Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/o61tWyoDeSANWV5bTMy4s3KqSks.roa
File: o61tWyoDeSANWV5bTMy4s3KqSks.roa (raw, json)
Hash identifier: PQTk7QcYHLBNLSmS0Wr55gg+GLop4Y4wA8UmdzsBXis=
Subject key identifier: A3:AD:6D:5B:2A:03:79:20:0D:59:5E:5B:4C:CC:B8:B3:72:AA:4A:4B
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0198085A3FB531C54A6B6799F9864D42D89F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/o61tWyoDeSANWV5bTMy4s3KqSks.roa
Signing time: Mon 14 Jul 2025 09:53:08 +0000
ROA not before: Mon 14 Jul 2025 09:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48146
IP address blocks: 5.182.80.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
45.86.224.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
92.118.248.0/22 maxlen: 24
94.103.244.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
151.237.131.0/24 maxlen: 24
185.25.52.0/22 maxlen: 24
185.87.63.0/24 maxlen: 24
185.148.52.0/22 maxlen: 24
185.189.225.0/24 maxlen: 24
185.189.226.0/23 maxlen: 24
185.192.72.0/22 maxlen: 24
185.192.116.0/22 maxlen: 24
185.195.36.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
185.210.60.0/22 maxlen: 24
185.210.72.0/22 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
188.240.236.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
193.228.204.0/23 maxlen: 24
194.36.104.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:5a:3f:b5:31:c5:4a:6b:67:99:f9:86:4d:42:d8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jul 14 09:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ad6d5b2a0379200d595e5b4cccb8b372aa4a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:04:bd:e2:f4:3a:75:e3:de:b4:3a:6e:86:
f6:ab:d4:da:15:70:08:80:87:85:bf:a8:da:d8:c5:
98:31:5b:63:2c:77:56:6c:8d:ac:29:a0:22:fe:e2:
d0:4a:a7:11:05:6f:f7:18:60:64:d2:9f:de:d6:49:
d9:2d:28:0e:bd:61:fe:d7:d7:79:fe:76:03:4b:94:
ab:85:ec:d1:03:ba:c4:88:d0:c6:5c:db:d8:24:d0:
a5:0e:ba:18:73:47:89:2f:ee:65:62:51:1e:f0:14:
81:86:72:bc:30:a8:c9:f7:b4:a8:5b:54:ab:48:c7:
5b:ba:24:5c:55:e4:12:72:a5:91:a8:cc:a1:d1:3c:
55:96:7f:57:c5:7b:4c:c2:f3:7b:50:ad:c6:63:0c:
8e:dd:3c:9f:04:0b:3f:7b:df:b9:d1:f0:2b:f4:05:
4e:f1:bc:89:30:68:d8:5e:c3:89:98:66:37:89:7b:
99:d3:f4:d9:52:2f:ff:d4:c3:ae:28:08:00:92:93:
69:f1:03:6a:c6:1e:e6:14:85:8a:1f:68:89:02:9c:
3d:da:93:6c:33:ac:4d:d3:a8:1e:46:68:b3:3f:aa:
2e:78:f6:31:53:24:02:dd:3b:01:8e:fd:ae:51:ec:
09:c3:91:af:1b:7b:20:f1:14:e1:d9:f2:f7:23:cc:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:6D:5B:2A:03:79:20:0D:59:5E:5B:4C:CC:B8:B3:72:AA:4A:4B
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/o61tWyoDeSANWV5bTMy4s3KqSks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.86.224.0/22
45.89.40.0/22
45.136.32.0/22
81.22.232.0/22
92.118.248.0/22
94.103.244.0/22
151.237.59.0/24
151.237.131.0/24
185.25.52.0/22
185.87.63.0/24
185.148.52.0/22
185.189.225.0-185.189.227.255
185.192.72.0/22
185.192.116.0/22
185.195.36.0/22
185.198.108.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.22.0/23
185.255.72.0/22
188.240.236.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:a9:67:df:b1:9f:0b:49:25:86:5f:01:82:94:0f:23:9b:c8:
de:1f:3c:85:85:16:6c:5e:ec:46:8e:36:2a:27:7e:73:ef:14:
8b:21:79:09:d8:e3:2c:7b:52:87:b9:ec:a7:29:d7:73:5a:62:
ad:37:af:27:14:b2:e1:f4:1e:96:46:7f:49:71:08:28:b0:d1:
29:ff:45:cf:06:4a:69:3b:19:60:db:83:d1:31:94:f2:ba:3d:
ff:97:9f:8d:9a:d8:3c:2d:44:9e:1f:ec:ed:77:cd:fa:ed:76:
eb:6e:d0:75:4f:1c:e7:68:2d:e8:1a:41:ca:6c:42:ec:26:17:
79:5f:ac:74:9a:d7:8a:63:99:29:6c:91:38:d2:8d:70:3c:7a:
6b:74:76:27:9c:bc:ac:6f:28:9c:84:31:36:de:6a:e0:5c:84:
26:20:a6:e1:61:81:0d:26:b9:65:10:a0:a5:06:db:a5:c3:ea:
4f:af:ba:69:28:17:7c:32:f0:47:dc:9b:99:57:f6:42:a8:2c:
6a:cf:a9:63:6f:3f:1e:4d:fe:4f:1b:71:83:bd:35:b5:d7:9e:
f6:63:fb:f1:06:b8:2d:16:48:13:6c:06:8a:2c:0e:e4:3c:f9:
9c:c5:85:82:5c:c9:34:b3:5c:f8:c7:56:21:d0:c2:12:8c:4d:
cd:b3:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:53:42 2025 by rpki-client