Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lC_Bv7HgMSDJXxkWVG9aiJ2qRWQ.roa
File: lC_Bv7HgMSDJXxkWVG9aiJ2qRWQ.roa (raw, json)
Hash identifier: u6VkZ+CEC3xGcz/0Vb6iEcsDQ2v5oU337WBtlIwVdZE=
Subject key identifier: 94:2F:C1:BF:B1:E0:31:20:C9:5F:19:16:54:6F:5A:88:9D:AA:45:64
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198A827EAD5C62B7541F0EE32216A2096E7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lC_Bv7HgMSDJXxkWVG9aiJ2qRWQ.roa
Signing time: Thu 14 Aug 2025 10:37:24 +0000
ROA not before: Thu 14 Aug 2025 10:37:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:27:ea:d5:c6:2b:75:41:f0:ee:32:21:6a:20:96:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 14 10:37:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942fc1bfb1e03120c95f1916546f5a889daa4564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:46:8c:93:66:04:9f:2b:1c:13:a3:bb:7e:
8e:f0:56:04:db:26:54:e6:de:16:6d:ab:e1:2a:ad:
73:a9:a0:c5:6f:c5:01:1c:03:6d:58:18:20:2b:6b:
e3:b2:ca:5e:37:ca:82:17:22:92:1c:08:54:0a:44:
5a:e3:72:8c:80:1e:5f:01:a6:91:43:c1:58:8c:2a:
47:37:2a:79:1d:ac:2b:b6:53:4d:78:b4:0e:b0:1e:
81:c0:12:e3:b0:11:b4:08:f1:19:46:ed:39:de:71:
49:56:c5:bd:66:21:79:3b:6e:c9:a5:73:99:50:3e:
7b:5d:f3:9c:0f:a9:97:00:ee:41:5b:68:f7:f0:3a:
3b:63:55:a7:07:11:5f:37:88:ef:2b:54:79:ca:1b:
db:4d:21:0a:e6:be:b1:32:71:8f:eb:d6:14:cc:9f:
cc:2a:1f:aa:b2:19:25:08:b7:3a:63:e8:10:5d:62:
5d:52:25:18:74:b5:c6:46:d5:c0:ad:6a:c3:e8:ee:
4b:f8:37:c9:11:18:f7:64:46:42:6b:f1:8a:47:6a:
1f:64:ab:c2:4b:57:72:ec:0f:c4:74:d3:5e:c3:73:
37:52:45:f3:e5:94:f6:a2:4b:4a:49:d4:96:9d:82:
67:68:92:2d:f7:ae:c6:86:e5:2a:ff:a1:87:70:ae:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2F:C1:BF:B1:E0:31:20:C9:5F:19:16:54:6F:5A:88:9D:AA:45:64
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lC_Bv7HgMSDJXxkWVG9aiJ2qRWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.50.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
103.56.84.0/24
167.17.178.0/23
167.17.181.0/24
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:6f:d9:70:63:ef:4b:43:c9:b8:6f:7c:70:1c:42:18:2d:f2:
cd:a1:a2:6d:45:9e:ca:bf:50:cf:f4:05:de:e8:2e:ee:db:aa:
a2:49:a4:45:b7:5d:d1:15:ff:d1:2e:60:a4:bc:43:52:4c:15:
c4:2f:0a:25:76:d9:f6:4a:52:de:3e:d2:99:bb:0e:83:de:ac:
07:43:f6:1e:20:38:07:93:81:46:7e:65:74:d8:15:11:7d:73:
1a:fd:84:51:d1:83:27:88:9c:3d:90:1c:56:fb:1f:26:91:b9:
3f:49:ee:3b:92:ea:15:ce:cd:35:2d:4c:a8:bd:4a:42:3d:75:
1f:1e:5c:b4:eb:58:e6:f1:af:ba:66:b9:92:31:a5:8b:ae:6e:
66:79:ee:0e:f0:5a:11:2d:3d:2d:20:78:6c:b4:98:a5:1f:d7:
07:a8:0f:38:01:c6:ba:7d:a0:7c:99:02:c8:e1:49:94:02:68:
92:e7:b8:6f:6a:77:3c:8a:45:32:a0:1a:32:78:eb:d4:05:dd:
3c:b1:e6:ea:ef:91:76:50:5d:c9:2e:1b:fc:b6:5d:ae:88:cc:
3f:ec:29:98:51:4b:a2:7b:bc:47:d0:9f:f2:60:31:30:31:b4:
7e:69:05:47:1a:19:92:94:51:79:43:9b:e2:6c:e9:62:7f:7d:
6e:f8:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:57:53 2025 by rpki-client