Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa
File: 9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa (raw, json)
Hash identifier: F3Gen1bFVipiyLDRBWS2zGC6+19TslOL2dJD3LXtkbA=
Subject key identifier: F5:58:AA:D0:3D:32:7B:2B:9D:1E:C3:B2:1B:08:96:AB:87:3D:66:6F
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0199706705621CC08BE3CCAE85223B7F2068
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa
Signing time: Mon 22 Sep 2025 07:50:23 +0000
ROA not before: Mon 22 Sep 2025 07:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.134.23.0/24 maxlen: 24
45.152.150.0/24 maxlen: 24
45.152.151.0/24 maxlen: 24
185.94.65.0/24 maxlen: 24
185.94.66.0/24 maxlen: 24
185.198.155.0/24 maxlen: 24
195.64.107.0/24 maxlen: 24
195.64.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:67:05:62:1c:c0:8b:e3:cc:ae:85:22:3b:7f:20:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 22 07:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f558aad03d327b2b9d1ec3b21b0896ab873d666f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:3f:97:63:bb:72:2c:a1:fa:5b:38:00:0a:
f9:20:b0:4c:7b:cb:bb:df:68:ba:ca:1a:9f:3e:9c:
1c:88:e9:d5:ff:e4:84:40:26:d0:c4:3b:c7:79:9d:
a6:c8:a4:b1:00:b5:aa:19:b4:a7:34:b3:14:04:7e:
ce:0e:4e:e9:00:73:97:c3:1a:33:ad:ef:07:4a:9e:
a9:27:31:33:e2:f3:70:22:18:41:57:d0:c3:f4:f4:
d3:70:7e:35:75:0d:e8:79:2e:71:23:5d:fc:90:01:
27:77:b4:18:f6:ce:24:f1:f2:a2:45:b9:88:33:48:
5d:6d:8d:49:7f:de:ca:72:58:f1:68:71:50:f7:99:
5e:86:b9:f1:47:56:d1:df:2f:35:d2:c6:6a:54:39:
78:23:43:80:8a:a6:87:ff:56:91:20:15:2e:a8:9e:
25:20:96:75:11:fd:fb:5a:d2:1d:08:26:6a:97:8a:
24:46:31:fe:5f:76:f1:74:5e:ff:4e:c3:9e:84:a6:
b1:cc:47:a9:f8:62:e6:11:27:cb:b7:08:6a:d8:45:
6b:2e:65:89:0b:cd:22:47:8c:e0:e8:8d:76:1d:19:
eb:5e:1c:24:f9:73:fd:8d:c8:32:d5:1c:30:1e:c7:
a6:6f:eb:4f:10:15:28:54:95:76:06:1c:7c:38:6c:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:AA:D0:3D:32:7B:2B:9D:1E:C3:B2:1B:08:96:AB:87:3D:66:6F
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.23.0/24
45.152.150.0/23
185.94.65.0-185.94.66.255
185.198.155.0/24
195.64.107.0/24
195.64.113.0/24
Signature Algorithm: sha256WithRSAEncryption
89:13:7b:98:f0:f4:b6:94:e8:ea:1b:18:02:a4:b0:28:a4:0e:
95:30:ce:a2:82:96:41:bf:72:4f:c5:30:3c:ae:3a:a5:d4:61:
dc:b5:7f:a3:cc:0c:00:e8:10:bc:f1:a1:6e:26:c5:53:c3:d5:
94:ec:84:06:b5:9b:eb:53:e2:f6:21:58:41:80:cb:1c:60:28:
f0:70:be:e6:5c:a8:cc:5a:d8:7c:a5:d5:cd:ab:6e:71:a0:b5:
bb:01:c7:e0:ce:3d:1f:5e:4d:08:ef:8e:f4:f7:ba:d1:c6:72:
1b:54:61:74:7c:cc:66:51:a4:9e:c4:6e:fe:69:33:15:09:43:
13:06:67:14:46:5a:64:3b:d0:85:9d:c9:fd:2e:1a:b8:96:c3:
66:76:34:c2:91:58:5c:58:0e:20:1f:a1:37:f8:d2:16:e5:e7:
fa:df:94:72:98:ee:ff:c6:26:91:d4:9f:84:6b:25:d9:6c:be:
ad:c5:b8:7c:76:c2:f9:51:61:25:30:4a:e6:8d:1e:c3:47:8f:
1a:75:bf:99:bc:05:0b:1e:6f:bc:6c:9a:c5:c7:cb:bf:af:38:
4a:4b:05:3b:52:a5:cf:49:eb:eb:1f:25:55:4d:bc:fd:87:ba:
fe:6d:80:ab:99:1d:85:51:53:cd:3a:68:41:f4:e4:6c:b3:06:
02:39:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:47 2025 by rpki-client