Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qamghxm63Mp3smrNmtBSu9BCQYg.roa
File: qamghxm63Mp3smrNmtBSu9BCQYg.roa (raw, json)
Hash identifier: q9jh6s55cu9uN1JyTs+dLl63TgA0bL0/XEoPcAsYQOY=
Subject key identifier: A9:A9:A0:87:19:BA:DC:CA:77:B2:6A:CD:9A:D0:52:BB:D0:42:41:88
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01971819D277C899C1C115FA2AE455A2BC0F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qamghxm63Mp3smrNmtBSu9BCQYg.roa
Signing time: Wed 28 May 2025 18:13:54 +0000
ROA not before: Wed 28 May 2025 18:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.130.255.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.145.56.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.242.244.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
192.153.171.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:19:d2:77:c8:99:c1:c1:15:fa:2a:e4:55:a2:bc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 28 18:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a9a08719badcca77b26acd9ad052bbd0424188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:73:92:fc:d4:4f:cc:6c:ad:bf:91:3f:20:
b1:ff:b2:b2:89:bf:8e:84:d1:4b:5a:09:c7:da:70:
41:e9:ff:c7:89:eb:28:56:22:b8:0b:18:64:82:1b:
88:75:a0:b0:f9:11:ec:7b:e8:33:70:25:27:c8:38:
d0:8c:8f:a9:8c:4e:b1:48:91:ac:31:f2:5d:94:91:
d5:24:ee:1b:be:02:da:7d:fa:9c:4d:ac:e7:60:a1:
6b:66:0b:b3:bb:e8:1c:cb:6a:38:b5:83:e5:c8:17:
46:13:44:50:99:a2:48:6b:18:35:f6:44:19:d9:3b:
ac:d6:dc:30:5a:6d:1c:0d:42:a9:72:2f:28:dc:a3:
bf:8a:99:fe:8a:53:f1:9f:3a:d7:69:18:7d:2b:e8:
b5:22:ac:94:b5:09:b7:05:7b:97:9e:4d:df:fa:ce:
67:72:1a:21:20:f0:cc:f9:6c:1a:27:74:7a:c5:92:
43:16:d0:e5:a0:ac:11:8e:29:fd:84:9f:37:26:e4:
73:81:3c:35:ed:c3:56:1b:0d:7f:02:fb:a7:86:fb:
47:68:c9:1a:dc:89:7c:e3:85:12:7e:95:7c:97:66:
57:8a:7c:9a:46:c6:6e:24:fe:cb:50:61:4c:02:d5:
3c:79:e9:32:6e:2f:24:98:ab:2d:1d:c3:86:8c:6a:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:A0:87:19:BA:DC:CA:77:B2:6A:CD:9A:D0:52:BB:D0:42:41:88
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qamghxm63Mp3smrNmtBSu9BCQYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.130.255.0/24
45.131.212.0/23
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.145.56.0/24
45.146.131.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
45.158.185.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
185.155.200.0/24
185.242.244.0/23
192.153.171.0/24
193.8.215.0/24
193.23.245.0/24
193.23.253.0/24
193.27.10.0/24
193.27.19.0/24
193.27.21.0/24
194.33.29.0/24
