
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/pV07vwevm-8BJLnT3hJuAHpGkJ4.roa
File: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (raw, json)
Hash identifier: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=
Subject key identifier: A5:5D:3B:BF:07:AF:9B:EF:01:24:B9:D3:DE:12:6E:00:7A:46:90:9E
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0197E446EC2DBEF6A008DC6907AC8C8A24E9
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/pV07vwevm-8BJLnT3hJuAHpGkJ4.roa
Signing time: Mon 07 Jul 2025 09:45:42 +0000
ROA not before: Mon 07 Jul 2025 09:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 45.156.84.0/24 maxlen: 24
45.156.85.0/24 maxlen: 24
185.150.25.0/24 maxlen: 24
194.62.1.0/24 maxlen: 24
194.62.29.0/24 maxlen: 24
194.62.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:46:ec:2d:be:f6:a0:08:dc:69:07:ac:8c:8a:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jul 7 09:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55d3bbf07af9bef0124b9d3de126e007a46909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:8a:5a:0b:ed:d5:0c:ae:ee:76:8a:0a:e4:
02:dd:2c:57:cf:c5:ac:2a:c5:6f:a1:52:fc:05:8c:
bd:51:b0:93:09:03:cc:97:70:fd:81:03:63:18:36:
5b:06:e9:ac:2c:eb:ee:3e:ef:a5:fd:e7:a6:4a:11:
49:33:30:02:6e:dd:9b:c5:6b:2b:cc:fd:69:4b:99:
27:d6:7f:6b:62:bb:4d:bc:d7:3d:5b:53:ce:ef:cb:
10:79:3f:e7:15:0e:7d:f4:27:3a:19:c1:f7:2d:0c:
6f:93:56:90:50:13:7c:bf:fc:e6:cc:ce:4c:e1:6c:
65:47:0b:e7:fa:31:b9:15:57:87:ea:4b:82:6c:66:
11:a9:25:ff:4a:a4:46:61:33:4a:75:1c:b0:e6:10:
71:21:cf:99:9b:a8:79:86:91:96:62:0a:63:fa:c5:
de:2c:ec:e7:02:31:4e:01:c8:d7:66:a6:cc:7d:a8:
70:1d:c8:da:81:3c:ac:16:7e:3e:0a:d6:fc:a7:e2:
d4:5b:2b:db:4a:48:da:e6:e4:d1:29:5f:50:89:d5:
2b:7f:52:f9:75:f1:fa:fc:6b:d6:a3:6c:71:f3:83:
e4:6b:7c:8b:2c:8d:8a:ed:03:82:de:56:4a:03:b1:
97:06:6a:03:8a:8e:51:08:d3:a7:ae:8f:83:45:cd:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:3B:BF:07:AF:9B:EF:01:24:B9:D3:DE:12:6E:00:7A:46:90:9E
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/pV07vwevm-8BJLnT3hJuAHpGkJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.84.0/23
185.150.25.0/24
194.62.1.0/24
194.62.29.0/24
194.62.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c3:74:f0:44:8b:80:b6:d4:be:78:a0:0c:ed:17:ab:26:fe:
4b:8a:20:9e:bf:72:fe:0a:eb:18:0f:e8:3b:9c:ae:ba:d8:65:
ed:45:1f:76:a5:95:70:c6:18:46:a4:69:dd:04:a1:a4:b9:7e:
45:0d:dd:ae:a7:af:2b:4e:76:8a:32:3e:c3:56:3c:0a:ab:5e:
ef:ff:b8:82:cd:a7:12:63:68:bf:60:48:56:f1:67:4d:74:55:
b6:de:91:24:d0:40:33:7d:ac:9f:e3:fb:b6:ea:cc:f0:f5:5b:
15:e4:37:b0:f8:d0:83:5a:a5:61:46:58:f0:da:24:d1:ee:20:
ce:ea:88:e5:89:4a:b2:23:42:c8:61:e8:83:34:79:03:6b:77:
17:ea:ca:a2:0b:11:b1:25:f8:9d:12:2c:3f:b8:fa:02:a0:da:
f3:46:5c:ba:76:12:a9:cd:d4:43:83:a1:bd:2d:d4:d8:7a:64:
60:f0:d6:0a:b6:f5:d0:1f:2b:1d:8c:5b:14:24:50:10:3a:9c:
e5:4f:c1:be:64:e1:e0:d9:df:ed:5f:8c:7d:42:8c:95:a5:50:
ea:82:59:c4:12:32:c9:c8:c3:d1:c5:51:33:78:4e:97:48:70:
e5:6c:0d:0c:6b:31:65:d0:e1:21:54:9f:cb:9e:33:13:c8:43:
65:4e:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:35 2025 by rpki-client