Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/im9G3vS0k47RgPfIpas56TSYtkk.roa
File: im9G3vS0k47RgPfIpas56TSYtkk.roa (raw, json)
Hash identifier: pZ2iLKA7r+EiY8r8ECrplg1OXK8MBjBC9bzHQ9geb7I=
Subject key identifier: 8A:6F:46:DE:F4:B4:93:8E:D1:80:F7:C8:A5:AB:39:E9:34:98:B6:49
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019735AAC2F8EEF6C9F83677E503334BBBD2
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/im9G3vS0k47RgPfIpas56TSYtkk.roa
Signing time: Tue 03 Jun 2025 12:01:12 +0000
ROA not before: Tue 03 Jun 2025 12:01:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.66.132.0/24 maxlen: 24
45.66.135.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.90.140.0/24 maxlen: 24
45.128.152.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
89.31.124.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
152.89.210.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.224.0/24 maxlen: 24
185.167.117.0/24 maxlen: 24
185.167.118.0/24 maxlen: 24
185.167.119.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.171.123.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
185.187.236.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
192.54.59.0/24 maxlen: 24
193.37.56.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
193.38.136.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
194.156.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:aa:c2:f8:ee:f6:c9:f8:36:77:e5:03:33:4b:bb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jun 3 12:01:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a6f46def4b4938ed180f7c8a5ab39e93498b649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:90:55:0b:c9:85:48:5e:df:33:86:3b:f9:
3e:7d:36:a4:4d:8c:82:78:7e:ac:75:ca:b4:b3:f4:
ea:92:27:02:ff:8f:a5:11:07:1b:da:44:32:8b:17:
de:5d:30:66:84:f0:3b:5d:cb:7b:fc:88:f0:6a:30:
57:a3:30:00:50:94:0b:ba:b5:25:08:c1:30:43:51:
96:b8:16:cd:74:bd:f1:aa:0b:7c:ed:95:f0:ae:d5:
b0:e4:39:55:04:b6:cb:16:dc:80:f6:38:d9:db:b4:
72:55:89:23:24:c9:e3:c9:c9:b8:8a:61:80:02:60:
c6:6c:dd:88:9e:e1:48:06:fe:89:69:3f:99:91:02:
18:14:23:03:bc:a4:74:d1:b0:57:5d:78:e8:49:20:
be:99:31:fe:fe:2f:44:e4:29:f4:69:ec:af:d7:3d:
eb:19:59:fa:11:32:5e:95:79:27:e7:70:1c:6b:ab:
b6:d4:4c:8a:44:3c:92:e9:62:3e:ab:ff:37:ab:d7:
e8:c6:cc:3f:85:a6:72:6a:0e:c2:e1:db:7c:57:4c:
f2:3e:ac:76:3c:17:65:dd:84:3a:33:b1:18:c2:86:
11:64:ad:60:8c:1e:2a:45:dd:e5:f0:78:e7:f1:0d:
18:9e:da:43:6c:69:0b:f5:bb:91:5c:17:1c:71:0a:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:46:DE:F4:B4:93:8E:D1:80:F7:C8:A5:AB:39:E9:34:98:B6:49
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/im9G3vS0k47RgPfIpas56TSYtkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.132.0/24
45.66.135.0/24
45.82.165.0/24
45.85.2.0/24
45.90.140.0/24
45.128.152.0/24
45.134.18.0/24
45.144.242.0/23
89.31.124.0/24
91.220.202.0/23
147.78.14.0/24
152.89.210.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.224.0/24
185.167.117.0-185.167.119.255
185.171.122.0/23
185.172.114.0/24
185.175.142.0/23
185.187.236.0/24
188.119.102.0/24
192.54.58.0/23
193.37.56.0/23
193.38.136.0/24
194.124.32.0/24
194.156.229.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:db:31:b9:cf:d0:d4:59:8b:c6:dc:09:b0:55:60:93:10:
ba:f7:ab:ea:f2:de:c7:d0:3f:f2:be:73:61:83:2c:75:75:b7:
f5:56:f8:e9:8d:9a:85:55:87:61:d1:c1:c7:4f:3d:2a:ba:cf:
ac:35:a4:13:3b:cc:13:bc:37:47:1f:12:66:07:1a:20:5f:2f:
de:b0:cb:4a:3b:29:3b:09:4d:74:47:c7:2c:4c:83:00:d4:f7:
52:7d:2d:45:5c:cb:85:4c:16:0d:14:b1:4d:3b:d0:76:87:05:
ee:ec:0a:fe:3b:6a:41:d1:18:4e:b1:74:62:2c:07:98:ec:c2:
7c:77:69:16:e1:b0:40:70:f0:99:ea:2c:60:19:36:1e:d3:0b:
0a:62:b3:b7:da:bf:6e:3a:fa:bf:2a:cf:c5:39:f5:11:4f:bd:
39:3e:25:9c:d9:fb:ee:14:af:d6:23:3b:eb:f0:9d:a0:69:95:
5f:3a:21:f5:0b:c8:f2:2f:25:34:68:9e:5c:19:49:1e:d8:e5:
b9:bb:d9:8b:c9:e3:a7:24:0d:a6:8a:ea:db:49:c7:03:d2:5a:
80:81:83:be:91:fa:67:5a:45:fd:dd:f9:09:39:fd:ff:fe:07:
89:4b:2c:48:db:fa:d8:93:66:a0:34:f7:77:e1:ed:50:16:b0:
14:51:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:14:36 2025 by rpki-client