Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EPDe35N1azJEK8uok7-o_97sYh0.roa
File: EPDe35N1azJEK8uok7-o_97sYh0.roa (raw, json)
Hash identifier: C38/gMZYXjRTrHa0PMtal6z5xQbsJ1VW9n35B2iBbfs=
Subject key identifier: 10:F0:DE:DF:93:75:6B:32:44:2B:CB:A8:93:BF:A8:FF:DE:EC:62:1D
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01995CF6365B7FB920A3AF809EDE143FE355
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EPDe35N1azJEK8uok7-o_97sYh0.roa
Signing time: Thu 18 Sep 2025 13:14:23 +0000
ROA not before: Thu 18 Sep 2025 13:14:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44534
IP address blocks: 5.45.209.0/24 maxlen: 24
5.45.214.0/24 maxlen: 24
5.45.219.0/24 maxlen: 24
5.45.241.0/24 maxlen: 24
5.45.243.0/24 maxlen: 24
5.45.252.0/22 maxlen: 22
5.255.203.0/24 maxlen: 24
5.255.205.0/24 maxlen: 24
5.255.232.0/24 maxlen: 24
5.255.234.0/23 maxlen: 23
37.9.75.0/24 maxlen: 24
37.9.86.0/24 maxlen: 24
37.9.98.0/24 maxlen: 24
37.140.168.0/24 maxlen: 24
77.88.6.0/24 maxlen: 24
77.88.12.0/23 maxlen: 23
77.88.42.0/23 maxlen: 23
77.88.61.0/24 maxlen: 24
84.252.160.0/19 maxlen: 20
87.250.232.0/24 maxlen: 24
87.250.238.0/24 maxlen: 24
87.250.240.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
90.156.176.0/24 maxlen: 24
93.158.144.0/22 maxlen: 22
93.158.155.0/24 maxlen: 24
93.158.168.0/22 maxlen: 22
93.158.184.0/24 maxlen: 24
93.158.185.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.168.0/22 maxlen: 22
95.108.170.0/24 maxlen: 24
141.8.130.0/23 maxlen: 23
178.154.152.0/24 maxlen: 24
2a02:6bf:8000::/34 maxlen: 48
2a02:6bf:8005::/48 maxlen: 48
2a02:6bf:8006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:f6:36:5b:7f:b9:20:a3:af:80:9e:de:14:3f:e3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Sep 18 13:14:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f0dedf93756b32442bcba893bfa8ffdeec621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:98:14:1b:ae:8a:be:2c:f8:41:1d:6c:13:
17:c4:b7:33:ae:7f:dc:c4:8b:9d:f1:ed:97:cc:e1:
da:16:50:d0:aa:f8:7d:44:7e:b6:a9:2b:db:6d:1e:
23:a8:7d:46:ff:f7:5f:34:15:f1:2f:d4:49:60:5c:
7f:1a:c1:54:78:a7:7c:da:f3:87:27:cc:92:29:b4:
7c:73:b2:eb:75:56:64:e9:a2:85:fe:82:c3:6d:3f:
10:b6:79:f3:18:1a:bb:bc:41:5e:a0:e0:f9:6d:15:
b6:9b:a4:21:8d:db:7b:1b:d2:a8:f2:25:e2:34:4c:
7f:9a:21:64:5a:4b:34:ca:e0:67:f4:1c:7f:73:c7:
02:02:b9:99:c1:ec:db:ca:df:26:0d:aa:6f:01:3b:
9b:14:bc:0d:c8:d5:18:16:13:ed:fb:2a:d6:53:27:
9a:1b:c9:61:53:81:3e:dc:b8:4c:4b:16:1f:03:2b:
2e:19:a9:67:37:ba:7b:eb:50:a5:49:98:86:7a:c2:
7a:50:3a:0f:42:85:61:42:6d:69:95:88:85:6b:27:
91:c3:d1:a5:a9:4c:c4:d5:86:29:3a:14:c9:d2:52:
bc:40:41:6b:05:05:28:38:2c:d2:fe:ef:29:98:8d:
0c:77:e4:70:d8:5b:f1:b1:26:9d:63:11:5d:69:95:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:DE:DF:93:75:6B:32:44:2B:CB:A8:93:BF:A8:FF:DE:EC:62:1D
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EPDe35N1azJEK8uok7-o_97sYh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.209.0/24
5.45.214.0/24
5.45.219.0/24
5.45.241.0/24
5.45.243.0/24
5.45.252.0/22
5.255.203.0/24
5.255.205.0/24
5.255.232.0/24
5.255.234.0/23
37.9.75.0/24
37.9.86.0/24
37.9.98.0/24
37.140.168.0/24
77.88.6.0/24
77.88.12.0/23
77.88.42.0/23
77.88.61.0/24
84.252.160.0/19
87.250.232.0/24
87.250.238.0/24
87.250.240.0/24
90.156.176.0/20
93.158.144.0/22
93.158.155.0/24
93.158.168.0/22
93.158.184.0/22
95.108.168.0/22
141.8.130.0/23
178.154.152.0/24
IPv6:
2a02:6bf:8000::/34
Signature Algorithm: sha256WithRSAEncryption
53:25:fd:04:02:a1:bb:41:90:d5:36:57:2f:ce:4d:9f:2f:ba:
7a:8d:b9:ba:63:87:54:03:04:62:18:18:8f:6a:63:26:0e:b9:
f3:e1:06:84:a8:f7:84:d1:ee:c7:ac:76:11:66:a8:8c:97:69:
79:d5:d5:5b:81:2f:10:6a:0d:22:92:b3:25:e6:b2:bb:f6:35:
53:2f:59:2d:da:95:36:ae:6c:b9:a6:92:b0:93:d8:b7:34:51:
48:c2:59:64:af:da:4d:7a:04:83:d6:42:b3:a3:45:f5:5b:18:
36:a1:77:4e:52:45:dc:26:53:e8:d1:c6:45:c1:65:f8:02:b3:
e6:5c:fe:38:2d:03:78:18:0e:40:b6:4e:61:cf:d6:60:e4:45:
fa:ec:a6:bf:3b:ea:c9:89:b5:eb:db:20:b6:02:75:75:50:ab:
10:92:e8:90:55:86:e6:11:4d:c9:68:d0:6c:c8:79:f3:b2:b6:
1f:2a:ed:0a:e2:0b:5e:be:ba:05:67:e0:2a:b0:ac:6d:82:bf:
60:cd:8f:16:d6:49:82:d7:05:46:c7:3b:3a:1a:d1:50:97:02:
06:92:9e:47:5c:88:90:d3:1e:d0:73:6c:d2:85:64:48:2f:d0:
92:29:31:40:37:94:3a:1e:23:7a:86:49:86:95:dd:63:23:ed:
4a:85:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:40 2025 by rpki-client