Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RdpwGXo_rTtYy8IiHnXsKjBYWGo.roa
File: RdpwGXo_rTtYy8IiHnXsKjBYWGo.roa (raw, json)
Hash identifier: 0WKBiHPkIT+pS8wOokdKecYHDptGiUvAtJw4y3+MB4E=
Subject key identifier: 45:DA:70:19:7A:3F:AD:3B:58:CB:C2:22:1E:75:EC:2A:30:58:58:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019813F841186729CEC53A16DB6F7E9AC74A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RdpwGXo_rTtYy8IiHnXsKjBYWGo.roa
Signing time: Wed 16 Jul 2025 16:01:33 +0000
ROA not before: Wed 16 Jul 2025 16:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 5.253.56.0/24 maxlen: 24
5.253.57.0/24 maxlen: 24
5.253.58.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
193.8.186.0/24 maxlen: 24
193.8.187.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:f8:41:18:67:29:ce:c5:3a:16:db:6f:7e:9a:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 16 16:01:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45da70197a3fad3b58cbc2221e75ec2a3058586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:a5:b5:04:3c:26:63:51:dc:c7:98:83:1b:
30:51:34:78:9e:bf:14:09:cf:d3:d4:cb:67:3a:d5:
5d:71:09:f4:f8:de:b7:d2:7f:65:ae:aa:5d:7d:a7:
44:da:74:bc:45:2e:e8:32:e5:1f:27:48:2b:d3:e7:
e6:17:ce:06:00:35:f1:f1:0a:e1:65:7b:cd:e5:cc:
0c:28:61:d7:e5:03:2c:af:f6:ad:83:f0:1a:7a:34:
2b:a7:cd:12:69:2b:66:cf:98:00:59:1a:e0:ff:49:
00:3a:1b:e2:23:89:a6:7a:d1:45:b2:ac:fd:14:8f:
b3:1c:fd:d9:40:cf:b4:d5:94:b0:1a:7f:80:b8:41:
b6:30:b7:5c:19:ea:18:81:6e:d2:2a:6a:cd:3b:34:
61:e5:bf:14:5d:ad:d4:aa:80:94:ac:47:e4:62:f3:
74:cc:9b:7c:40:f5:d3:cc:db:6f:56:35:4c:04:7d:
b4:5c:2b:ea:db:62:48:66:23:cd:9d:87:b6:af:5b:
a8:26:2f:e3:6f:be:b2:b3:72:30:fd:68:fd:7f:0c:
61:87:65:b8:af:6a:80:76:19:e7:72:93:14:19:ba:
25:db:0d:44:25:ef:6e:3f:c9:59:69:91:2e:bc:a3:
88:4a:58:40:8f:d5:92:23:56:9b:37:ea:67:d5:4f:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:70:19:7A:3F:AD:3B:58:CB:C2:22:1E:75:EC:2A:30:58:58:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RdpwGXo_rTtYy8IiHnXsKjBYWGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0-5.253.58.255
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.108.0/24
87.120.196.0/24
91.92.21.0/24
94.125.102.0/23
109.206.240.0/24
109.206.243.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.221.0/24
193.8.186.0/23
193.47.61.0/24
193.148.56.0/23
Signature Algorithm: sha256WithRSAEncryption
63:ed:7a:22:4d:36:fa:49:13:b2:fb:98:e3:2f:75:eb:51:b3:
a8:2a:8d:c5:15:90:64:89:49:34:49:31:ed:6c:aa:03:ad:6e:
3a:f4:64:74:15:48:c2:01:7a:b2:8e:98:46:96:e2:49:bc:3d:
ae:b8:38:01:15:c8:f2:ce:53:6e:1d:a3:d3:2a:e4:d3:51:41:
8a:bb:89:f9:52:1c:f6:0e:e2:d5:f7:5a:85:87:fb:f6:c8:70:
f5:b5:be:34:16:a5:ae:eb:6b:37:5f:54:05:9f:8f:16:6d:09:
db:58:88:fc:d8:f0:d1:5e:41:fe:71:ac:3e:a2:40:b2:9b:a7:
ff:ce:96:56:97:8f:3c:60:2a:9a:86:68:7e:d9:81:57:0c:e3:
38:b4:e5:bb:e9:17:16:6e:1f:6a:c1:b2:18:94:c5:65:94:9d:
53:25:b3:82:8f:24:df:c0:df:2b:7b:15:10:99:33:97:08:25:
61:35:52:ec:f1:b8:48:c2:da:ce:79:a1:d1:06:b6:1c:a4:56:
81:10:2e:a3:60:43:a0:af:89:2e:d6:18:1c:a8:cd:97:61:51:
ae:e1:50:30:0c:05:60:c0:ee:66:7d:47:0b:92:b4:28:43:3d:
38:4e:19:2b:f0:ed:90:75:85:54:3d:b3:74:3c:75:57:22:a8:
3e:d1:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:39:45 2025 by rpki-client