Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa
File: s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa (raw, json)
Hash identifier: WTVc9DfWoK4a3bzz5sw4kY8+A2sS9+yOsYCNmAmV+gs=
Subject key identifier: B3:62:DB:97:75:29:C6:59:81:71:74:C8:F1:85:E9:B1:3A:9B:18:D7
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 019711AF5E71E6552B22B86AC4B119F74231
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa
Signing time: Tue 27 May 2025 12:19:54 +0000
ROA not before: Tue 27 May 2025 12:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21056
IP address blocks: 45.84.140.0/22 maxlen: 32
45.143.36.0/22 maxlen: 32
45.151.12.0/22 maxlen: 32
45.151.64.0/22 maxlen: 32
46.44.192.0/18 maxlen: 32
78.152.96.0/19 maxlen: 32
79.135.32.0/19 maxlen: 32
80.93.128.0/20 maxlen: 32
83.137.56.0/21 maxlen: 24
87.232.160.0/19 maxlen: 24
87.247.232.0/21 maxlen: 32
91.143.192.0/20 maxlen: 32
94.138.160.0/19 maxlen: 32
103.26.124.0/22 maxlen: 22
103.43.232.0/22 maxlen: 22
103.61.184.0/22 maxlen: 22
103.248.184.0/22 maxlen: 24
103.248.186.0/24 maxlen: 24
109.122.208.0/21 maxlen: 21
144.48.192.0/22 maxlen: 32
185.125.64.0/22 maxlen: 22
185.158.116.0/22 maxlen: 32
185.170.36.0/22 maxlen: 32
185.224.60.0/22 maxlen: 32
185.224.104.0/22 maxlen: 32
185.230.92.0/22 maxlen: 32
185.230.192.0/22 maxlen: 32
185.230.232.0/22 maxlen: 32
185.231.160.0/22 maxlen: 32
185.234.164.0/22 maxlen: 32
185.241.20.0/22 maxlen: 32
188.240.32.0/22 maxlen: 22
193.124.240.0/22 maxlen: 22
194.58.216.0/22 maxlen: 22
213.182.64.0/19 maxlen: 32
2a00:14f8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:af:5e:71:e6:55:2b:22:b8:6a:c4:b1:19:f7:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: May 27 12:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b362db977529c659817174c8f185e9b13a9b18d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:f9:48:a8:f8:22:33:32:7b:ea:aa:7f:81:
40:9c:bc:af:8e:f6:6d:7a:14:b9:de:41:a7:c2:c4:
a4:64:04:8e:f9:0b:d6:e3:e0:79:dc:e2:2e:27:8b:
51:2e:80:df:89:93:a0:9c:3b:49:b6:86:e0:c5:22:
23:87:1a:88:f0:ff:91:64:3f:e2:57:eb:af:73:76:
fe:78:bb:35:ae:0b:eb:42:ef:cd:2e:f4:b6:c9:07:
4f:07:30:51:f3:7d:38:ea:3c:0f:4f:6c:a4:c5:a4:
db:e1:2a:59:1f:e0:aa:a7:3f:a1:a2:52:f0:f8:c4:
de:1e:81:d3:36:a9:c9:b1:02:09:70:a2:56:34:27:
d7:48:2b:20:46:33:5f:d3:e8:00:62:dc:34:56:4e:
44:10:93:a4:ef:a7:d4:b4:d0:c9:09:54:66:c5:b6:
65:a7:72:9c:98:74:95:70:c3:5e:21:90:4c:55:69:
dd:a2:6a:3d:64:38:30:8a:99:fc:26:18:75:5f:2f:
fe:b9:16:8f:c3:2b:c0:3f:13:0a:f8:b7:63:1a:7e:
85:43:2c:b1:50:de:82:91:b3:2a:84:f3:04:14:43:
e0:9f:7a:83:a7:b9:e1:f0:fc:51:88:a0:9e:4b:9d:
a2:47:6e:e6:e5:b0:3a:12:25:28:c5:5e:84:60:62:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:DB:97:75:29:C6:59:81:71:74:C8:F1:85:E9:B1:3A:9B:18:D7
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.140.0/22
45.143.36.0/22
45.151.12.0/22
45.151.64.0/22
46.44.192.0/18
78.152.96.0/19
79.135.32.0/19
80.93.128.0/20
83.137.56.0/21
87.232.160.0/19
87.247.232.0/21
91.143.192.0/20
94.138.160.0/19
103.26.124.0/22
103.43.232.0/22
103.61.184.0/22
103.248.184.0/22
109.122.208.0/21
144.48.192.0/22
185.125.64.0/22
185.158.116.0/22
185.170.36.0/22
185.224.60.0/22
185.224.104.0/22
185.230.92.0/22
185.230.192.0/22
185.230.232.0/22
185.231.160.0/22
185.234.164.0/22
185.241.20.0/22
188.240.32.0/22
193.124.240.0/22
194.58.216.0/22
213.182.64.0/19
IPv6:
2a00:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
2b:c6:d6:ef:f3:34:f8:84:9f:97:bf:a4:8f:da:c4:95:a2:29:
31:8a:1e:54:59:58:00:f4:db:85:83:b5:77:a0:73:0c:8b:9b:
67:e1:40:3f:f0:ff:e6:bd:63:87:9e:07:09:e9:78:fe:6f:99:
78:9c:b0:ff:50:e7:39:e4:4c:ba:55:a2:86:11:60:41:1f:77:
6f:f5:c5:4f:9b:f8:fe:1c:9b:14:50:55:d6:ff:ef:63:7e:f5:
f6:e5:4b:32:2f:c1:56:eb:fc:0a:db:71:b1:0d:e6:d1:9c:69:
89:5f:30:1d:81:6c:78:62:3e:58:fa:d0:6c:f0:db:52:b1:ef:
ed:d8:60:c3:9c:15:57:2b:52:d0:00:51:62:14:a1:5f:b6:48:
49:21:a5:f3:18:c0:d7:dc:31:b8:15:a4:31:c0:67:0e:92:f1:
4c:b5:76:27:bf:de:54:c4:0e:38:93:ae:74:97:29:56:bb:b9:
b4:6d:82:e1:b3:ce:75:36:4f:c9:f8:9d:17:fa:77:14:ee:aa:
72:f9:f0:7f:86:85:9a:62:69:62:fa:16:60:04:6c:ea:7d:1c:
78:60:47:39:a5:9d:a6:9a:90:03:88:8f:5c:7a:38:55:f7:80:
be:7a:eb:21:ac:7e:8f:5b:ea:b0:73:ba:d8:ac:f5:d9:5c:96:
fc:21:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:38 2025 by rpki-client