Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/9H9srKnw8RvIQeJ9hJqs_fat0r8.roa
File: 9H9srKnw8RvIQeJ9hJqs_fat0r8.roa (raw, json)
Hash identifier: R1zUkw4irStUEIrGPrquDCCAKD1sKGpT/yIr3uujFtc=
Subject key identifier: F4:7F:6C:AC:A9:F0:F1:1B:C8:41:E2:7D:84:9A:AC:FD:F6:AD:D2:BF
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0199D579DF5733503C687377C4D9EF279185
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/9H9srKnw8RvIQeJ9hJqs_fat0r8.roa
Signing time: Sat 11 Oct 2025 22:52:37 +0000
ROA not before: Sat 11 Oct 2025 22:52:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.213.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
185.23.215.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
213.152.190.0/24 maxlen: 24
2a00:1678:127::/48 maxlen: 48
2a00:1678:a2b::/48 maxlen: 48
2a00:1678:1122::/48 maxlen: 48
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:f113::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d5:79:df:57:33:50:3c:68:73:77:c4:d9:ef:27:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Oct 11 22:52:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f47f6caca9f0f11bc841e27d849aacfdf6add2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:2b:7b:94:5d:c5:a7:45:0b:ef:39:00:a5:
a0:92:2f:55:89:05:6e:41:30:80:73:a0:2c:c4:8b:
3d:b0:6f:1e:40:6f:a3:5c:cc:d4:71:6b:83:58:b1:
ec:b8:47:5d:91:b6:fa:42:40:e6:03:62:95:fc:c6:
df:6d:5c:82:8e:7e:a3:9d:5c:19:f6:cc:22:b8:77:
10:66:20:23:b2:4d:86:a9:c8:f1:69:81:0f:57:d3:
02:43:f7:43:0c:4f:19:3f:cd:39:3b:f7:10:6b:61:
4c:40:b0:22:ae:3b:47:79:8e:96:c9:82:c8:14:9f:
d2:8d:c3:13:b2:07:6c:a5:c6:c3:b0:01:6a:03:88:
d2:cf:d5:ad:7d:02:d3:c9:0a:33:23:9a:98:80:3f:
3e:3e:ac:3a:af:35:25:cd:98:85:44:91:f0:d6:fc:
39:31:3f:40:00:b6:3b:e3:ce:bd:5d:de:d2:cb:ee:
38:65:99:ca:74:e3:75:8d:16:26:e1:89:ac:8c:ef:
ab:9b:c7:7a:04:21:0d:d9:19:5d:d6:aa:5c:25:9c:
88:3d:91:af:41:8d:13:59:89:80:86:3a:7f:ec:b4:
81:32:b9:4e:98:cd:6e:56:4f:5f:87:28:f9:99:0e:
23:98:14:99:e4:79:8a:a3:86:51:5e:c2:a6:c8:c2:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:6C:AC:A9:F0:F1:1B:C8:41:E2:7D:84:9A:AC:FD:F6:AD:D2:BF
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/9H9srKnw8RvIQeJ9hJqs_fat0r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.97.0-109.202.104.255
109.202.106.0-109.202.109.255
109.202.111.0/24
109.232.224.0/21
134.19.176.0/20
185.23.213.0-185.23.215.255
188.95.49.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0/23
213.152.180.0-213.152.191.255
IPv6:
2a00:1678:127::/48
2a00:1678:a2b::/48
2a00:1678:1122::/48
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:f113::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
2a:26:fd:59:7e:ea:2e:17:16:b3:fd:53:4a:b5:54:84:57:ba:
1a:b1:3c:7d:4f:9c:00:12:ca:45:c5:40:78:c3:02:20:31:97:
95:04:aa:f8:7a:19:d4:55:79:92:62:52:8e:79:a6:1e:8a:c2:
06:d5:61:ec:0e:a0:ea:28:2b:28:1c:45:e2:11:74:cf:8b:83:
d0:47:c1:72:71:b3:00:59:d5:63:b3:ad:be:17:84:30:df:83:
c8:a4:f5:a1:f5:aa:ce:25:c6:8b:5f:56:0a:20:ca:05:5d:5a:
d1:d9:57:d3:f9:08:c9:88:1c:40:b6:ae:24:98:c8:5e:99:c7:
7b:dc:e7:6b:cc:45:76:2c:56:4a:06:2c:98:f2:fa:08:34:f3:
8a:16:50:30:db:42:8e:db:38:56:13:8f:3d:c5:33:3e:eb:74:
5e:02:87:83:db:11:df:4d:34:ab:cd:67:d3:ea:b5:49:1f:aa:
2b:d8:5e:f8:67:dd:a6:3f:2f:04:8b:75:70:7e:8c:0e:d5:92:
59:ce:8c:97:ce:e8:1f:98:9f:e8:32:0a:b2:49:0d:82:9f:1b:
c1:88:96:6a:19:03:d0:f3:20:06:c7:34:0b:8f:5a:de:c2:3c:
50:64:74:ec:3e:4b:ee:8c:05:af:40:b4:49:9d:84:2b:c5:04:
63:f8:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:52 2025 by rpki-client