Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/aVZfkgdjFOvfxBL5XAyzz6LnyUI.roa
File: aVZfkgdjFOvfxBL5XAyzz6LnyUI.roa (raw, json)
Hash identifier: WgbxMCftHGdyFNLtFynanqdwxY2enPXaHJp/iH1q7Do=
Subject key identifier: 69:56:5F:92:07:63:14:EB:DF:C4:12:F9:5C:0C:B3:CF:A2:E7:C9:42
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 019711D7A7E30562DDCA590FABC2E877A321
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/aVZfkgdjFOvfxBL5XAyzz6LnyUI.roa
Signing time: Tue 27 May 2025 13:03:55 +0000
ROA not before: Tue 27 May 2025 13:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39351
IP address blocks: 45.83.220.0/24 maxlen: 24
45.83.221.0/24 maxlen: 24
45.83.222.0/23 maxlen: 24
45.129.56.0/24 maxlen: 24
45.129.59.0/24 maxlen: 24
141.98.252.0/24 maxlen: 24
141.98.254.0/24 maxlen: 24
141.98.255.0/24 maxlen: 24
185.65.132.0/24 maxlen: 24
185.65.133.0/24 maxlen: 24
185.65.134.0/24 maxlen: 24
185.65.135.0/24 maxlen: 24
185.195.232.0/24 maxlen: 24
185.195.233.0/24 maxlen: 24
185.209.196.0/24 maxlen: 24
185.209.197.0/24 maxlen: 24
185.209.198.0/24 maxlen: 24
185.209.199.0/24 maxlen: 24
185.213.152.0/24 maxlen: 24
185.213.153.0/24 maxlen: 24
185.213.154.0/24 maxlen: 24
185.213.155.0/24 maxlen: 24
193.32.126.0/24 maxlen: 24
193.32.127.0/24 maxlen: 24
193.32.248.0/24 maxlen: 24
193.32.249.0/24 maxlen: 24
193.138.216.0/22 maxlen: 22
195.54.182.0/24 maxlen: 24
195.54.183.0/24 maxlen: 24
2a03:1b20:1::/48 maxlen: 48
2a03:1b20:2::/48 maxlen: 48
2a03:1b20:3::/48 maxlen: 48
2a03:1b20:4::/48 maxlen: 48
2a03:1b20:5::/48 maxlen: 48
2a03:1b20:6::/48 maxlen: 48
2a03:1b20:7::/48 maxlen: 48
2a03:1b20:8::/48 maxlen: 48
2a03:1b20:9::/48 maxlen: 48
2a03:1b20:a::/48 maxlen: 48
2a03:1b20:b::/48 maxlen: 48
2a03:1b20:901::/48 maxlen: 48
2a03:1b20:bef1::/48 maxlen: 48
2a03:1b20:bef2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:d7:a7:e3:05:62:dd:ca:59:0f:ab:c2:e8:77:a3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: May 27 13:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69565f92076314ebdfc412f95c0cb3cfa2e7c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:2e:cc:0d:63:c0:29:60:c0:98:d0:0b:0b:
d9:61:fb:03:dc:2f:04:53:57:2d:91:30:7c:d6:ac:
43:06:69:a6:a3:2c:e1:6c:53:4d:d0:6a:b0:8b:a2:
90:d4:25:8e:f5:ea:ca:c3:38:40:fd:91:b3:42:c3:
a7:bd:ad:88:c9:21:25:8a:ca:34:1a:2b:18:12:b0:
6a:bd:f8:fc:7b:f2:68:43:3d:29:dc:34:4f:5a:b6:
01:68:4f:13:c2:bf:23:52:b9:16:19:d7:96:a4:f2:
f2:e7:1f:d4:24:dc:76:f8:e5:08:16:47:b3:fd:e0:
c7:84:9c:86:52:fe:f9:e9:16:8e:87:87:36:63:64:
93:dc:29:cf:2a:df:ba:d4:12:b0:7f:f1:82:b5:39:
84:78:89:93:0e:34:6a:37:82:8a:25:06:fc:26:52:
a0:8c:be:fb:33:7c:35:95:f9:87:af:94:63:fc:ae:
0f:69:6b:5b:fe:1a:6c:46:f9:c1:c3:99:2b:30:44:
64:28:b9:ac:1d:14:7f:2e:c9:b7:3e:74:1c:5b:ba:
a5:88:ad:ab:15:ef:1b:28:e6:45:48:4b:31:f7:32:
72:23:b2:8a:fc:c2:50:59:29:04:f7:ff:98:62:16:
c8:77:a6:e5:77:7c:26:08:eb:b6:58:45:bc:10:06:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:5F:92:07:63:14:EB:DF:C4:12:F9:5C:0C:B3:CF:A2:E7:C9:42
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/aVZfkgdjFOvfxBL5XAyzz6LnyUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.220.0/22
45.129.56.0/24
45.129.59.0/24
141.98.252.0/24
141.98.254.0/23
185.65.132.0/22
185.195.232.0/23
185.209.196.0/22
185.213.152.0/22
193.32.126.0/23
193.32.248.0/23
193.138.216.0/22
195.54.182.0/23
IPv6:
2a03:1b20:1::-2a03:1b20:b:ffff:ffff:ffff:ffff:ffff
2a03:1b20:901::/48
2a03:1b20:bef1::-2a03:1b20:bef2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:59:d5:c6:cf:64:56:a9:01:7e:d8:e2:40:7b:cb:93:b2:55:
40:0f:8e:b8:3f:16:0c:f4:99:44:e9:03:49:41:23:81:ef:76:
49:8e:69:a0:54:ec:23:c0:c2:0c:ec:c8:3c:e1:47:f8:59:aa:
83:76:78:22:f9:3f:cd:86:7e:02:52:e1:03:a4:b6:b2:7a:36:
08:32:de:66:9b:0c:58:a9:c8:fb:5a:71:12:93:6d:c1:06:9c:
a6:09:7c:32:e7:c4:a7:cb:62:3c:be:ab:3d:31:c7:88:f2:32:
55:af:44:07:52:e9:3a:de:df:bf:77:b1:8f:fa:61:b5:9e:99:
be:0c:29:d9:3f:f7:69:43:a4:63:62:71:3c:81:84:37:ab:26:
14:fb:10:af:64:a7:88:81:61:f7:4a:22:79:0e:bf:04:b5:c6:
0b:a6:6a:f2:99:5b:21:78:8d:4b:3b:17:f9:97:b7:b2:a8:80:
cd:89:e5:df:99:b8:30:23:02:c4:e9:34:a4:ab:ec:44:97:a4:
92:55:73:30:d5:e4:ec:a5:27:6d:c9:df:9e:04:75:57:03:c3:
79:e0:41:8f:ed:e9:ba:df:86:ad:8a:f4:ee:c1:d3:ae:a1:7a:
60:2b:ac:56:22:66:4d:aa:83:7b:24:a1:49:54:2c:f1:40:3a:
e6:30:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:31:46 2025 by rpki-client