Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VJXjZKylKMeLKOw1rEDeteXfPZ0.roa
File: VJXjZKylKMeLKOw1rEDeteXfPZ0.roa (raw, json)
Hash identifier: 1RJFsUcGs79QVK33vSYChAFvZ0zsnCS4pt2Cc2P45VY=
Subject key identifier: 54:95:E3:64:AC:A5:28:C7:8B:28:EC:35:AC:40:DE:B5:E5:DF:3D:9D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019A0CCF4BCE2BD991E816A46DDBC0B8C6FC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VJXjZKylKMeLKOw1rEDeteXfPZ0.roa
Signing time: Wed 22 Oct 2025 16:45:03 +0000
ROA not before: Wed 22 Oct 2025 16:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:cf:4b:ce:2b:d9:91:e8:16:a4:6d:db:c0:b8:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 22 16:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5495e364aca528c78b28ec35ac40deb5e5df3d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:5c:2e:0d:fe:67:f7:a4:a3:ee:be:b1:21:
9f:db:71:6f:37:65:ac:da:1a:2f:c7:30:5f:aa:95:
8f:73:6d:b3:6f:52:aa:09:5a:ac:99:ab:22:ca:d9:
27:e2:f4:2b:92:56:ac:90:5e:3c:55:cd:b1:07:80:
18:27:32:0c:32:ac:12:2a:3e:f0:d1:61:b6:fa:f0:
68:8d:0b:6f:7e:66:1b:84:77:57:21:5e:41:ff:b0:
cd:f1:f3:f9:cc:13:01:a9:9f:54:20:42:4f:60:f9:
d6:43:1e:cd:e7:50:72:87:38:b3:01:51:48:3d:b1:
82:dd:45:d0:c7:ca:28:f3:44:2d:5a:e3:71:e6:d4:
07:53:e5:31:a9:57:4a:99:32:9f:cb:ea:51:95:b4:
a4:ab:99:19:ca:8d:77:73:34:82:11:cf:57:e6:10:
38:1f:ce:40:90:af:df:9c:4c:3c:da:94:b2:c2:18:
8a:32:11:bd:02:54:cd:ce:a1:48:4f:95:6c:c7:eb:
36:fb:b9:2d:6d:88:da:ca:d4:ee:40:03:3e:1b:fd:
53:64:88:44:3b:8b:07:d7:d2:db:a2:25:ad:1a:42:
06:2b:79:ed:f5:9d:b7:37:c5:e0:09:42:45:1d:3e:
a1:aa:f7:23:a6:10:fa:f4:a7:21:ba:5b:f2:bf:d4:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:E3:64:AC:A5:28:C7:8B:28:EC:35:AC:40:DE:B5:E5:DF:3D:9D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VJXjZKylKMeLKOw1rEDeteXfPZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
62.192.152.0/24
77.81.182.0/24
89.34.106.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.107.0/24
93.118.36.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a0:a1:de:c8:da:14:3d:9c:d6:bc:31:3c:e1:14:23:43:62:
3a:03:f6:b8:8e:3b:5f:44:89:8c:4c:69:16:be:01:c7:5e:13:
ac:e2:6b:f6:cb:d6:a9:8d:f5:d5:c8:75:ed:fc:7a:b0:bf:29:
9f:73:7a:cf:19:e8:50:db:43:ab:c4:4b:25:3b:3a:a9:12:b9:
fe:f8:85:a2:b0:c4:3a:fb:64:e5:6a:6e:12:28:78:b9:8d:9b:
95:11:62:d2:d8:34:02:3c:0e:2a:f2:6a:65:37:7f:98:15:05:
53:57:25:42:66:d5:be:e5:db:69:7e:fc:77:a0:06:05:46:04:
7b:b8:65:5f:ff:cd:83:dc:dc:66:4b:22:0f:15:77:32:42:6b:
df:eb:13:65:3b:c6:7a:d3:81:74:d6:10:be:2d:34:99:8e:71:
f9:b8:b5:04:c9:e9:59:12:5a:ae:53:2c:7a:66:0f:18:1a:ad:
e5:92:cb:3e:97:8e:07:de:75:ce:44:20:fe:8c:cb:16:f8:6a:
4f:40:28:c7:49:12:3d:6b:0a:35:1f:02:24:b9:d1:38:ca:31:
94:ed:db:5d:ce:8b:b6:42:53:a5:67:73:6b:0d:9d:4c:05:a0:
55:34:96:ee:fa:de:70:74:10:65:92:08:d0:d2:f6:63:41:22:
73:90:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:18:53 2025 by rpki-client