Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2e62pyAhQt2DxyPFxqODWQtQycw.roa
File: 2e62pyAhQt2DxyPFxqODWQtQycw.roa (raw, json)
Hash identifier: 6QUHL09wvOyNqPTs2cgB2RoIpq+Ebpdxb1aI/fz0Ah0=
Subject key identifier: D9:EE:B6:A7:20:21:42:DD:83:C7:23:C5:C6:A3:83:59:0B:50:C9:CC
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01982E12922C8AA8D3884C9D7A1C1DAFA49F
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2e62pyAhQt2DxyPFxqODWQtQycw.roa
Signing time: Mon 21 Jul 2025 17:40:25 +0000
ROA not before: Mon 21 Jul 2025 17:40:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 5.181.20.0/24 maxlen: 32
5.181.21.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.14.244.0/24 maxlen: 24
45.14.245.0/24 maxlen: 24
45.14.246.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.91.52.0/22 maxlen: 32
45.91.52.0/24 maxlen: 24
45.91.53.0/24 maxlen: 24
45.91.54.0/24 maxlen: 24
45.91.55.0/24 maxlen: 24
45.140.146.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.166.0/24 maxlen: 32
45.140.167.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.150.65.0/24 maxlen: 32
45.150.67.0/24 maxlen: 32
45.155.52.0/22 maxlen: 32
45.155.52.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
146.19.230.0/24 maxlen: 24
185.33.24.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
185.234.247.0/24 maxlen: 32
195.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:12:92:2c:8a:a8:d3:88:4c:9d:7a:1c:1d:af:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 21 17:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9eeb6a7202142dd83c723c5c6a383590b50c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:64:a2:00:5b:24:7b:6d:0f:4b:d9:d6:7c:
d7:73:0c:8e:ab:c9:6f:cc:cf:a2:a9:4a:95:35:2e:
be:dd:6e:3e:46:38:0b:91:d0:0c:09:69:48:d1:c9:
0d:00:9e:fc:cf:75:ae:60:7c:7e:3c:f1:27:8b:6a:
98:19:f5:e5:18:8c:0a:bb:b8:b1:82:fa:f9:be:c9:
23:ec:fc:76:f2:7a:0a:d6:b4:0d:85:33:27:cc:ba:
44:3f:f9:39:4f:c2:11:ad:68:75:dd:63:bf:26:34:
93:a0:e0:98:9d:f1:fd:0c:14:06:33:0c:d5:9f:63:
e2:80:39:08:2c:b0:0d:f7:61:d2:89:1b:4b:8d:c5:
e1:ab:93:8e:c4:d9:7c:2e:c9:ae:c5:a5:3a:52:fc:
ba:23:f2:79:66:53:dd:ec:13:fe:5e:51:7f:cb:fb:
65:f2:8b:b1:23:aa:0c:7a:b2:6a:2b:e1:39:df:29:
10:a8:2f:a6:82:78:6b:e8:c0:a4:f5:81:13:ca:30:
c1:ed:1e:f0:63:9b:2a:96:62:51:60:2c:6e:49:e4:
58:1c:84:99:a7:0c:7b:5a:ca:30:7b:fa:0f:bd:c2:
c3:91:72:74:ec:d1:17:a4:3b:79:96:6e:0d:7c:5b:
1d:15:da:3c:44:b4:b7:ac:50:25:de:e8:63:7a:4a:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EE:B6:A7:20:21:42:DD:83:C7:23:C5:C6:A3:83:59:0B:50:C9:CC
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2e62pyAhQt2DxyPFxqODWQtQycw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/22
45.14.244.0/22
45.91.52.0/22
45.140.146.0/23
45.140.166.0/23
45.144.28.0/23
45.150.65.0/24
45.150.67.0/24
45.155.52.0/22
91.194.11.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
146.19.230.0/24
185.33.24.0/24
185.74.222.0/24
185.234.247.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:49:17:25:cf:92:00:0c:ac:8e:03:3b:2f:a2:b1:4a:25:8f:
a1:c2:45:35:01:69:88:ea:bb:cb:b3:4b:b7:03:5f:5a:fa:3e:
03:e9:40:e0:ed:5d:d1:17:2c:b5:2b:56:48:29:63:b1:c4:b1:
55:ed:a3:bb:95:95:7b:39:45:3d:6a:76:fc:6b:48:58:53:e7:
c3:82:ed:02:96:4e:49:8b:b8:72:fe:4d:9d:7f:0c:4e:89:5b:
6f:ec:bf:87:57:bf:5a:94:9b:6a:19:1b:89:bd:c3:53:95:da:
3e:ab:bb:d5:0d:11:75:ac:bc:3b:59:1d:71:a5:4e:dd:c3:ca:
61:1f:56:90:97:fd:18:c7:35:d7:87:ee:d2:6c:a5:58:b6:6f:
8b:96:21:c5:a9:b6:38:24:36:65:f0:88:dc:bb:c8:2c:3b:ff:
c1:67:4b:e2:4c:e8:9e:6e:0e:22:4a:91:21:49:1c:ba:ab:48:
dc:df:7d:9c:ad:9a:44:2e:14:a4:1e:0c:87:79:27:4c:bb:2e:
ce:f7:b2:6d:1f:0c:a0:fe:74:8f:c7:76:08:a6:bf:f6:92:81:
96:aa:30:42:24:9d:85:b1:51:54:9f:7a:d2:f1:6c:f0:6a:2f:
8e:46:0d:37:e3:8b:e2:80:bf:0d:3e:bc:74:6e:72:22:9f:0d:
da:aa:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:50:45 2025 by rpki-client