Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ll8FCUNTPlv_8JeGhu4KfdIYNO4.roa
File: ll8FCUNTPlv_8JeGhu4KfdIYNO4.roa (raw, json)
Hash identifier: fOl2WgTbZaDMLYgEZWHrOOv49g+ssfJth/6/Q0Pt+0Q=
Subject key identifier: 96:5F:05:09:43:53:3E:5B:FF:F0:97:86:86:EE:0A:7D:D2:18:34:EE
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0197F31107C187F21D1DC8CCB204A7D45AB5
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ll8FCUNTPlv_8JeGhu4KfdIYNO4.roa
Signing time: Thu 10 Jul 2025 06:41:08 +0000
ROA not before: Thu 10 Jul 2025 06:41:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41378
IP address blocks: 45.9.8.0/22 maxlen: 24
45.9.8.0/24 maxlen: 24
45.9.9.0/24 maxlen: 24
45.9.10.0/24 maxlen: 24
45.9.11.0/24 maxlen: 24
103.149.248.0/23 maxlen: 24
185.145.244.0/24 maxlen: 24
2a0e:aa00:100::/44 maxlen: 48
2a0e:aa00:110::/44 maxlen: 48
2a0e:aa00:120::/44 maxlen: 48
2a0e:aa00:130::/44 maxlen: 48
2a0e:aa00:140::/44 maxlen: 48
2a0e:aa00:200::/44 maxlen: 48
2a0e:aa00:210::/44 maxlen: 48
2a0e:aa00:220::/44 maxlen: 48
2a0e:aa00:230::/44 maxlen: 48
2a0e:aa00:300::/44 maxlen: 48
2a0e:aa00:310::/44 maxlen: 48
2a0e:aa00:aa00::/40 maxlen: 48
2a0e:aa02::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:11:07:c1:87:f2:1d:1d:c8:cc:b2:04:a7:d4:5a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jul 10 06:41:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=965f050943533e5bfff0978686ee0a7dd21834ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:f6:2f:6c:6d:d4:0d:c7:4b:53:74:b3:a7:
bc:35:34:6f:fd:dc:05:78:35:8f:a3:05:ed:7b:a5:
47:3b:23:95:16:c7:da:dd:c1:89:cd:15:1c:85:1e:
da:b7:ec:ab:2d:cd:a2:d8:ff:c5:bb:ae:09:f2:bb:
16:a9:fc:b8:22:db:24:85:e6:be:20:8f:60:d9:8a:
f6:55:06:7b:6e:5f:e1:d6:e0:6d:1d:54:a9:25:5e:
0c:81:c0:ae:20:60:fd:b3:a4:da:a6:df:f5:a3:78:
17:3a:0e:fd:bd:72:16:da:2b:f1:d5:9d:2c:7f:8b:
29:41:19:69:1c:39:9d:2d:b3:48:58:2f:46:a2:63:
ee:ae:10:18:6b:74:e1:6b:d0:01:93:6d:58:eb:e2:
49:67:27:0f:5d:35:e3:e1:af:7f:82:20:42:dd:c8:
52:ba:57:f0:a1:8e:3a:74:93:7c:99:91:34:a3:0e:
c2:8a:8b:51:78:c9:48:23:50:4b:94:3a:ed:2a:7f:
82:d0:60:bf:95:e0:f0:ce:ea:1b:ea:7f:97:b7:6e:
a9:16:47:87:15:fe:e8:68:66:51:84:16:57:7b:66:
cf:76:31:6f:d8:a9:d6:c7:62:7e:90:ff:96:3d:b7:
c5:51:c1:f2:ad:33:89:0d:af:b3:d4:d4:1d:af:cc:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:05:09:43:53:3E:5B:FF:F0:97:86:86:EE:0A:7D:D2:18:34:EE
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ll8FCUNTPlv_8JeGhu4KfdIYNO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.8.0/22
103.149.248.0/23
185.145.244.0/24
IPv6:
2a0e:aa00:100::-2a0e:aa00:14f:ffff:ffff:ffff:ffff:ffff
2a0e:aa00:200::/42
2a0e:aa00:300::/43
2a0e:aa00:aa00::/40
2a0e:aa02::/32
Signature Algorithm: sha256WithRSAEncryption
2a:ed:66:0b:23:43:16:74:4c:c8:c2:f6:55:89:07:75:8c:df:
9a:f9:7e:b7:42:b0:a5:bd:d3:52:b7:6b:f2:65:01:62:a4:70:
e9:2b:08:dc:d6:c8:0e:2b:c9:a1:e2:cb:b2:6c:af:92:13:e7:
3e:1d:85:8c:74:db:c8:52:a4:63:49:28:a3:18:05:08:f9:a9:
39:ae:3d:47:ef:c4:12:27:6f:d8:8a:24:c3:00:68:e9:af:a1:
eb:23:ba:35:c2:a7:a9:ab:1f:b6:99:0d:38:c5:27:79:e2:08:
aa:dc:df:4f:a9:6d:01:0a:59:23:56:ae:21:0a:12:c3:60:b0:
08:b9:1a:c3:82:0f:83:58:4a:01:f3:66:d4:d8:ae:e3:5d:e9:
06:80:d8:ba:e6:07:d6:c9:62:8f:2b:71:b4:46:9f:47:d2:df:
54:33:74:a4:fb:aa:02:a1:ce:cc:cb:9c:fd:65:a0:95:01:9c:
6a:8a:4e:55:ec:3c:96:34:2d:02:68:0d:1e:04:c5:6c:09:be:
0c:cf:38:e3:67:ad:f0:4c:81:40:06:ac:82:55:4f:28:35:c0:
1a:af:8c:54:49:72:ef:46:f6:ac:05:f2:24:5a:3c:76:4d:c4:
91:15:a1:eb:2b:21:ab:76:9b:84:f2:af:35:af:b8:fe:a7:27:
fc:8d:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:13 2025 by rpki-client