:18:
40:3b:c0:1f:0b:fd:b5:b6:b9:7f:a0:ba:f2:e3:db:b9:bc:7d:
d7:57:cb:3b:4d:9a:89:be:1c:59:a3:5b:33:ab:7e:96:57:d3:
37:7b:a4:5e:b8:73:9e:81:02:c5:92:63:71:ff:34:2f:ba:75:
76:77:43:7c:d2:49:cc:41:8e:6b:3a:b7:a3:f8:6a:07:62:dd:
68:1a:5d:18:5e:7f:3f:98:0c:5b:61:19:e8:23:cd:3e:e3:80:
b4:ac:33:90:a2:55:b3:49:94:6f:3f:e0:6b:87:7a:e4:9b:06:
9e:31:ba:2d:12:18:dc:f9:82:f3:cc:46:e8:11:25:14:6c:20:
41:04:52:dd:b5:89:36:45:d4:ee:39:e2:fd:4f:7f:4c:c8:92:
d5:d5:c7:e2:3b:3e:0f:a4:b7:3b:4e:d3:4c:32:f4:8b:0b:7a:
85:d9:d1:0c:cc:2a:56:30:e9:15:7a:cf:ed:82:ef:96:21:8e:
fa:73:8d:8a:ab:68:ce:ed:67:36:2c:97:3e:f2:13:8a:b4:2a:
06:35:63:67:b9:5e:b1:ad:13:66:28:84:ee:78:63:3d:e3:68:
1f:12:7d:31:60:6b:dd:bc:8e:b9:7e:f5:d9:e9:66:3d:c2:b7:
bf:59:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:22 2025 by rpki-client