Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Re4HlYc_pwDQJN7NLzaj_7WIGVU.roa
File: Re4HlYc_pwDQJN7NLzaj_7WIGVU.roa (raw, json)
Hash identifier: 8AAV02CICAdRwHG4qVW7o64pzHyanpnngUBBmgEjipQ=
Subject key identifier: 45:EE:07:95:87:3F:A7:00:D0:24:DE:CD:2F:36:A3:FF:B5:88:19:55
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01973F784C8886FF40BC6BF099AC6756C118
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Re4HlYc_pwDQJN7NLzaj_7WIGVU.roa
Signing time: Thu 05 Jun 2025 09:42:17 +0000
ROA not before: Thu 05 Jun 2025 09:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:78:4c:88:86:ff:40:bc:6b:f0:99:ac:67:56:c1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 5 09:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ee0795873fa700d024decd2f36a3ffb5881955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:56:92:04:3f:70:c4:1a:61:ed:d4:30:98:74:
e9:b3:4e:10:40:d5:06:47:5d:19:ce:59:99:21:7e:
ff:c9:4a:d0:39:ef:e5:ce:0d:ed:6c:59:87:19:41:
62:ad:8e:18:3b:b0:30:3e:53:17:1b:d2:79:1d:50:
79:ae:d2:b7:90:47:ef:4f:14:8a:cf:1b:35:5f:6e:
ca:57:0d:30:20:5a:b2:6a:9e:08:0f:5e:52:94:d3:
e2:73:a1:db:14:47:86:77:4a:3a:74:7d:15:05:24:
22:ca:b0:63:f1:49:e9:7a:4d:72:d9:4c:5f:af:3c:
e3:27:2d:ce:64:09:ce:dc:ff:b5:df:80:ea:79:1e:
52:79:19:0b:4e:c3:0c:fa:98:36:df:29:7a:b7:60:
c5:6a:a6:d9:7e:36:4b:ca:a9:2d:2e:c6:6f:c6:b7:
1c:26:3f:21:8c:1b:e1:9f:d9:1b:27:f6:c7:9b:88:
39:8c:63:94:53:cc:74:00:a1:89:27:f4:3d:0b:e8:
e5:06:70:df:da:d3:a3:b5:19:3b:78:6f:33:82:90:
85:69:c2:64:5d:12:cc:1b:42:b5:41:d2:38:ef:e7:
38:a5:de:2e:10:c2:0a:b6:e6:6e:f3:ac:ed:f5:8e:
cf:ea:4d:82:94:7e:9b:45:8d:22:e0:25:59:e0:94:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:07:95:87:3F:A7:00:D0:24:DE:CD:2F:36:A3:FF:B5:88:19:55
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Re4HlYc_pwDQJN7NLzaj_7WIGVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
93.115.203.0/24
94.177.106.0/24
103.245.230.0/24
194.85.251.0/24
202.71.15.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ec:bf:ad:a0:8f:fb:31:1b:7c:c0:ea:95:66:93:f5:7f:93:
01:2e:91:6c:7e:a1:35:1e:e5:87:59:52:1b:53:2c:62:9d:80:
61:1b:9b:8d:05:27:76:7f:17:a8:2b:f9:bf:78:2c:ee:a1:84:
1d:07:58:3e:26:90:95:40:8a:f0:a7:64:86:dd:b3:d6:4d:b9:
5a:e9:79:26:63:ab:64:b7:5b:5e:b7:a6:e5:ea:88:6c:4f:72:
43:79:f0:27:b9:53:ba:18:43:82:99:d5:23:98:aa:2b:63:d3:
88:90:a5:f3:18:26:08:4a:19:c6:36:99:bc:e1:ca:a7:0e:94:
5c:52:6a:c9:7c:27:48:c9:01:1e:fe:59:d3:2a:68:bf:ac:50:
09:cb:01:ba:5c:c9:09:bc:b3:ef:2f:cb:00:1d:0a:ac:7c:94:
40:64:4d:9d:86:d7:57:3d:e6:4a:f6:95:6f:08:d6:62:51:5e:
89:ad:b5:48:5d:21:f3:e2:e4:48:8f:b8:c2:84:94:d7:f6:17:
7a:4a:da:b2:a0:e2:08:95:a6:41:49:0d:4b:f5:3b:a2:bf:8a:
c2:f8:25:45:6c:8c:e9:fe:fd:d4:e0:62:e0:1b:ab:7d:a5:49:
6d:cd:e3:98:f5:a2:0d:ac:6c:c6:8f:d2:a1:15:3e:a1:8d:cd:
20:3e:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:22 2025 by rpki-client