Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/74SKmalvDtmce9hAuQaTHe0pI3E.roa
File: 74SKmalvDtmce9hAuQaTHe0pI3E.roa (raw, json)
Hash identifier: SpaUO7vZ39M1F4yw8iYE71gYEUiMpRjxU2xSillug+U=
Subject key identifier: EF:84:8A:99:A9:6F:0E:D9:9C:7B:D8:40:B9:06:93:1D:ED:29:23:71
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019937F34CA841785DAC0E6C0626F941298D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/74SKmalvDtmce9hAuQaTHe0pI3E.roa
Signing time: Thu 11 Sep 2025 08:45:15 +0000
ROA not before: Thu 11 Sep 2025 08:45:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
92.118.8.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
185.114.72.0/24 maxlen: 24
185.114.73.0/24 maxlen: 24
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
2a04:5201:4::/48 maxlen: 48
2a04:5201:6::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:9::/48 maxlen: 48
2a04:5201:10::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
2a04:5202::/48 maxlen: 48
2a0b:7780::/32 maxlen: 32
2a0b:7781::/32 maxlen: 32
2a0b:7782::/32 maxlen: 32
2a0b:7783::/32 maxlen: 32
2a0c:77c0::/32 maxlen: 32
2a0c:77c1::/32 maxlen: 32
2a0c:77c2::/32 maxlen: 32
2a0c:77c3::/32 maxlen: 32
2a0d:3880::/32 maxlen: 32
2a0d:3881::/32 maxlen: 32
2a0d:3882::/32 maxlen: 32
2a0d:3883::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:f3:4c:a8:41:78:5d:ac:0e:6c:06:26:f9:41:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 11 08:45:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef848a99a96f0ed99c7bd840b906931ded292371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:be:aa:f9:e4:f0:2e:9b:bf:f6:6a:a0:5a:
d0:15:f8:57:21:1d:ce:7c:9a:30:5f:c7:c4:8f:95:
d0:60:fc:cf:6c:e8:0d:56:2c:50:7e:54:f5:50:2b:
fd:b7:d6:4a:f0:c5:e5:2e:91:00:93:ee:5b:5d:b1:
c6:3f:87:26:91:39:43:b2:e7:e8:d4:20:b3:9a:38:
e1:3b:83:83:c2:58:b1:4b:39:98:a4:2b:df:ee:29:
56:d5:fc:cc:ea:56:fa:71:04:6d:94:fb:48:c5:cb:
f5:ec:fe:a8:58:a8:38:d0:ed:29:c9:ea:46:c4:23:
dd:9b:9a:62:f4:ac:f2:f5:64:0c:10:15:16:ae:98:
68:6c:0d:54:cf:f1:2f:87:27:c7:72:f5:99:79:e3:
25:8e:56:d3:30:0b:3b:47:c8:00:ac:c3:60:0a:cc:
0c:bf:3e:aa:f6:ea:5b:bd:4e:b6:90:94:38:4b:bd:
2f:5a:1c:61:e9:94:40:5d:ab:75:67:c0:5e:2b:35:
9f:24:e7:99:fa:8d:dd:c5:43:cc:4d:72:e5:df:3d:
b8:f2:f8:30:c5:b4:ec:ce:33:fe:ed:bb:92:30:7d:
1d:2b:7f:4f:de:13:61:02:38:ea:0d:bf:33:5b:a3:
a9:c0:51:8b:e7:69:1f:7f:1b:54:21:1c:00:c4:4e:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:84:8A:99:A9:6F:0E:D9:9C:7B:D8:40:B9:06:93:1D:ED:29:23:71
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/74SKmalvDtmce9hAuQaTHe0pI3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.32.0/22
92.118.8.0/23
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:9::/48
2a04:5201:10::/48
2a04:5201:8018::/48
2a04:5202::/48
2a0b:7780::/30
2a0c:77c0::/30
2a0d:3880::/30
Signature Algorithm: sha256WithRSAEncryption
82:16:54:22:a7:35:89:d6:db:03:62:b0:f8:bc:65:c9:eb:04:
3f:c3:d9:93:75:98:85:24:25:74:8e:3a:4c:ce:80:dc:fb:cc:
f5:e5:db:db:46:c3:bc:7c:86:f8:31:73:64:34:01:72:67:d9:
81:79:74:32:52:53:72:1b:b0:7e:66:67:d0:67:56:7e:50:fa:
8a:04:d5:2b:32:82:45:49:d8:f0:a7:c7:f7:0a:21:7c:02:3f:
59:95:04:c4:39:66:74:57:94:3a:1a:be:6e:d7:4d:d4:25:ec:
b2:be:3d:e1:19:0a:8f:c1:d9:c4:72:8e:68:2b:73:3b:fb:64:
ee:58:29:b9:30:29:1c:67:ac:53:5f:57:1c:32:5b:cd:01:22:
3d:e9:29:73:53:f2:ad:17:06:3f:34:87:eb:21:29:00:2b:4d:
af:ec:ee:38:4a:f8:4b:ef:8f:25:58:82:20:6d:62:d9:c6:e1:
a3:2e:7f:9c:1e:31:82:d1:09:8b:cf:34:a0:31:47:da:44:b9:
ff:de:b7:78:cb:93:55:08:82:d8:49:cd:49:f7:ed:62:26:90:
35:47:09:4e:b2:66:0c:34:a7:bb:e8:da:ea:53:23:a3:0e:7f:
67:55:27:7e:19:43:fa:9c:27:1d:c6:72:f2:2e:4f:e0:a6:76:
35:dc:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:26 2025 by rpki-client