Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ofN6v_gRAPmRtIiQMgyuYLJSffs.roa
File: ofN6v_gRAPmRtIiQMgyuYLJSffs.roa (raw, json)
Hash identifier: SXOkGzIc52AQGQc9dfHZoJCkWUGFbe3eQc45T6RDPXQ=
Subject key identifier: A1:F3:7A:BF:F8:11:00:F9:91:B4:88:90:32:0C:AE:60:B2:52:7D:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A0CA70320DAC3E1DFD98F3896658BE312
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ofN6v_gRAPmRtIiQMgyuYLJSffs.roa
Signing time: Wed 22 Oct 2025 16:01:03 +0000
ROA not before: Wed 22 Oct 2025 16:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.9.118.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.86.244.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.133.208.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.154.228.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
193.254.235.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a7:03:20:da:c3:e1:df:d9:8f:38:96:65:8b:e3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 22 16:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1f37abff81100f991b48890320cae60b2527dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:47:40:c7:43:f7:51:03:ec:f8:68:76:e9:
ca:ea:b4:be:82:01:d5:45:2e:8c:66:61:c1:58:5f:
f4:91:eb:fc:dc:26:48:6d:04:16:78:16:32:d1:ac:
9c:b8:c4:88:85:55:13:0d:05:71:43:af:70:b1:62:
ad:e3:1a:5a:fd:c8:76:29:c5:61:8f:95:51:f2:a6:
b5:b1:24:d0:56:b4:ac:53:12:44:1c:7e:84:d2:df:
99:88:cb:88:dd:f2:2a:df:7f:22:29:7c:0a:30:34:
f5:12:f1:21:cd:4e:9d:9b:04:f6:c9:b4:13:86:af:
2b:66:c3:c8:08:3f:50:81:2c:74:86:d7:03:f2:26:
0b:14:ff:58:fb:16:cf:92:36:45:1a:8b:53:b2:99:
ba:4a:cb:4d:15:96:b1:83:20:9f:3f:ca:11:eb:87:
0a:6e:df:28:6c:70:d5:e0:4b:ec:35:2b:37:d1:15:
d5:e7:9d:3a:f2:b4:d5:49:70:8f:01:7d:dc:32:b9:
c1:5d:bc:ce:06:7b:3c:d9:24:0b:0d:c4:1d:39:b3:
9e:13:b5:9c:d0:b6:72:60:e7:e0:79:6d:3e:34:13:
a8:51:48:5a:f3:2d:01:1b:50:c4:e6:fd:67:e8:61:
42:18:69:92:09:52:c6:56:0e:c0:4d:28:d1:94:ab:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:7A:BF:F8:11:00:F9:91:B4:88:90:32:0C:AE:60:B2:52:7D:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ofN6v_gRAPmRtIiQMgyuYLJSffs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.9.120.0/24
45.9.122.0/24
45.86.244.0/24
45.95.97.0/24
45.130.128.0/24
45.133.208.0/24
45.134.184.0/24
45.141.176.0/24
45.146.91.0/24
45.146.180.0/24
45.151.104.0/24
45.154.58.0/24
45.154.228.0/24
85.209.130.0/24
185.164.59.0/24
192.156.217.0/24
193.8.1.0/24
193.23.245.0/24
193.39.245.0/24
193.254.234.0/23
194.62.30.0/24
194.62.66.0/24
195.66.26.0/24
195.158.192.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
8a:88:71:d7:5e:c8:84:09:f0:35:f9:30:dd:30:63:22:c4:6a:
24:90:df:8d:55:5e:89:d8:6f:c9:b6:8e:db:a6:18:be:95:5c:
f2:85:fc:f5:f5:a2:9f:c9:e0:27:ca:6f:1a:7a:1b:0a:c0:20:
1c:a5:ab:ce:ca:aa:28:0e:4f:b7:bc:2c:68:fe:64:29:50:88:
0c:b4:eb:64:b0:af:db:f0:c6:4b:34:7f:c6:de:de:55:f4:87:
e6:a4:da:4b:78:da:38:66:e0:b5:e1:8f:7d:3f:cd:df:f1:74:
dc:77:38:6e:a1:5c:e5:b6:f9:c1:fc:59:d9:b4:f3:b1:19:74:
1f:89:39:59:ad:d9:99:db:77:e4:90:2e:1f:05:64:98:3e:5e:
5a:51:25:58:71:8c:99:5a:09:7d:f6:5c:4a:74:f5:3a:3d:65:
ee:fb:e8:18:a7:77:43:aa:1e:e0:d9:65:78:35:fe:1a:64:4f:
33:4a:02:44:18:7d:8b:73:13:09:fe:e6:e6:c5:5b:24:36:25:
47:f1:17:ee:f1:8e:21:9c:42:3d:31:69:3a:62:94:b0:e6:c6:
b0:91:ed:f2:81:87:cd:dd:03:1e:0d:60:ca:3d:93:68:94:d3:
e2:9f:d5:22:d8:62:ee:84:2c:e6:10:3e:d5:d0:e7:24:36:55:
80:c2:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:58 2025 by rpki-client