Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa
File: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (raw, json)
Hash identifier: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=
Subject key identifier: 97:80:CE:3B:16:B8:79:1C:45:D9:D0:2D:99:47:B4:91:23:CF:F2:80
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 0199E7489B3E272E85068FD71AC09ECBB9E5
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa
Signing time: Wed 15 Oct 2025 09:51:59 +0000
ROA not before: Wed 15 Oct 2025 09:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 78.40.216.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
89.191.228.0/24 maxlen: 24
90.156.228.0/24 maxlen: 24
90.156.231.0/24 maxlen: 24
94.228.122.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
185.247.18.0/24 maxlen: 24
185.247.19.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
194.35.116.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
194.35.118.0/24 maxlen: 24
194.35.119.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
217.151.229.0/24 maxlen: 24
217.151.231.0/24 maxlen: 24
2a03:6f02::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:48:9b:3e:27:2e:85:06:8f:d7:1a:c0:9e:cb:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Oct 15 09:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9780ce3b16b8791c45d9d02d9947b49123cff280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:94:c7:c1:de:78:b9:f5:2d:87:aa:b9:ca:
33:fd:b6:aa:68:c7:76:cf:06:86:72:68:44:26:7c:
d0:43:2c:00:98:5f:9a:01:20:2e:83:9c:da:88:12:
bd:ba:c5:2b:52:d7:1b:96:86:ee:cc:0d:f1:d6:59:
38:29:17:db:2d:db:b8:33:06:30:8b:b6:dd:16:b8:
e6:17:65:31:ac:fc:40:f1:75:3f:8b:56:3e:7b:18:
44:75:ba:d3:a6:04:80:f2:43:f2:40:b3:e9:f3:d8:
f6:6f:8f:70:3f:a8:48:73:50:6a:40:dd:38:a0:59:
2e:44:b1:a3:a7:c0:0a:de:27:5e:9f:91:cb:e4:20:
76:6e:6b:96:d6:33:8e:94:1a:ab:a3:39:26:79:58:
7a:1e:13:3c:15:28:d2:01:95:50:36:fc:c5:d6:83:
5d:2b:e1:cc:8f:00:d2:cf:1d:84:30:4f:34:6d:61:
f0:b8:b4:bf:71:f6:64:93:24:a0:fd:0b:4f:7c:78:
c5:cf:44:cc:ed:97:3f:84:b4:5d:7e:86:55:d8:f1:
c1:df:4f:fc:a4:64:59:0f:79:1b:f2:1a:55:b9:78:
30:49:12:22:a1:9c:3a:ab:79:d4:dd:90:80:93:e4:
8d:f7:6b:03:35:a0:42:7c:7e:0f:71:5b:fb:4b:4a:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:CE:3B:16:B8:79:1C:45:D9:D0:2D:99:47:B4:91:23:CF:F2:80
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
87.249.50.0/24
89.191.228.0/24
90.156.228.0/24
90.156.231.0/24
94.228.122.0/24
176.57.212.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
185.247.18.0/23
188.225.14.0/24
194.35.116.0/22
217.25.91.0/24
217.25.95.0/24
217.151.229.0/24
217.151.231.0/24
IPv6:
2a03:6f02::/64
Signature Algorithm: sha256WithRSAEncryption
b4:ab:40:b3:53:70:d6:fa:9f:fe:fe:73:4b:1e:73:19:e8:ea:
e6:e7:4e:88:71:b1:80:b6:15:56:34:21:7e:e8:16:93:83:f0:
10:fd:ad:3f:d2:23:92:7b:6f:da:82:7d:be:a8:b2:d1:38:60:
26:a6:8c:de:5a:e5:26:4b:4c:8b:8a:30:21:00:12:37:fb:f1:
a8:8a:24:dd:d1:f3:c6:9e:52:43:c4:66:4e:05:66:11:f8:03:
dc:e5:03:f6:34:5c:c9:d7:cc:e2:6f:24:e4:4b:e9:03:49:9f:
db:f8:32:c2:ad:73:b6:af:be:16:37:d5:ea:9b:ab:ff:26:47:
7c:67:96:4d:bb:82:63:82:69:43:e3:a2:3a:f0:2e:ed:d5:2e:
8b:00:8e:25:13:54:d0:c8:a9:b4:90:75:70:72:78:ea:5e:54:
79:4a:6a:27:2d:07:41:6c:07:0a:49:d9:a8:b2:5c:be:17:01:
ea:77:44:e0:8b:cc:37:cf:54:4e:be:7a:fb:b9:46:a9:3d:d9:
7a:91:68:49:d6:22:93:e6:a9:b7:4b:a1:a5:0b:15:8f:b1:c5:
fc:27:d1:04:0c:38:54:65:0f:0b:3a:94:1b:93:5a:e1:10:56:
2f:71:ab:90:c8:80:1e:d3:dc:98:2e:c5:a7:d2:ba:06:b1:6c:
13:f7:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:59 2025 by rpki-client