195.158.192.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
28:e2:fe:41:87:2f:1f:35:2c:39:9c:55:64:a4:1a:3a:60:0b:
22:6d:7e:ab:4a:cb:fa:6c:fe:fc:4f:f6:d0:6f:e9:e0:fb:32:
7c:70:de:7a:4c:27:80:f0:a2:04:f8:e9:44:09:70:22:2e:76:
f1:0b:3b:3a:1f:6e:65:35:bc:2a:4f:16:dd:8d:2d:32:48:7a:
cc:2d:f4:74:97:09:6c:b2:5b:06:f3:b3:3c:00:78:7b:33:c9:
ba:ea:cf:b4:fc:52:78:a3:42:de:c7:12:2b:2b:07:fe:76:5a:
a8:e1:a1:96:bc:70:ca:1d:4b:1b:da:16:dc:9f:3e:38:22:d9:
6f:36:0d:39:96:8c:95:0c:80:8d:ef:92:b1:6f:fe:98:82:70:
5f:4e:a0:d7:ff:1b:03:af:84:2d:cd:34:f1:d3:2d:e9:98:e7:
b1:18:87:bc:a9:89:1b:38:73:1d:ca:94:51:77:35:e3:f2:4f:
da:e8:1b:53:9b:98:4c:f4:cd:0c:4e:13:c0:16:24:13:aa:11:
6b:91:2d:05:bf:88:74:ee:9a:c3:21:72:db:41:bf:ae:07:f5:
59:5e:44:20:c7:11:05:87:94:fb:b9:a4:8f:6a:6d:7c:d2:50:
26:89:f5:a4:da:bc:7a:90:dd:d7:1e:7f:f9:f3:f2:98:73:48:
b1:ee:8f:eb
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAZcYGdJ3yJnBwRX6KuRVorwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTI4MTgxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWE5YTA4NzE5YmFkY2NhNzdiMjZhY2Q5YWQwNTJiYmQwNDI0MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMxzkvzUT8xsrb+RPyCx/7Kyib+O
hNFLWgnH2nBB6f/HiesoViK4CxhkghuIdaCw+RHse+gzcCUnyDjQjI+pjE6xSJGs
MfJdlJHVJO4bvgLaffqcTaznYKFrZguzu+gcy2o4tYPlyBdGE0RQmaJIaxg19kQZ
2Tus1twwWm0cDUKpci8o3KO/ipn+ilPxnzrXaRh9K+i1IqyUtQm3BXuXnk3f+s5n
chohIPDM+WwaJ3R6xZJDFtDloKwRjin9hJ83JuRzgTw17cNWGw1/AvunhvtHaMka
3Il844USfpV8l2ZXinyaRsZuJP7LUGFMAtU8eekybi8kmKstHcOGjGodcwIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFKmpoIcZutzKd7JqzZrQUrvQQkGIMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcWFtZ2h4bTYzTXAzc21yTm10QlN1OUJDUVlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwgdMEAgABMIHMAwQA
LQl1AwQALV9gAwQALXb4AwQALYI8AwQALYL/AwQBLYPUAwQALYPXAwQALYcnAwQA
LYlRAwQALYwNAwQALY2xAwQALZE4AwQALZKDAwQALZjQAwQALZkWAwQALZtFAwQA
LZ65AwQAVdGAAwQAZ3IrAwQAcR6aAwQAuXqrAwQAuX5AAwQAuX5CAwQAuZvIAwQB
ufL0AwQAwJmrAwQAwQjXAwQAwRf1AwQAwRf9AwQAwRsKAwQAwRsTAwQAwRsVAwQA
wiEdAwQAw57AMBgEAgACMBIDBwAqDHiGAQUDBwAqD+fGEAAwDQYJKoZIhvcNAQEL
BQADggEBACji/kGHLx81LDmcVWSkGjpgCyJtfqtKy/ps/vxP9tBv6eD7Mnxw3npM
J4DwogT46UQJcCIudvELOzofbmU1vCpPFt2NLTJIeswt9HSXCWyyWwbzszwAeHsz
ybrqz7T8UnijQt7HEisrB/52WqjhoZa8cModSxvaFtyfPjgi2W82DTmWjJUMgI3v
krFv/piCcF9OoNf/GwOvhC3NNPHTLemY57EYh7ypiRs4cx3KlFF3NePyT9roG1Ob
mEz0zQxOE8AWJBOqEWuRLQW/iHTumsMhcttBv64H9VleRCDHEQWHlPu5pI9qbXzS
UCaJ9aTavHqQ3dcef/nz8phzSLHuj+s=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:54:17 2025 by rpki-client