Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9bED-oaJ79FfYYBBiEt3LnzkWRI.roa
File: 9bED-oaJ79FfYYBBiEt3LnzkWRI.roa (raw, json)
Hash identifier: 73duG0wBiX4kdz1yRYzg5PjAYuFWSzFd39sFtln+CGI=
Subject key identifier: F5:B1:03:FA:86:89:EF:D1:5F:61:80:41:88:4B:77:2E:7C:E4:59:12
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019A02ECC7680C70D48084014AE29165D561
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9bED-oaJ79FfYYBBiEt3LnzkWRI.roa
Signing time: Mon 20 Oct 2025 18:41:03 +0000
ROA not before: Mon 20 Oct 2025 18:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.137.155.0/24 maxlen: 24
45.153.229.0/24 maxlen: 24
45.153.230.0/24 maxlen: 24
193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:ec:c7:68:0c:70:d4:80:84:01:4a:e2:91:65:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 20 18:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5b103fa8689efd15f618041884b772e7ce45912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:69:a3:69:35:a8:c5:f0:f4:f3:04:92:e1:
7d:35:da:0a:cb:f9:81:62:6a:f0:e6:dc:39:6c:51:
ee:1a:61:68:5c:c9:7a:d2:31:f0:1b:aa:f3:f9:4b:
53:aa:7c:f9:27:2f:fb:c5:0d:3b:a5:78:24:08:36:
34:d7:c6:0e:ea:40:7b:0e:96:dd:63:f2:ce:f1:c1:
03:cd:87:5b:aa:77:65:a8:21:d2:41:d2:a1:4a:4a:
0b:18:46:6b:6a:98:f4:24:12:b1:5f:b6:37:2c:e8:
84:1f:05:28:10:26:b6:e7:7c:0c:4d:a2:7c:0c:b6:
24:d7:78:36:78:63:0a:89:02:35:59:32:22:6c:a9:
c4:3c:92:1f:d8:71:03:96:ca:2a:44:32:0e:2d:b9:
23:8f:cd:e2:df:c3:8d:4d:ac:81:ca:61:af:2d:1a:
21:e5:62:cf:a4:e2:42:78:bb:ee:81:bf:30:40:21:
51:25:12:97:37:86:87:8f:5d:33:0a:8d:8c:31:3f:
33:02:65:00:5c:35:6e:09:4c:cc:ea:3a:cf:d0:72:
d6:f8:92:58:b0:2d:79:ea:03:88:ec:9c:71:46:21:
c1:27:d9:0f:2e:cf:62:0f:2d:98:9d:ce:c5:0d:be:
54:1f:96:9c:39:a2:46:dc:8f:9a:1f:f8:00:e2:67:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:03:FA:86:89:EF:D1:5F:61:80:41:88:4B:77:2E:7C:E4:59:12
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/9bED-oaJ79FfYYBBiEt3LnzkWRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.155.0/24
45.153.229.0-45.153.230.255
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
71:52:33:aa:4b:fe:bb:a4:21:43:ae:38:e9:dd:fa:70:4f:fc:
6a:a2:c7:16:1d:35:d1:ec:a6:3d:f0:62:f2:56:dc:d7:47:55:
d6:3a:4d:69:bb:7a:b6:9f:87:49:d4:34:64:c8:83:2b:02:b2:
54:b0:6a:50:1d:17:4e:5a:0f:20:b5:74:4a:ee:6e:ee:8a:40:
6f:e4:b8:7c:75:f9:38:5b:0a:f7:a6:06:e1:b3:9c:fd:d6:c4:
77:25:f6:3f:b2:82:8a:8f:94:8b:6e:09:c6:f5:4d:28:fc:50:
35:e7:ea:c4:2c:5d:bf:dc:c4:3c:62:96:76:c3:1b:07:64:2a:
33:7e:d7:b6:e6:3d:c8:bd:35:6e:4e:17:d7:d9:2c:0f:cd:b7:
8e:8d:ef:96:4f:a4:d6:3f:0c:e0:1a:5a:e2:9e:32:c3:33:ed:
d5:5e:63:6d:03:5f:11:6a:d5:02:e9:e7:f7:0f:98:f4:fd:a4:
32:71:ad:69:d7:23:ca:30:fc:21:67:af:4f:b4:55:cf:bf:b0:
1c:9c:1b:be:eb:0c:28:0b:7c:68:5b:83:a1:71:f2:15:67:ae:
df:ed:d2:64:58:66:10:92:3a:df:61:2a:cd:08:77:68:25:80:
9d:33:f6:fe:b1:90:63:f5:db:b7:4c:51:72:50:a3:2d:e9:2c:
c6:cd:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:34:15 2025 by rpki-client