Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/loGwdJQePgrE-kz5HQkg1HKfbcg.roa
File: loGwdJQePgrE-kz5HQkg1HKfbcg.roa (raw, json)
Hash identifier: aYT2GHXTlQVxS+Nx7xtsazOoRGYi4xsyqat4xD3gwsM=
Subject key identifier: 96:81:B0:74:94:1E:3E:0A:C4:FA:4C:F9:1D:09:20:D4:72:9F:6D:C8
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0199C4ACB9730A277FFF3495189670E7868B
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/loGwdJQePgrE-kz5HQkg1HKfbcg.roa
Signing time: Wed 08 Oct 2025 16:34:37 +0000
ROA not before: Wed 08 Oct 2025 16:34:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.66.135.0/24 maxlen: 24
45.67.53.0/24 maxlen: 24
45.67.55.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.90.140.0/24 maxlen: 24
45.128.152.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
81.90.190.0/24 maxlen: 24
89.31.124.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
152.89.210.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.224.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
185.167.117.0/24 maxlen: 24
185.167.118.0/24 maxlen: 24
185.167.119.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.171.123.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
185.187.236.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.56.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
192.54.59.0/24 maxlen: 24
193.37.56.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
193.38.136.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
194.156.229.0/24 maxlen: 24
2a0c:8a40:2::/48 maxlen: 48
2a0c:8a41:a300::/64 maxlen: 64
2a0c:8a47::/32 maxlen: 32
2a0c:8a47::/36 maxlen: 36
2a0c:8a47:1000::/36 maxlen: 36
2a0c:8a47:2000::/36 maxlen: 36
2a0c:8a47:3000::/36 maxlen: 36
2a0c:8a47:4000::/36 maxlen: 36
2a0c:8a47:5000::/36 maxlen: 36
2a0c:8a47:6000::/36 maxlen: 36
2a0c:8a47:7000::/36 maxlen: 36
2a0c:8a47:8000::/36 maxlen: 36
2a0c:8a47:9000::/36 maxlen: 36
2a0c:8a47:a000::/36 maxlen: 36
2a0c:8a47:b000::/36 maxlen: 36
2a0c:8a47:c000::/36 maxlen: 36
2a0c:8a47:d000::/36 maxlen: 36
2a0c:8a47:e000::/36 maxlen: 36
2a0c:8a47:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:ac:b9:73:0a:27:7f:ff:34:95:18:96:70:e7:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Oct 8 16:34:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9681b074941e3e0ac4fa4cf91d0920d4729f6dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:e0:01:84:aa:f8:25:90:42:13:bc:13:ed:
92:87:fc:7f:fd:f9:13:cc:24:21:b9:d2:8c:39:79:
d3:c6:81:06:9d:ab:d0:00:e5:ca:08:54:58:5b:6f:
68:2e:0f:17:f2:61:ae:dd:f9:04:dd:5d:b4:6f:a1:
9b:99:3a:45:06:fb:86:68:bc:76:c2:16:a4:0c:0e:
64:ab:46:77:5d:6c:3f:a8:fa:d0:07:a4:99:b5:14:
03:0e:8a:ee:9b:d3:f1:82:ce:e5:d1:81:29:d1:14:
53:1b:be:89:64:37:a4:c2:12:a0:e9:70:47:05:11:
ea:bb:d2:b2:c6:e2:2f:c2:75:21:99:c3:81:c5:ba:
6d:8f:61:41:2e:50:fb:b3:29:2a:2e:43:1d:e7:cf:
ab:c6:e8:bd:1b:90:38:62:83:ad:62:7c:be:c8:d5:
52:78:05:7c:34:2f:dd:93:42:3e:b2:09:99:c7:84:
b5:52:92:34:ac:18:05:96:3b:2e:65:e5:18:f6:67:
bd:8e:c1:e6:24:96:25:4a:1c:f4:7f:1a:13:63:3a:
47:c0:57:3e:ae:17:57:71:59:bd:ed:84:05:96:41:
37:c4:25:b4:0b:82:de:0a:a4:e0:99:09:fd:9d:de:
a5:2a:2e:9a:13:eb:8d:96:ce:7a:a3:06:ff:7e:fd:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:B0:74:94:1E:3E:0A:C4:FA:4C:F9:1D:09:20:D4:72:9F:6D:C8
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/loGwdJQePgrE-kz5HQkg1HKfbcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.135.0/24
45.67.53.0/24
45.67.55.0/24
45.82.165.0/24
45.85.2.0/24
45.90.140.0/24
45.128.152.0/24
45.134.18.0/24
45.144.242.0/23
81.90.190.0/24
89.31.124.0/24
91.220.202.0/23
147.78.14.0/24
152.89.210.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.224.0/24
185.126.227.0/24
185.167.117.0-185.167.119.255
185.171.122.0/23
185.172.114.0/24
185.175.142.0/23
185.187.236.0/24
188.119.102.0/24
192.54.56.0/24
192.54.58.0/23
193.37.56.0/23
193.38.136.0/24
194.124.32.0/24
194.156.229.0/24
IPv6:
2a0c:8a40:2::/48
2a0c:8a41:a300::/64
2a0c:8a47::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c3:38:d2:9d:77:7d:35:37:11:1c:2a:48:58:dd:eb:f0:ff:
2d:01:67:e3:04:39:8e:c6:0c:b0:f5:50:f7:52:4a:6f:f2:8d:
4e:29:06:22:fc:15:fc:2b:1f:8f:ff:a9:c0:55:41:c5:d4:a3:
7b:e8:13:f3:6c:d4:2d:ea:fe:42:55:c4:c5:93:68:d0:91:f7:
a1:2e:0c:33:e3:0a:2b:d0:46:8c:e2:67:d9:a2:f4:13:69:9e:
06:75:3c:9a:95:8c:e7:c8:c0:96:e2:21:12:9f:80:ac:d4:68:
2b:e8:0f:b2:08:9a:bd:2f:80:fc:8b:37:54:66:24:3b:74:f0:
f2:60:fd:5e:92:11:22:3c:7c:23:6c:f3:06:fb:36:09:35:5b:
77:bc:44:e4:92:19:13:3b:7c:bb:ad:5c:6e:3e:6a:ed:f5:16:
34:00:f1:68:77:67:fc:bf:c7:2e:e5:5d:22:f0:72:62:df:ec:
17:ae:a0:a4:c7:b6:a1:56:d1:78:b8:00:36:a6:59:90:1f:3f:
b7:09:68:14:48:97:31:58:c7:c3:ec:e6:1d:2e:c4:c2:bf:bf:
6d:ac:65:75:f6:0b:68:4f:d1:33:66:03:13:3a:f3:c3:05:da:
da:16:da:5a:fb:1a:28:b0:b3:58:10:06:b5:54:dd:c6:66:98:
ff:52:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:47 2025 by rpki-client