Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pl5qTvJ0rpLWRicFcaxmSjN6fOU.roa
File: pl5qTvJ0rpLWRicFcaxmSjN6fOU.roa (raw, json)
Hash identifier: M+HHYKn0ivUxhmltTBGC25tkBHF/WQFBjS/XaFc5SZ8=
Subject key identifier: A6:5E:6A:4E:F2:74:AE:92:D6:46:27:05:71:AC:66:4A:33:7A:7C:E5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198A84FE97CDB623D10FD31444451BD1FDA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pl5qTvJ0rpLWRicFcaxmSjN6fOU.roa
Signing time: Thu 14 Aug 2025 11:21:05 +0000
ROA not before: Thu 14 Aug 2025 11:21:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.131.186.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
45.136.136.0/24 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:4f:e9:7c:db:62:3d:10:fd:31:44:44:51:bd:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 14 11:21:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65e6a4ef274ae92d646270571ac664a337a7ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:93:53:5c:f8:bc:0d:c1:47:09:72:99:a7:
4e:d5:54:fa:60:f8:ac:57:64:a2:d9:19:b5:04:1f:
e2:70:41:10:cc:35:db:c6:0f:a2:e3:d0:d2:ec:8f:
20:28:89:c7:10:3a:95:98:b5:c4:16:32:67:ad:12:
b9:2a:fb:14:a7:32:79:8c:8a:a1:48:c7:25:75:b2:
dd:cf:28:77:0d:ac:2f:83:61:85:3d:96:17:3a:27:
7b:0d:14:17:f3:f7:2c:24:ef:31:19:24:a4:fc:d2:
d0:0e:ad:2f:7d:d6:40:26:03:8c:fc:77:5d:eb:69:
03:28:6e:34:c8:dc:95:5d:e6:f7:75:b9:0f:be:7c:
7d:09:64:cc:d8:a1:76:f7:e0:30:f3:1a:87:19:82:
72:bc:ad:a3:16:5d:80:2c:46:21:6e:e1:69:e6:04:
7e:63:42:26:2a:74:77:20:b5:62:d6:db:71:cb:10:
90:52:b3:58:6a:b7:ec:99:12:c6:c7:80:df:38:fe:
f5:f0:04:dc:b8:38:23:79:17:12:f9:78:36:1c:36:
65:83:7d:4e:10:69:f2:70:ba:d2:9c:ed:d1:28:97:
cb:ab:e8:61:34:60:12:2a:5c:a9:c0:29:71:5c:46:
8a:66:c6:79:71:c0:36:e4:26:ac:7d:c4:c4:3a:5a:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5E:6A:4E:F2:74:AE:92:D6:46:27:05:71:AC:66:4A:33:7A:7C:E5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pl5qTvJ0rpLWRicFcaxmSjN6fOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
45.136.136.0/22
185.102.84.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
c7:3f:2a:67:84:28:8a:3d:ae:87:c4:96:e0:49:98:53:6e:35:
68:c1:92:82:d0:bd:0b:4c:eb:db:63:cc:5c:55:46:bb:86:2d:
f8:c3:64:8b:42:ef:4c:e8:bc:ee:02:be:9e:b5:99:c3:e8:db:
4f:3b:3a:78:ad:1f:8e:da:30:26:ae:1c:9b:f7:f9:db:23:54:
74:50:25:cd:77:03:a7:25:0f:cf:fe:be:98:52:49:a1:f7:9d:
f3:69:61:6b:03:61:82:5b:4b:f7:10:6c:8d:5c:b0:47:a2:db:
6b:d7:e3:26:1d:c9:99:73:c0:27:de:1b:4b:38:41:c8:f7:8e:
4b:9a:00:6f:b2:ce:a4:bc:80:04:35:d2:0d:fc:ac:b6:61:ff:
95:67:46:09:78:21:60:21:1c:6d:70:9f:ab:22:cf:95:2f:e1:
11:4c:ed:19:84:8b:b6:16:ba:c3:fe:43:7c:43:f0:1e:28:4f:
78:0f:5f:bc:2b:02:fe:d6:85:31:6f:9d:08:23:a7:b7:e7:b0:
5e:c0:38:da:1e:f2:6d:e9:9e:c4:c7:4a:41:64:18:c5:da:70:
16:05:bd:0d:6e:9b:34:d6:96:db:f0:d8:51:84:8b:7c:c4:1b:
d7:d6:f9:81:9d:12:0c:91:b6:cc:1d:8e:c3:b3:2f:53:77:3c:
27:f2:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:17:36 2025 by rpki-client