Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lVIbFm_wDujNHQrLp4z_9cRLbpo.roa
File: lVIbFm_wDujNHQrLp4z_9cRLbpo.roa (raw, json)
Hash identifier: 5m3dAM048fUyaG3wEFv0hfm99ni4pAhEeAvnZGtVAic=
Subject key identifier: 95:52:1B:16:6F:F0:0E:E8:CD:1D:0A:CB:A7:8C:FF:F5:C4:4B:6E:9A
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01993D45A1AE4A362F3A66CDFE0FEC6788DF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lVIbFm_wDujNHQrLp4z_9cRLbpo.roa
Signing time: Fri 12 Sep 2025 09:33:17 +0000
ROA not before: Fri 12 Sep 2025 09:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.157.208.0/23 maxlen: 23
45.157.211.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:45:a1:ae:4a:36:2f:3a:66:cd:fe:0f:ec:67:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 12 09:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95521b166ff00ee8cd1d0acba78cfff5c44b6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:35:4e:60:ea:17:50:8e:03:8b:db:1c:0e:
af:3e:5a:6d:6a:95:dd:9c:b9:02:b1:cd:9d:6f:8b:
a7:d3:88:50:87:94:6a:3f:f2:a5:30:9d:fc:71:1d:
5b:50:12:1d:1c:34:80:e7:8b:be:a4:f8:07:b5:8e:
57:ad:b4:91:6e:03:0b:10:4a:02:d6:97:80:af:87:
d2:c0:03:28:9b:06:70:fd:92:cc:46:e3:8c:b6:35:
7e:61:41:37:4a:7d:52:a8:74:5e:d5:f4:bf:c6:dc:
ff:22:ed:2e:c6:77:d2:0a:ca:ae:fb:59:b4:46:be:
01:5a:36:de:07:7d:88:73:f5:b4:bb:2e:c3:92:96:
97:03:79:6d:5f:fa:64:0b:ef:b3:82:73:71:03:7b:
45:dd:84:de:0e:62:d9:2e:79:d3:60:10:80:68:bc:
38:b4:b4:f1:e9:2b:3a:e9:e7:d5:6e:bb:a2:82:3e:
8e:a3:b7:39:54:7a:cd:fc:8b:ea:18:2f:7f:28:b8:
5d:8b:4d:b4:15:a0:db:40:c1:47:9f:4e:bf:1f:47:
cc:96:1c:03:8a:dc:23:87:27:2e:26:df:93:f0:9d:
e4:fc:a6:c2:73:8e:75:7c:89:80:14:8f:6a:3f:dd:
31:3b:24:0d:49:de:bb:94:53:59:00:4a:ee:d7:c0:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:1B:16:6F:F0:0E:E8:CD:1D:0A:CB:A7:8C:FF:F5:C4:4B:6E:9A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lVIbFm_wDujNHQrLp4z_9cRLbpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
45.157.208.0/23
45.157.211.0/24
176.125.251.0/24
185.199.213.0/24
185.221.26.0/24
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
63:f6:c0:33:a2:cd:40:dd:9c:a0:53:e2:b9:33:62:c9:79:b0:
3d:c6:fc:a3:ea:8d:89:26:72:0b:af:22:40:ff:de:e5:d0:4c:
ef:3c:5e:73:9b:18:b4:89:1a:61:87:b9:ec:57:e1:18:24:a4:
4b:01:93:e7:05:8d:62:9c:12:92:59:b7:18:6d:9f:aa:6f:d4:
16:fb:45:fb:a6:3e:dc:15:e0:42:9a:0c:fe:69:0b:e5:28:45:
d4:83:a6:2c:92:27:68:40:76:32:ec:8d:83:31:e5:13:30:e2:
fe:6d:0a:21:1e:b4:d9:0d:c3:af:6b:4f:d7:77:99:53:b9:d2:
13:a0:90:d4:1f:3b:e0:9d:65:6e:0e:52:62:c1:b8:cc:09:f4:
95:21:cb:c8:bb:7a:a8:ec:90:cf:21:50:90:9f:fc:cb:1e:09:
f7:91:12:21:b0:9a:b3:a3:40:06:63:f8:2c:7e:ac:df:3f:76:
50:e5:79:d6:c4:d1:1b:a9:da:4d:70:f0:97:3a:20:97:84:f7:
ae:15:83:04:b9:1c:0e:80:17:e2:72:f7:fb:de:d9:34:d7:01:
a5:54:46:a8:d7:9a:4b:98:69:b6:67:cb:40:26:d5:c4:36:23:
e4:0c:06:ce:e6:5c:d3:62:a9:24:fe:30:9b:e6:27:e8:ef:e0:
04:a5:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 08:50:14 2025 by rpki-client