Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/DlH0jnwMimmMsx3r3wdXB1L3uS8.roa
File: DlH0jnwMimmMsx3r3wdXB1L3uS8.roa (raw, json)
Hash identifier: dTJziSClbSkXGUrxk9IsoOjUfN1QvzrBS3O8it2Lahs=
Subject key identifier: 0E:51:F4:8E:7C:0C:8A:69:8C:B3:1D:EB:DF:07:57:07:52:F7:B9:2F
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0199A9C6833AAF48C2546CEFE286ACB54C22
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/DlH0jnwMimmMsx3r3wdXB1L3uS8.roa
Signing time: Fri 03 Oct 2025 11:13:03 +0000
ROA not before: Fri 03 Oct 2025 11:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:7::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:127::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:197::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:227::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:247::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:421::/48 maxlen: 48
2a03:5000:441::/48 maxlen: 48
2a03:5000:442::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:c6:83:3a:af:48:c2:54:6c:ef:e2:86:ac:b5:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Oct 3 11:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e51f48e7c0c8a698cb31debdf07570752f7b92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:37:59:41:dc:a0:3c:b4:ff:c3:9d:5b:c6:
77:6e:d7:df:d6:c7:36:ff:a5:64:56:43:be:f2:42:
21:94:33:a5:8b:82:dc:f8:62:d6:46:14:4d:d0:15:
0e:ee:27:7c:5c:68:5a:fb:90:dd:d3:74:a2:66:ac:
73:cf:a7:4e:91:54:b9:ce:3f:2d:19:8f:f7:f9:31:
1e:0f:bd:21:c6:c1:9c:05:7c:aa:3a:00:1c:c4:41:
90:0d:6f:1b:91:b9:dd:b6:25:d2:14:92:a4:62:a9:
b1:da:87:cd:5e:2a:39:76:15:e1:51:f3:f4:ce:9f:
a7:96:be:21:40:8d:c8:05:bc:54:60:4e:3e:16:b1:
17:13:8c:8f:87:6c:db:1b:b1:1d:e1:13:f6:46:3a:
fa:0f:8e:05:0e:fb:b9:6d:d6:3b:a5:a1:25:4e:78:
b3:31:8d:98:f0:32:6b:93:66:e0:68:5f:36:cd:17:
65:b0:2b:3d:e8:7c:c7:f5:c7:bd:d9:59:48:0a:3d:
58:97:a9:d3:70:84:3c:68:e2:77:b9:53:92:22:d2:
cb:71:f1:5f:b2:6b:cf:33:94:58:f8:6d:bf:15:84:
3b:52:ce:99:9b:73:15:a8:8a:60:9a:25:6f:12:d1:
10:73:4d:3f:c7:21:83:6a:17:9c:ee:90:ee:93:49:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:F4:8E:7C:0C:8A:69:8C:B3:1D:EB:DF:07:57:07:52:F7:B9:2F
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/DlH0jnwMimmMsx3r3wdXB1L3uS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:7::/48
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:127::/48
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:197::/48
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:227::/48
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:247::/48
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:421::/48
2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:ba:6e:e0:58:3a:26:0a:8c:b0:b3:8c:a6:b6:4e:b4:55:33:
ea:34:03:d3:77:ce:b3:f8:6f:20:67:d3:2c:16:04:b8:cf:39:
26:e5:4c:bb:cc:ef:96:91:42:84:8a:bb:10:ad:66:7d:78:37:
61:92:ec:41:a1:c8:49:80:6a:46:07:64:1b:07:e6:06:f6:55:
5d:91:d5:26:0e:d5:2d:53:37:71:10:60:71:b5:29:c9:a7:a5:
e6:ed:6b:c8:c7:53:c9:c3:63:a9:90:77:99:00:6f:b8:70:58:
02:20:82:d5:67:ba:f5:82:53:78:29:e6:80:b7:0a:2b:95:d4:
52:e8:84:87:9f:b9:6e:2d:4a:f3:3b:79:18:29:96:40:96:11:
d1:8c:24:2c:8b:9c:6a:05:95:42:45:69:f4:1b:fb:5a:e5:7c:
f7:f1:77:10:bf:b9:e8:bf:d8:b2:b7:2a:65:a5:53:67:4b:99:
97:81:80:ef:ab:8e:97:bd:b5:b4:9d:75:a7:28:e1:74:7b:8f:
66:9f:0d:04:a4:25:31:4e:d0:f4:63:20:5b:41:ff:a8:b7:5e:
a0:23:92:70:c9:2b:ef:0f:30:b7:f5:d7:cf:30:f1:d6:ac:9f:
16:ee:2e:df:ce:f5:9b:34:51:fa:a0:cb:60:69:a5:e0:06:3f:
99:af:6a:f4
-----BEGIN CERTIFICATE-----
MIIHqTCCBpGgAwIBAgISAZmpxoM6r0jCVGzv4oastUwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjUxMDAzMTExMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTUxZjQ4ZTdjMGM4YTY5OGNiMzFkZWJkZjA3NTcwNzUyZjdiOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd03WUHcoDy0/8OdW8Z3btff1sc2
/6VkVkO+8kIhlDOli4Lc+GLWRhRN0BUO7id8XGha+5Dd03SiZqxzz6dOkVS5zj8t
GY/3+TEeD70hxsGcBXyqOgAcxEGQDW8bkbndtiXSFJKkYqmx2ofNXio5dhXhUfP0
zp+nlr4hQI3IBbxUYE4+FrEXE4yPh2zbG7Ed4RP2Rjr6D44FDvu5bdY7paElTniz
MY2Y8DJrk2bgaF82zRdlsCs96HzH9ce92VlICj1Yl6nTcIQ8aOJ3uVOSItLLcfFf
smvPM5RY+G2/FYQ7Us6Zm3MVqIpgmiVvEtEQc00/xyGDahec7pDuk0nvGwIDAQAB
o4IEtTCCBLEwHQYDVR0OBBYEFA5R9I58DIppjLMd698HVwdS97kvMB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvRGxIMGpud01pbW1Nc3gzcjN3ZFhCMUwzdVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICyQYIKwYBBQUHAQcBAf8EggK4MIICtDAYBAIAATASAwQC
w8ucAwQA2RsEAwQB2RsGMIIClgQCAAIwggKOMBIDBwAqA1AAAAEDBwAqA1AAAAID
BwAqA1AAAAcwEgMHACoDUAAAEQMHACoDUAAAEjASAwcFKgNQAAAgAwcAKgNQAAAi
MBIDBwQqA1AAADADBwAqA1AAADIwEgMHACoDUAAAQQMHACoDUAAAQjASAwcAKgNQ
AABRAwcAKgNQAABSMBIDBwAqA1AAAGEDBwAqA1AAAGIwEgMHACoDUAAAcQMHACoD
UAAAcjASAwcAKgNQAACBAwcAKgNQAACCMBIDBwAqA1AAAJEDBwAqA1AAAJIwEgMH
ACoDUAABAQMHACoDUAABAjASAwcAKgNQAAERAwcAKgNQAAESMBIDBwAqA1AAASED
BwAqA1AAASIDBwAqA1AAAScwEgMHACoDUAABMQMHACoDUAABMjASAwcAKgNQAAFB
AwcAKgNQAAFCMBIDBwAqA1AAAVEDBwAqA1AAAVIwEgMHACoDUAABYQMHACoDUAAB
YjASAwcAKgNQAAFxAwcAKgNQAAFyMBIDBwAqA1AAAYEDBwAqA1AAAYIwEgMHACoD
UAABkQMHACoDUAABkgMHACoDUAABlzASAwcAKgNQAAIBAwcAKgNQAAICMBIDBwAq
A1AAAhEDBwAqA1AAAhIwEgMHACoDUAACIQMHACoDUAACIgMHACoDUAACJzASAwcA
KgNQAAIxAwcAKgNQAAIyMBIDBwAqA1AAAkEDBwAqA1AAAkIDBwAqA1AAAkcwEgMH
ACoDUAACUQMHACoDUAACUjASAwcAKgNQAAJxAwcAKgNQAAJyMBIDBwAqA1AAApED
BwAqA1AAApIwEgMHACoDUAADEQMHACoDUAADEgMHACoDUAAEITASAwcAKgNQAARB
AwcAKgNQAARCMA0GCSqGSIb3DQEBCwUAA4IBAQB3um7gWDomCoyws4ymtk60VTPq
NAPTd86z+G8gZ9MsFgS4zzkm5Uy7zO+WkUKEirsQrWZ9eDdhkuxBochJgGpGB2Qb
B+YG9lVdkdUmDtUtUzdxEGBxtSnJp6Xm7WvIx1PJw2OpkHeZAG+4cFgCIILVZ7r1
glN4KeaAtworldRS6ISHn7luLUrzO3kYKZZAlhHRjCQsi5xqBZVCRWn0G/ta5Xz3
8XcQv7nov9iytyplpVNnS5mXgYDvq46XvbW0nXWnKOF0e49mnw0EpCUxTtD0YyBb
Qf+ot16gI5JwySvvDzC39dfPMPHWrJ8W7i7fzvWbNFH6oMtgaaXgBj+Zr2r0
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:57 2025 by rpki-client