Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa
File: Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa (raw, json)
Hash identifier: oUGAV70/klx5EwrIAVjfJ2MtbzXKGb1ntDwcOeTxtWE=
Subject key identifier: 0F:3E:04:AD:06:E7:77:CF:E4:CE:4F:9A:95:3A:86:3C:34:63:65:09
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01999A44C7635D31FC8D8FEA94A2E1CAB793
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa
Signing time: Tue 30 Sep 2025 10:57:02 +0000
ROA not before: Tue 30 Sep 2025 10:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.144.0/22 maxlen: 24
217.154.148.0/23 maxlen: 24
217.154.150.0/24 maxlen: 24
217.154.152.0/22 maxlen: 24
217.154.156.0/24 maxlen: 24
217.154.159.0/24 maxlen: 24
217.154.160.0/20 maxlen: 20
217.154.177.0/24 maxlen: 24
217.154.178.0/23 maxlen: 24
217.154.180.0/22 maxlen: 24
217.154.184.0/23 maxlen: 24
217.154.186.0/24 maxlen: 24
217.154.188.0/22 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.244.0/23 maxlen: 24
217.154.247.0/24 maxlen: 24
217.154.248.0/21 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/32 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:44:c7:63:5d:31:fc:8d:8f:ea:94:a2:e1:ca:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Sep 30 10:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3e04ad06e777cfe4ce4f9a953a863c34636509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:f5:bc:8f:f3:73:2e:d5:81:ea:a2:bb:39:
fe:2d:0c:d8:f8:2b:83:2b:60:4e:48:3e:b7:94:cd:
9f:0e:1a:ef:5c:c9:a3:d1:e2:a1:55:0d:16:23:45:
31:19:de:d4:69:d0:83:e1:6b:ff:ff:52:57:ce:96:
8d:18:64:9b:1d:d5:65:fc:64:60:9b:94:3c:df:53:
bd:5b:9b:2a:fe:9a:66:a1:e1:97:d5:43:45:e8:97:
26:bb:4d:b6:3f:86:00:af:e0:ff:8b:33:13:a2:6a:
f5:f6:44:c3:76:8c:b3:59:91:ed:06:79:bc:ec:14:
bf:7d:41:77:a2:b4:91:ca:34:e2:9d:69:d2:b9:0b:
a8:1e:86:7c:bf:e3:ea:81:75:2d:9d:18:d2:38:cf:
9c:4e:39:ed:f5:d3:6e:89:14:2f:6c:4c:00:2b:3d:
60:b8:65:e2:1c:5f:d0:5e:13:aa:27:9f:70:b4:94:
42:7f:4a:b7:24:8a:7e:d7:e5:66:87:af:e7:54:8e:
67:d7:71:ed:ef:3f:61:14:64:f7:56:88:bb:8d:12:
08:2b:07:d9:b8:b0:75:4d:14:48:45:dc:7b:25:f0:
9d:17:0c:55:79:15:10:01:4f:ac:c1:f3:b4:b9:11:
6f:29:44:3f:70:07:bd:21:67:9c:d8:fa:e7:8d:11:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:04:AD:06:E7:77:CF:E4:CE:4F:9A:95:3A:86:3C:34:63:65:09
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.144.0-217.154.150.255
217.154.152.0-217.154.156.255
217.154.159.0-217.154.175.255
217.154.177.0-217.154.186.255
217.154.188.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.245.255
217.154.247.0-217.154.255.255
217.160.0.0/16
IPv6:
2001:8d8::/32
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
4d:3b:c2:e6:bf:74:04:17:2a:07:9f:e2:54:d5:70:1f:25:d9:
53:ad:eb:5b:bc:e9:1e:f9:3e:df:7c:8d:62:54:e4:a3:df:d2:
