Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kEv9IEcp91tlYxuL-vY3OV9uyMg.roa
File: kEv9IEcp91tlYxuL-vY3OV9uyMg.roa (raw, json)
Hash identifier: 4BZrNsk4e6vjjtYClEeFVShxfPReIVtU0ueAa02BaA0=
Subject key identifier: 90:4B:FD:20:47:29:F7:5B:65:63:1B:8B:FA:F6:37:39:5F:6E:C8:C8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A5F27D94399964911D931CFE8BA2AE62B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kEv9IEcp91tlYxuL-vY3OV9uyMg.roa
Signing time: Fri 07 Nov 2025 16:30:38 +0000
ROA not before: Fri 07 Nov 2025 16:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.131.186.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
45.136.136.0/24 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:27:d9:43:99:96:49:11:d9:31:cf:e8:ba:2a:e6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 7 16:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=904bfd204729f75b65631b8bfaf637395f6ec8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:bc:8e:d9:bb:0b:72:10:04:38:1e:dc:ac:
01:c6:cd:73:fc:5d:b3:89:56:8c:36:41:32:6a:86:
e6:d9:b6:ef:b7:c0:e7:a8:5f:dd:9c:27:6a:92:df:
7b:a1:d9:3b:56:ba:f7:20:f5:a7:62:c5:42:89:f4:
29:da:73:0b:00:d1:81:a6:bf:02:2c:8a:56:d3:2f:
4e:f8:e2:b2:ef:5c:a2:14:c6:3e:4e:d3:1e:c9:c3:
de:18:a2:26:70:70:24:a2:ce:f2:da:93:a4:48:55:
b3:c8:d4:76:c1:dc:51:ad:9d:bb:c4:6b:d5:32:03:
2d:f8:4e:b9:23:57:4f:5b:40:62:80:dc:f6:26:af:
57:f7:34:bf:04:e2:50:22:65:53:36:88:c4:ae:b6:
42:0b:e4:ef:44:94:49:7b:8a:79:a9:32:82:3d:61:
72:5e:6c:e3:d4:e4:f3:bb:c8:37:3a:7a:e2:1f:6e:
14:49:22:f7:01:68:57:b7:55:c7:b6:9c:89:e1:96:
87:6f:16:3f:46:8e:69:85:21:0c:48:fa:c6:27:d1:
61:f2:b3:7e:fc:be:27:b7:ef:96:43:9e:4f:af:f2:
2a:63:89:5d:c6:77:6f:e6:b9:44:18:62:97:b0:00:
88:9f:b7:2f:d5:93:22:15:af:b2:fb:ed:24:33:f8:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:FD:20:47:29:F7:5B:65:63:1B:8B:FA:F6:37:39:5F:6E:C8:C8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kEv9IEcp91tlYxuL-vY3OV9uyMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
45.136.136.0/22
185.102.84.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
bd:8e:91:b4:cc:83:5d:74:cd:87:11:87:9d:c8:41:34:07:11:
50:99:62:49:f0:92:b5:fa:94:a6:4b:81:b1:1a:fc:10:52:02:
ee:84:36:4e:dd:39:0f:ef:c2:07:f6:2b:eb:09:11:2c:f0:6b:
45:8d:d3:fe:16:d0:74:4c:1c:58:5d:3a:da:80:a0:37:73:38:
48:98:6d:da:09:1d:85:5d:81:e2:f3:f6:7e:cb:c3:da:15:8d:
d3:81:1c:30:ba:76:14:cb:67:5b:d9:90:64:95:dc:a2:f4:bc:
fb:84:7d:70:7c:6e:aa:d2:31:d2:47:9d:d7:ac:e0:4a:a1:80:
6a:a8:12:3c:42:d4:e7:d5:d0:2f:82:0f:56:c3:35:bd:90:ea:
68:77:db:97:41:a9:31:b8:30:df:c3:e5:84:d2:ee:3e:93:90:
44:9d:3d:50:57:90:df:5e:f1:48:a0:d5:92:35:27:50:26:1a:
be:e2:0f:7c:50:66:6b:d8:c6:5a:06:5f:d7:53:c8:5c:3f:73:
e9:7e:67:62:7a:7d:1e:aa:3e:bd:c4:49:0c:e8:a4:14:cd:5e:
c9:53:50:85:43:43:75:62:c2:37:01:75:f4:e4:4d:8c:0d:ee:
8b:5f:3f:6f:50:e5:1a:c2:38:b4:1f:1b:cb:3c:71:cf:dc:42:
54:d8:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 18:12:12 2025 by rpki-client