Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ezgO8CIe8rU-2sczhCdmAGbk-LY.roa
File: ezgO8CIe8rU-2sczhCdmAGbk-LY.roa (raw, json)
Hash identifier: PwGJHAVQoY6m0cdmZlrol1RWTP1Bjykrfj7mXOfIxNU=
Subject key identifier: 7B:38:0E:F0:22:1E:F2:B5:3E:DA:C7:33:84:27:66:00:66:E4:F8:B6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01973F25E74E21DD0C3D12D4366DFA663500
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ezgO8CIe8rU-2sczhCdmAGbk-LY.roa
Signing time: Thu 05 Jun 2025 08:12:18 +0000
ROA not before: Thu 05 Jun 2025 08:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8903
IP address blocks: 45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
85.209.72.0/22 maxlen: 22
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.45.208.0/24 maxlen: 24
91.132.28.0/23 maxlen: 23
91.132.31.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.46.0/23 maxlen: 23
178.19.47.0/24 maxlen: 24
185.71.28.0/24 maxlen: 24
185.203.20.0/22 maxlen: 22
185.203.20.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.140.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.182.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:25:e7:4e:21:dd:0c:3d:12:d4:36:6d:fa:66:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 5 08:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b380ef0221ef2b53edac7338427660066e4f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:65:0b:69:5f:c5:23:2a:26:06:0d:92:65:
36:db:81:ed:b8:36:16:71:40:4a:21:cf:88:a1:49:
04:45:d5:72:3e:8f:fa:14:d9:de:ac:63:81:f9:f9:
75:f4:70:c0:69:c8:55:3b:fd:40:70:70:89:a3:95:
80:aa:9e:8d:d7:1c:b6:b7:6f:59:a0:ed:4f:ca:59:
fc:b0:1a:aa:17:d7:8a:98:32:b1:ba:37:9c:8e:7c:
f0:cf:83:24:c6:e2:df:33:04:6c:a8:d8:58:dd:c9:
69:fa:66:51:15:e3:7c:2d:1d:7f:d4:b0:3a:30:8e:
59:46:1f:43:d6:09:44:4e:82:ff:7b:00:c1:4a:28:
4d:fb:67:b8:dc:85:4a:bd:7e:d7:0e:52:b7:5f:b8:
b3:f1:55:91:04:95:b1:65:91:8a:f4:84:c7:14:7a:
c9:62:de:32:84:26:27:6b:5a:55:36:d5:2b:be:49:
e1:0f:68:62:1a:0a:30:79:c5:e4:25:37:d3:69:ca:
b9:06:2e:5f:56:11:10:8b:e5:a2:c4:6e:b2:1f:ab:
3c:b8:21:d7:c7:6b:5e:ba:21:ed:f0:82:31:68:34:
68:44:54:93:d9:c0:df:fe:7e:6c:79:ac:c1:bb:da:
41:af:b2:1b:50:5b:de:5e:9b:da:53:8a:49:0e:2d:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:0E:F0:22:1E:F2:B5:3E:DA:C7:33:84:27:66:00:66:E4:F8:B6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ezgO8CIe8rU-2sczhCdmAGbk-LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.50.0/23
80.66.112.0/22
80.66.117.0-80.66.127.255
85.209.72.0/22
89.42.70.0/24
89.44.150.0/23
89.45.208.0/24
91.132.28.0/23
91.132.31.0/24
94.198.47.0/24
178.19.34.0/23
178.19.44.0/22
185.71.28.0/24
185.203.20.0/22
185.229.215.0/24
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.140.0/24
194.15.146.0/24
194.15.182.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:0c:d7:b4:c1:5e:38:49:a3:dc:91:a0:b1:f0:c9:03:71:
b2:2d:70:27:68:9c:0a:68:cd:1e:76:8e:2d:bf:f8:2f:69:3d:
2d:89:f5:27:18:77:68:a3:2a:e5:ca:1a:62:a5:cf:40:9b:73:
72:32:c3:51:88:67:e4:6e:57:ec:09:79:9f:9e:93:ea:5a:b3:
fc:14:28:dd:93:02:14:8d:58:49:a5:4a:e9:cb:b5:9e:f0:5e:
76:74:df:0d:ce:90:f7:bd:a7:fd:53:f9:df:c7:ae:96:af:c4:
94:5f:fe:d4:ef:cd:4e:f5:b1:8d:69:0f:26:5b:a9:ac:67:1a:
b2:f3:3b:44:d0:04:f9:a1:63:6a:c9:ea:9c:ea:ec:80:b4:e4:
ef:cd:87:3f:bb:f0:bc:d9:74:19:c8:29:3f:aa:0e:73:02:71:
9e:86:47:23:ab:c5:e9:92:5b:32:16:d0:fa:f9:c6:09:96:a0:
b4:98:d8:eb:6a:d9:20:34:ad:30:1b:a9:9b:e7:c9:76:01:00:
28:51:4a:63:f7:5b:c8:48:6a:a8:d3:e8:fc:b8:6c:99:67:f1:
a9:0f:98:d9:10:99:e1:1a:ca:b0:21:66:f9:10:fd:41:fe:23:
7c:f5:c8:99:68:4a:5b:df:eb:68:e6:cb:71:34:94:c7:16:6b:
9d:cc:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:00 2025 by rpki-client