Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hSEhodnCrkY2w3Hf74s92zx-YE4.roa
File: hSEhodnCrkY2w3Hf74s92zx-YE4.roa (raw, json)
Hash identifier: kFGopJSi6r2svMsiKxZfxQI2khSJbl3H2ncDmRUYjBo=
Subject key identifier: 85:21:21:A1:D9:C2:AE:46:36:C3:71:DF:EF:8B:3D:DB:3C:7E:60:4E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01973B867952F277A85483E17A45EA4E509B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hSEhodnCrkY2w3Hf74s92zx-YE4.roa
Signing time: Wed 04 Jun 2025 15:19:18 +0000
ROA not before: Wed 04 Jun 2025 15:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.86.244.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.154.228.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
2a0f:8100::/29 maxlen: 29
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:86:79:52:f2:77:a8:54:83:e1:7a:45:ea:4e:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 4 15:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=852121a1d9c2ae4636c371dfef8b3ddb3c7e604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:59:60:9a:78:4b:08:0e:43:74:33:9e:9a:
0f:b6:e7:98:a7:28:d2:35:08:9f:17:f3:21:1e:82:
96:88:5a:7b:a0:30:cd:b9:67:a8:f9:ce:7e:cd:e6:
5c:68:dc:15:71:b8:26:b6:1e:7b:d6:50:a7:f3:df:
e3:20:ab:1a:f0:34:5b:e6:de:11:0c:0b:38:36:fd:
a2:25:c2:f8:b5:f9:3b:a9:36:a3:61:6e:93:7d:de:
75:f1:13:d6:14:bb:8b:3e:33:a7:d8:1b:b5:1c:8f:
55:da:cd:ec:3c:6e:a3:28:86:5d:d6:e5:1e:fd:17:
96:2d:dd:87:46:8c:88:4f:ed:41:f6:93:2a:4d:5c:
11:24:30:18:e0:6b:30:a1:2d:12:ff:e7:a5:78:c8:
c1:27:c6:93:97:78:a0:1d:44:f3:1a:84:f3:f4:44:
e6:9d:24:92:01:56:75:7d:a3:f7:0a:91:0f:9e:e0:
df:49:4b:22:a3:17:a0:6a:53:b1:62:87:b4:a2:93:
52:c4:b4:23:46:a1:e9:66:f8:d0:51:8f:d5:37:3b:
d7:d3:7c:11:01:ec:1c:d2:6a:0d:12:b3:a7:6f:59:
b5:d5:04:ed:4a:31:77:04:11:fc:c9:e6:9b:70:d7:
b9:e1:26:8b:9b:ae:ab:f4:06:67:a3:e2:08:f9:4e:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:21:A1:D9:C2:AE:46:36:C3:71:DF:EF:8B:3D:DB:3C:7E:60:4E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hSEhodnCrkY2w3Hf74s92zx-YE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.244.0/24
45.94.47.0/24
45.95.97.0/24
45.130.128.0/24
45.134.184.0/24
45.151.104.0/24
45.154.58.0/24
45.154.228.0/24
85.209.130.0/24
185.164.59.0/24
192.156.217.0/24
193.8.1.0/24
193.39.245.0/24
193.254.234.0/24
194.62.30.0/24
194.62.66.0/24
195.66.26.0/24
IPv6:
2a0f:8100::/29
2a0f:e7c4:10::/48
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
06:e3:6d:dc:6b:24:3f:08:e6:02:f5:d4:a5:1e:d1:02:4d:25:
4d:a2:e4:68:54:51:24:6f:3c:51:0e:99:de:7a:c2:2b:83:88:
e5:a5:39:39:fc:79:05:d3:ef:d0:be:23:1e:aa:da:45:07:4b:
6f:cf:f5:f0:49:89:72:7c:dc:d5:e9:ea:ef:3f:c9:da:5c:6e:
c8:cf:2f:7d:6e:f5:0f:6f:7a:da:35:03:5b:9e:55:ea:cb:c2:
cf:55:72:8d:0a:cd:e5:23:f0:d8:2c:ce:9d:ff:57:8c:07:5f:
eb:c5:9a:fb:24:66:83:5b:35:31:c2:00:4a:57:32:63:23:bf:
bd:d1:7b:f3:46:2e:7d:de:a6:7e:b3:f5:5e:36:cf:11:18:b0:
69:9a:d6:a0:bf:32:c7:2e:b4:49:9a:e8:8a:ad:9f:eb:c5:de:
5f:84:2d:fd:ca:d4:4c:ca:1e:60:db:18:40:c7:53:74:a2:ef:
07:11:34:3a:0a:d7:f5:c7:3c:48:6b:0a:b3:12:7c:31:eb:af:
a2:a5:0f:6e:9a:d7:2f:5a:10:03:5d:10:88:a0:46:61:61:9e:
4d:4b:3e:f6:af:5e:eb:a0:26:47:d9:c8:a6:ee:ff:78:00:9c:
fa:f8:71:39:26:72:41:a1:64:37:f8:aa:12:3a:02:34:c8:b7:
61:a5:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:12 2025 by rpki-client