50:68:1b:9f:d4:c4:14:fb:3e:05:70:75:fd:de:42:53:5b:ae:
2a:49:5f:dd:c7:8d:77:bc:bf:ae:04:7e:37:d6:14:2e:ca:c2:
d4:62:b6:50:a3:ab:b4:35:cd:3c:13:ac:36:d3:35:7e:e8:57:
12:47:3a:ad:0d:f9:95:a8:02:d4:86:30:23:fd:c4:95:23:ad:
e2:5e:a6:71:cf:21:14:70:2b:9b:a0:f2:65:4c:1a:89:98:27:
d8:a0:cd:65:42:99:d2:1c:22:ef:e8:4a:c0:27:0a:2f:7b:f9:
ab:f8:1d:9e:d4:8a:b0:9d:f7:92:f1:73:48:3f:6b:84:dc:9c:
09:cc:b2:f4:a1:93:20:8e:e3:e0:67:90:69:1b:4e:19:0d:f0:
f5:0d:3c:a0:67:97:67:d6:4a:72:6f:71:18:11:4b:55:8b:a8:
27:5e:d8:5e:0e:8d:5e:e8:79:16:13:48:e4:5b:36:8a:83:ce:
36:03:1a:33:78:4c:27:89:4b:95:8d:ba:4a:08:0f:c7:f9:b7:
6f:2f:22:9b:af:32:41:a3:71:6b:5f:97:ac:78:96:e0:3e:d0:
a6:4e:ee:e4
-----BEGIN CERTIFICATE-----
MIIG6TCCBdGgAwIBAgISAZmaRMdjXTH8jY/qlKLhyreTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjUwOTMwMTA1NzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjNlMDRhZDA2ZTc3N2NmZTRjZTRmOWE5NTNhODYzYzM0NjM2NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3n1vI/zcy7Vgeqiuzn+LQzY+CuD
K2BOSD63lM2fDhrvXMmj0eKhVQ0WI0UxGd7UadCD4Wv//1JXzpaNGGSbHdVl/GRg
m5Q831O9W5sq/ppmoeGX1UNF6Jcmu022P4YAr+D/izMTomr19kTDdoyzWZHtBnm8
7BS/fUF3orSRyjTinWnSuQuoHoZ8v+PqgXUtnRjSOM+cTjnt9dNuiRQvbEwAKz1g
uGXiHF/QXhOqJ59wtJRCf0q3JIp+1+Vmh6/nVI5n13Ht7z9hFGT3Voi7jRIIKwfZ
uLB1TRRIRdx7JfCdFwxVeRUQAU+swfO0uRFvKUQ/cAe9IWec2PrnjREWjQIDAQAB
o4ID9TCCA/EwHQYDVR0OBBYEFA8+BK0G53fP5M5PmpU6hjw0Y2UJMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEvRHo0RXJRYm5kOF9remstYWxUcUdQRFJqWlFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICCQYIKwYBBQUHAQcBAf8EggH4MIIB9DCCAdoEAgABMIIB
0gMEBAX6sAMEAy4QSAMEA06JYAMEAlGtcAMDAFKlAwQCVbj4AwMAV2oDBAOdYWgD
BAK5MHQDBADCfs4wDAMEAsKkBAMEAsKkCAMEBMKkEAMEBMKkMAMEA8KkWAMEA8Kk
eAMEBMKkoAMEBMKkwAMEBcMU4AMEBtSEQAMDANTjAwQF1aVAAwQA1fTAAwQE2UjA
MAsDAwHZmgMEAtmaCDAMAwQA2ZoNAwQA2ZoYAwQB2ZoaMAwDBAXZmiADBADZmiYw
DAMEA9maKAMEAdmaLDAMAwQA2ZovAwQA2ZowMAwDBAHZmjIDBAPZmkAwDAMEAdma
SgMEAdmaWDAMAwQA2ZpbAwQF2ZpAMAwDBADZmmEDBADZmmYwDAMEANmaaQMEANma
bDAMAwQE2ZpwAwQB2Zp4MAwDBALZmnwDBADZmn4wDAMEBNmakAMEANmaljAMAwQD
2ZqYAwQA2ZqcMAwDBADZmp8DBATZmqAwDAMEANmasQMEANmaujAMAwQC2Zq8AwQA
2ZrQMAwDBAHZmtIDBADZmtoDBADZmtwwDAMEAdma3gMEAdma5DAMAwQA2ZrnAwQC
2ZroMAwDBADZmu0DBAHZmvQwCwMEANma9wMDANmaAwMA2aAwFAQCAAIwDgMFACAB
CNgDBQMqAiR4MA0GCSqGSIb3DQEBCwUAA4IBAQBNO8Lmv3QEFyoHn+JU1XAfJdlT
retbvOke+T7ffI1iVOSj39JQaBuf1MQU+z4FcHX93kJTW64qSV/dx413vL+uBH43
1hQuysLUYrZQo6u0Nc08E6w20zV+6FcSRzqtDfmVqALUhjAj/cSVI63iXqZxzyEU
cCuboPJlTBqJmCfYoM1lQpnSHCLv6ErAJwove/mr+B2e1IqwnfeS8XNIP2uE3JwJ
zLL0oZMgjuPgZ5BpG04ZDfD1DTygZ5dn1kpyb3EYEUtVi6gnXtheDo1e6HkWE0jk
WzaKg842AxozeEwniUuVjbpKCA/H+bdvLyKbrzJBo3FrX5eseJbgPtCmTu7k
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:12 2025 by rpki-client