Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Ee2H6_iXTtyXntUCMAu2AihLvlM.roa
File: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (raw, json)
Hash identifier: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=
Subject key identifier: 11:ED:87:EB:F8:97:4E:DC:97:9E:D5:02:30:0B:B6:02:28:4B:BE:53
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01982DD625A0AE54064C3BA885F8C7D532CF
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Ee2H6_iXTtyXntUCMAu2AihLvlM.roa
Signing time: Mon 21 Jul 2025 16:34:25 +0000
ROA not before: Mon 21 Jul 2025 16:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 45.87.245.0/24 maxlen: 24
45.87.246.0/24 maxlen: 24
45.87.247.0/24 maxlen: 24
45.129.142.0/24 maxlen: 24
45.129.143.0/24 maxlen: 24
185.224.212.0/24 maxlen: 24
195.245.249.0/24 maxlen: 24
2a10:9680::/32 maxlen: 32
2a10:9684::/32 maxlen: 32
2a10:9685::/32 maxlen: 32
2a11:e140::/32 maxlen: 32
2a12:7f40::/29 maxlen: 29
2a12:92c0::/29 maxlen: 29
2a12:b3c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:d6:25:a0:ae:54:06:4c:3b:a8:85:f8:c7:d5:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jul 21 16:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11ed87ebf8974edc979ed502300bb602284bbe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:5a:7d:b4:e3:82:55:fd:8d:01:8f:66:25:
4f:e3:4c:cf:67:f8:19:cf:a5:df:f3:22:54:61:2e:
3d:98:74:0a:ae:07:4e:29:b7:a9:f3:40:74:24:e1:
0d:f4:b9:51:ba:30:6e:e0:87:a9:9d:cc:3d:40:b0:
cc:c4:f7:bb:9a:95:34:bd:5a:ac:3d:c3:8c:02:e9:
a9:a1:37:d0:cf:a8:38:9e:d8:e4:0c:fd:ef:cc:f3:
b4:50:99:1f:da:27:b1:cf:ff:25:d8:2b:43:ba:7c:
85:0a:15:33:0b:6d:e1:a2:c6:09:3d:18:c9:b5:91:
c4:74:af:4f:3d:f1:94:61:1e:87:33:8d:ce:a3:86:
c9:34:d5:4e:de:53:87:d5:df:2d:dc:48:73:36:e6:
5d:86:19:e2:c6:ac:67:40:31:62:a1:3e:0a:fa:87:
cc:05:42:a5:fa:e3:1b:7f:8c:e6:85:5a:76:d8:2b:
f9:c8:0b:40:c6:1e:b3:4f:ed:86:e6:ca:c6:3c:e8:
91:08:5a:9b:5d:2e:fc:e5:72:c0:6b:12:04:5c:8e:
25:3d:2a:e4:a5:93:f5:58:42:e6:6b:ae:3d:e6:60:
c7:5e:c7:05:db:25:76:a8:47:dc:47:d5:3e:f1:09:
eb:d2:65:f0:14:00:b3:d0:fa:66:0c:b1:00:ef:99:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:87:EB:F8:97:4E:DC:97:9E:D5:02:30:0B:B6:02:28:4B:BE:53
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Ee2H6_iXTtyXntUCMAu2AihLvlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.245.0-45.87.247.255
45.129.142.0/23
185.224.212.0/24
195.245.249.0/24
IPv6:
2a10:9680::/32
2a10:9684::/31
2a11:e140::/32
2a12:7f40::/29
2a12:92c0::/29
2a12:b3c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e5:dc:ce:f5:87:69:5d:6d:dd:df:32:b8:cd:05:4a:b5:f1:
59:cd:2d:a2:fc:a8:15:51:04:f6:22:18:d7:b6:21:ef:b8:71:
74:b6:a5:0c:6b:55:fb:d2:be:86:e6:66:a4:84:5c:28:14:39:
a6:1d:0a:d9:ee:c3:d1:8b:10:24:19:cb:47:ec:0f:c6:fe:e7:
28:8a:5e:d4:11:35:12:75:ac:59:72:5e:b9:05:46:6b:15:0a:
da:bb:bb:4b:78:2f:ca:1f:46:a6:c9:3d:07:47:e4:3f:b0:a6:
8e:15:97:83:24:de:5c:53:e7:36:85:6d:02:2a:a5:36:7d:28:
3a:83:6e:34:3b:bc:c5:9f:54:6c:4a:3f:f9:38:e8:05:df:8e:
59:24:55:7c:53:b2:3c:62:e5:50:ad:5c:82:18:a1:cf:6e:e9:
99:18:ed:64:27:56:87:e9:ba:dc:53:fd:bd:c3:38:ae:e4:09:
23:98:66:43:0b:86:18:3a:bb:c5:c1:cf:eb:38:7c:53:51:91:
c0:ad:bd:03:aa:84:20:4c:88:65:7e:09:8f:3d:8b:fc:6c:ce:
43:56:de:26:61:96:fc:2e:71:7e:13:be:d4:16:cd:3f:f4:e5:
44:f8:17:16:ab:75:86:ba:2a:c7:b9:55:9d:7e:d6:48:b6:dc:
bf:e5:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:06 2025 by rpki-client