Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/M8G7nnaU2JNSJrAnIn5LDozOhto.roa
File: M8G7nnaU2JNSJrAnIn5LDozOhto.roa (raw, json)
Hash identifier: hSjX0q/6hP0knwaieW4fkT1heaJByj4eEZJwg15jDc4=
Subject key identifier: 33:C1:BB:9E:76:94:D8:93:52:26:B0:27:22:7E:4B:0E:8C:CE:86:DA
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 01980CE89FE8B3B0F435F759A7B4D65B5835
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/M8G7nnaU2JNSJrAnIn5LDozOhto.roa
Signing time: Tue 15 Jul 2025 07:07:08 +0000
ROA not before: Tue 15 Jul 2025 07:07:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48551
IP address blocks: 5.253.225.0/24 maxlen: 24
31.193.186.0/24 maxlen: 24
45.94.252.0/24 maxlen: 24
45.94.254.0/24 maxlen: 24
45.94.255.0/24 maxlen: 24
45.150.150.0/24 maxlen: 24
45.159.196.0/24 maxlen: 24
45.159.197.0/24 maxlen: 24
45.159.198.0/24 maxlen: 24
45.159.199.0/24 maxlen: 24
91.217.177.0/24 maxlen: 24
103.216.60.0/24 maxlen: 24
103.216.61.0/24 maxlen: 24
103.216.62.0/24 maxlen: 24
103.216.63.0/24 maxlen: 24
157.119.188.0/24 maxlen: 24
157.119.190.0/24 maxlen: 24
157.119.191.0/24 maxlen: 24
185.63.114.0/24 maxlen: 24
185.74.221.0/24 maxlen: 24
185.86.180.0/24 maxlen: 24
185.86.181.0/24 maxlen: 24
185.128.40.0/24 maxlen: 24
185.149.192.0/24 maxlen: 24
185.159.189.0/24 maxlen: 24
185.228.58.0/24 maxlen: 24
185.229.135.0/24 maxlen: 24
185.236.36.0/24 maxlen: 24
185.236.37.0/24 maxlen: 24
185.236.38.0/24 maxlen: 24
185.236.39.0/24 maxlen: 24
185.238.143.0/24 maxlen: 24
185.252.84.0/24 maxlen: 24
194.147.212.0/24 maxlen: 24
194.147.222.0/24 maxlen: 24
195.114.4.0/24 maxlen: 24
195.114.5.0/24 maxlen: 24
195.114.8.0/24 maxlen: 24
195.114.9.0/24 maxlen: 24
2a0d:9500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:e8:9f:e8:b3:b0:f4:35:f7:59:a7:b4:d6:5b:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jul 15 07:07:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c1bb9e7694d8935226b027227e4b0e8cce86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:72:c1:63:6e:69:07:4a:90:85:3a:36:7d:
f8:c9:cd:f9:ae:df:a9:2b:a8:74:cb:7f:a7:57:0c:
18:d4:3b:9f:fa:c4:0e:f0:76:4b:20:c6:c6:64:af:
28:a3:72:88:a1:59:01:2f:0e:a5:4b:5d:78:4d:a7:
2d:d6:3f:9e:3c:83:29:61:ed:31:95:35:44:b8:0c:
b5:9e:7b:57:a2:b1:9e:db:de:67:78:23:33:3b:5b:
82:59:19:26:b6:a8:6b:17:99:35:d2:7e:50:fa:a9:
73:2f:c6:60:4a:fa:dc:fc:c2:62:63:d7:4f:3d:ad:
8a:00:14:db:10:d6:77:0a:29:ae:dd:b4:2a:09:1f:
d9:29:01:dc:5c:ee:73:59:6b:bc:e1:88:30:0e:fd:
5c:18:d5:81:79:3b:75:f9:dd:55:a4:eb:53:72:3a:
22:fe:c1:72:63:56:ab:88:ab:0d:25:ba:e1:4a:7e:
20:4b:b9:a9:37:b3:96:8d:45:5d:5a:ea:b1:7e:ef:
f0:9e:a1:bf:dd:5c:ee:6f:2c:1d:b5:4d:55:42:97:
fc:eb:2c:b6:4d:38:75:89:60:2f:cc:ec:07:d0:88:
55:6f:9f:12:1d:93:42:09:da:3b:97:92:1c:9a:bd:
c2:c9:02:81:10:62:1f:4d:96:d6:53:eb:87:71:53:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:BB:9E:76:94:D8:93:52:26:B0:27:22:7E:4B:0E:8C:CE:86:DA
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/M8G7nnaU2JNSJrAnIn5LDozOhto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.225.0/24
31.193.186.0/24
45.94.252.0/24
45.94.254.0/23
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
103.216.60.0/22
157.119.188.0/24
157.119.190.0/23
185.63.114.0/24
185.74.221.0/24
185.86.180.0/23
185.128.40.0/24
185.149.192.0/24
185.159.189.0/24
185.228.58.0/24
185.229.135.0/24
185.236.36.0/22
185.238.143.0/24
185.252.84.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a0d:9500::/29
Signature Algorithm: sha256WithRSAEncryption
15:bb:fc:77:7f:34:f0:fe:7a:64:b5:58:36:7a:db:57:5a:70:
e1:21:50:2d:10:e6:46:3c:4f:1b:03:0e:9a:08:58:43:18:e7:
47:b1:d1:97:34:8f:2a:d2:d0:8d:47:ca:4a:76:52:a6:ee:fe:
e1:db:b6:90:0e:2b:97:26:5b:87:b4:87:23:14:af:4b:7e:59:
c6:d8:92:9c:cd:d3:06:17:51:8b:d8:80:00:1d:8b:f7:07:32:
55:50:87:5a:99:eb:ef:08:3f:aa:16:ef:49:57:35:ec:2d:d5:
46:ff:4f:c2:2a:7d:af:19:61:67:8a:1d:eb:e9:4f:a8:bb:cf:
6d:e4:6f:f4:de:f1:f3:e6:b3:a3:a1:fc:1d:b4:a9:8a:b3:17:
fd:df:f9:d6:d7:66:26:95:13:52:d9:5e:93:59:37:62:47:12:
5e:70:db:61:9e:13:91:c6:21:5c:27:7a:c4:4f:a6:54:fd:56:
88:6c:12:7a:b7:a7:39:e8:48:e8:27:13:4a:26:95:24:2e:fe:
8e:a2:27:72:75:db:11:ec:51:f7:a7:ad:a4:f3:a7:e4:d8:20:
5e:0c:7e:6f:ec:cb:ae:99:f3:63:11:71:ac:46:f3:c1:87:a4:
ea:b4:c0:d9:25:07:70:b3:68:22:6b:8d:3f:58:f6:84:5f:d4:
6d:bd:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:08:29 2025 by rpki-client