Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/sl-lo3jvPgCmcHrATWVtiIBfFgU.roa
File: sl-lo3jvPgCmcHrATWVtiIBfFgU.roa (raw, json)
Hash identifier: P4wMzyjEAQpu2LowUr6Ww77FTG8KNUTEpCkH40IYy6Q=
Subject key identifier: B2:5F:A5:A3:78:EF:3E:00:A6:70:7A:C0:4D:65:6D:88:80:5F:16:05
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0199141FACDE1D57D5A6D1774E0758E170EC
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/sl-lo3jvPgCmcHrATWVtiIBfFgU.roa
Signing time: Thu 04 Sep 2025 09:47:24 +0000
ROA not before: Thu 04 Sep 2025 09:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48011
IP address blocks: 5.172.177.0/24 maxlen: 24
45.89.236.0/22 maxlen: 24
45.93.168.0/22 maxlen: 24
45.93.168.0/24 maxlen: 24
45.252.180.0/23 maxlen: 23
45.252.180.0/24 maxlen: 24
45.252.181.0/24 maxlen: 24
45.252.182.0/23 maxlen: 23
45.252.182.0/24 maxlen: 24
45.252.183.0/24 maxlen: 24
62.204.58.0/24 maxlen: 24
77.87.122.0/24 maxlen: 24
87.236.161.0/24 maxlen: 24
91.247.188.0/24 maxlen: 24
103.5.203.0/24 maxlen: 24
103.92.118.0/23 maxlen: 24
103.130.145.0/24 maxlen: 24
103.130.147.0/24 maxlen: 24
103.215.238.0/23 maxlen: 24
110.172.145.0/24 maxlen: 24
185.104.189.0/24 maxlen: 24
185.182.105.0/24 maxlen: 24
185.211.79.0/24 maxlen: 24
185.217.143.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
193.163.72.0/24 maxlen: 24
213.217.31.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
2a0c:6600::/48 maxlen: 48
2a0c:6600:1::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:5::/48 maxlen: 48
2a0c:6600:6::/48 maxlen: 48
2a0c:6600:7::/48 maxlen: 48
2a0c:6600:8::/48 maxlen: 48
2a0c:6600:9::/48 maxlen: 48
2a0c:6600:1000::/48 maxlen: 48
2a0c:6600:2000::/48 maxlen: 48
2a0c:6600:3000::/48 maxlen: 48
2a0c:6600:4000::/48 maxlen: 48
2a0c:6600:6000::/48 maxlen: 48
2a0c:6600:6600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:1f:ac:de:1d:57:d5:a6:d1:77:4e:07:58:e1:70:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Sep 4 09:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b25fa5a378ef3e00a6707ac04d656d88805f1605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:81:bd:21:aa:35:c9:e1:d8:eb:1f:cb:6b:
06:18:63:05:3b:94:32:ca:91:71:f0:30:97:37:ab:
18:8f:7f:75:98:1c:08:59:8b:00:0a:d7:07:f6:62:
66:b5:51:2d:1b:9e:53:7c:30:12:6d:08:9f:f3:01:
a0:24:ed:60:ac:18:da:d5:0d:09:2f:3e:f0:99:dd:
09:66:b0:6b:41:46:4e:60:d8:cf:df:3b:6e:e8:b3:
8c:a4:b7:0d:2a:0e:28:62:23:55:54:4a:b6:bf:05:
4a:e3:06:08:45:24:e9:15:17:5a:d9:af:c9:ca:5c:
ca:0f:07:29:fe:4d:63:20:b3:46:32:ff:b5:66:1f:
af:93:a2:43:b8:36:e9:5b:e9:3f:a0:24:17:ad:88:
0f:25:70:4c:f4:50:9c:11:c9:d7:b1:07:73:18:fb:
a3:64:1b:d5:ad:9f:2a:d0:97:0c:af:b9:7a:84:da:
3f:1c:e7:5e:df:f9:a0:1b:3b:a0:41:44:84:04:78:
f9:5a:9f:f7:be:92:40:c4:35:eb:ce:ea:31:95:7d:
55:89:af:8d:d4:95:2b:38:e9:0b:3c:e8:7b:d0:f6:
55:ed:45:14:bb:be:47:b1:54:87:55:bf:62:a8:7d:
63:69:62:a8:24:3e:ef:b9:73:c0:7b:f4:e3:63:7f:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:A5:A3:78:EF:3E:00:A6:70:7A:C0:4D:65:6D:88:80:5F:16:05
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/sl-lo3jvPgCmcHrATWVtiIBfFgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.177.0/24
45.89.236.0/22
45.93.168.0/22
45.252.180.0/22
62.204.58.0/24
77.87.122.0/24
87.236.161.0/24
91.247.188.0/24
103.5.203.0/24
103.92.118.0/23
103.130.145.0/24
103.130.147.0/24
103.215.238.0/23
110.172.145.0/24
185.104.189.0/24
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.217.31.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff
2a0c:6600:1000::/48
2a0c:6600:2000::/48
2a0c:6600:3000::/48
2a0c:6600:4000::/48
2a0c:6600:6000::/48
2a0c:6600:6600::/48
Signature Algorithm: sha256WithRSAEncryption
31:eb:e8:16:0b:d5:23:08:de:54:3d:36:62:c0:b0:76:d2:2e:
31:b8:da:7a:1b:b0:85:2f:9d:62:e1:c9:f8:9d:28:d7:ba:46:
19:9a:6b:5d:b5:15:22:65:70:ee:08:d3:54:af:c5:4c:eb:a0:
fd:a9:04:08:81:cc:27:42:2b:4d:ad:55:14:cf:ba:87:cc:38:
db:12:6d:7f:69:a2:2c:3e:52:48:50:24:42:16:04:81:d5:ed:
e8:62:d1:b0:d1:69:67:42:b3:49:2b:09:84:d0:f0:13:46:8a:
78:53:06:ac:c7:b7:55:2d:57:c4:94:77:c0:1e:bb:0d:1b:d0:
da:e4:4d:cf:af:c0:11:de:53:e4:ec:b4:24:03:f4:57:a3:a8:
21:91:a7:b1:42:c3:d5:22:f0:af:05:48:3a:d5:20:87:cf:e8:
dd:d6:27:06:c9:4f:16:22:b1:7b:29:76:54:b9:3c:04:47:58:
af:15:73:b9:57:f5:ec:4d:e4:43:8c:3a:f5:c7:60:7a:0e:20:
13:ec:24:4f:bc:ee:bc:58:b4:62:92:17:54:0e:95:4c:b3:9e:
27:72:0d:45:b1:0b:49:2a:b5:18:9b:33:29:81:1b:c5:ee:29:
59:8b:84:9e:c8:bc:bd:68:45:b0:61:55:b9:ac:99:f7:71:f0:
fb:66:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:31:19 2025 by rpki-client