Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Ljz0nxgtvjViMfDVmx_E0wT3Dco.roa
File: Ljz0nxgtvjViMfDVmx_E0wT3Dco.roa (raw, json)
Hash identifier: 3zPSSqimV1QW2pfnfFRaxzAJbqBIWdvPHqJVUUa3etA=
Subject key identifier: 2E:3C:F4:9F:18:2D:BE:35:62:31:F0:D5:9B:1F:C4:D3:04:F7:0D:CA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0199627F74047A3FECD57D3D54942654D039
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Ljz0nxgtvjViMfDVmx_E0wT3Dco.roa
Signing time: Fri 19 Sep 2025 15:02:23 +0000
ROA not before: Fri 19 Sep 2025 15:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.43.136.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.153.0/24 maxlen: 24
45.43.164.0/23 maxlen: 23
64.137.8.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
64.137.42.0/23 maxlen: 23
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
64.137.60.0/22 maxlen: 22
64.137.73.0/24 maxlen: 24
64.137.74.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.92.0/23 maxlen: 23
64.137.94.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
64.137.100.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
104.143.240.0/22 maxlen: 22
104.143.248.0/21 maxlen: 24
104.222.190.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/20 maxlen: 20
104.233.57.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.95.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.249.29.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.249.36.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.250.192.0/21 maxlen: 21
104.250.208.0/20 maxlen: 20
138.128.151.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:7f:74:04:7a:3f:ec:d5:7d:3d:54:94:26:54:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 19 15:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3cf49f182dbe356231f0d59b1fc4d304f70dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:94:fa:ab:96:4b:a5:78:06:e8:ad:12:71:
99:69:80:1f:44:6e:50:8b:bf:7e:a0:5d:6b:91:53:
19:8c:e9:a7:15:77:91:36:fd:18:6f:a3:6f:6f:1f:
61:bf:9b:a1:1d:4f:91:cc:b8:ec:e0:22:73:3f:04:
e9:21:0f:55:55:c3:cc:a1:1f:23:a0:d1:54:74:77:
f1:ce:8b:b6:cf:82:a1:7c:a0:ec:54:af:ff:45:3f:
d5:62:86:8a:cd:da:13:35:38:fb:5e:99:18:24:a7:
2a:c0:4d:52:f6:d7:d6:5f:a0:b1:b5:0a:21:ca:05:
a2:9d:4e:dc:8d:82:27:11:d5:58:61:f0:7c:52:a7:
0d:27:e4:ba:ce:e4:83:a8:d2:aa:d0:98:b5:ea:dc:
f3:5f:cf:f5:a1:12:6e:26:81:7a:bd:93:e3:54:cd:
7d:bd:3c:2a:a3:79:e5:ae:0d:f9:02:a9:05:5c:6d:
b1:23:47:ed:04:5e:0c:1a:ef:ad:68:e5:fd:b5:fb:
e1:65:41:38:c6:7c:d2:1b:7d:6e:01:41:d9:ac:f0:
72:73:c9:63:62:8d:f0:4a:06:18:fa:2d:c1:1f:b6:
28:79:3f:0e:26:ef:7b:1b:99:4e:da:94:98:ba:d8:
28:cc:3d:cc:b0:98:94:a0:b4:20:34:85:af:09:5c:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3C:F4:9F:18:2D:BE:35:62:31:F0:D5:9B:1F:C4:D3:04:F7:0D:CA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Ljz0nxgtvjViMfDVmx_E0wT3Dco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0/24
45.43.138.0/23
45.43.153.0/24
45.43.164.0/23
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.222.190.0/24
104.233.31.0-104.233.47.255
104.233.57.0/24
104.233.60.0-104.233.62.255
104.238.15.0-104.238.16.255
104.238.18.0/24
104.238.22.0/24
104.238.25.0/24
104.239.9.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.95.0/24
104.239.99.0/24
104.239.110.0/24
104.249.29.0/24
104.249.32.0-104.249.37.255
104.249.55.0/24
104.250.192.0/21
104.250.208.0/20
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
21:26:a5:ac:e5:d6:2f:e4:0f:38:61:70:c6:08:0d:0b:23:29:
44:c2:e5:31:9f:c2:03:1b:27:e7:4e:36:77:70:67:73:e7:4b:
91:1f:9b:f0:f3:87:fe:e6:aa:94:69:f8:b3:cf:3d:82:09:53:
97:cb:90:14:f2:15:c5:57:f5:f1:57:b8:b6:aa:a4:bd:c1:4e:
20:89:bb:f7:34:73:62:49:41:07:40:be:cf:3f:1c:21:fe:12:
e7:fe:f1:65:68:b8:dd:e7:d4:55:d1:a2:c5:06:df:77:78:7a:
a6:73:19:3d:9c:53:83:b0:d3:2a:09:30:41:be:f8:21:17:73:
3b:12:0b:91:be:6f:1e:18:be:f3:1f:ea:0a:4c:69:b8:75:75:
3d:c7:cb:23:38:1c:ea:2a:ba:01:04:8b:86:84:30:a9:cc:e8:
08:96:8a:27:2d:81:db:17:3a:41:5c:bf:b3:45:04:e3:73:96:
22:b6:23:a8:0c:66:36:73:8d:b2:f0:51:0f:b6:97:9b:6c:44:
da:6f:0a:2d:12:f7:81:fb:23:ce:b6:98:0e:db:88:2e:01:c2:
9e:d5:02:76:eb:4c:59:f7:3c:dd:16:96:1f:9a:60:ff:58:1d:
88:db:c8:3f:f7:cb:a2:64:1b:94:d7:b1:03:75:41:3e:49:56:
69:21:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:08 2025 by rpki-client