Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PO5RdmIEIyCWVfAawH29dUtGmvI.roa
File: PO5RdmIEIyCWVfAawH29dUtGmvI.roa (raw, json)
Hash identifier: wC5CurgtJeYqHAcmNSrNXdfuc0pNfhDuy2xuMj1JjeE=
Subject key identifier: 3C:EE:51:76:62:04:23:20:96:55:F0:1A:C0:7D:BD:75:4B:46:9A:F2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0198EBB6D6B5B8B7001CAE152D6B164AE9F8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PO5RdmIEIyCWVfAawH29dUtGmvI.roa
Signing time: Wed 27 Aug 2025 13:28:04 +0000
ROA not before: Wed 27 Aug 2025 13:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400992
IP address blocks: 45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:b6:d6:b5:b8:b7:00:1c:ae:15:2d:6b:16:4a:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 27 13:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cee5176620423209655f01ac07dbd754b469af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:7a:5b:59:aa:59:a8:af:db:c3:70:47:a0:
6c:75:2b:c3:27:d4:e6:fe:e8:b5:f3:b7:b7:16:4a:
30:e7:6e:b9:cd:ba:95:5b:6f:4c:06:3e:68:66:e3:
20:eb:6c:08:76:f6:a0:d0:79:45:85:b8:56:fa:54:
7a:81:a0:71:be:8c:15:07:eb:e4:97:77:57:f4:e0:
6a:ff:f4:20:2b:f0:d8:40:32:3f:01:20:fa:16:39:
87:01:d7:7a:95:f1:43:5c:c3:f1:34:49:08:c6:9e:
20:a2:9b:69:70:01:c6:6b:9a:cc:0b:81:4c:ff:b9:
64:ff:51:55:62:b6:20:db:8a:4b:8d:a3:6e:c1:f3:
1e:91:07:bc:c3:cc:a3:28:8d:67:7b:07:0f:6e:56:
70:e2:1c:65:f1:59:5a:a9:bf:68:b3:bf:f9:9f:80:
3a:55:ec:c5:f2:ee:bb:67:ed:45:a6:b9:8a:8f:ab:
1d:28:93:9b:7b:6a:fa:23:d2:2c:a2:8e:75:3f:ca:
c1:85:24:3f:0e:59:fb:ed:f3:7f:2e:6d:00:64:1a:
82:4e:74:26:84:01:08:37:b3:dc:f1:8f:91:15:d7:
1f:22:7a:50:80:b8:d4:b0:da:d5:e8:1c:5f:71:df:
e6:55:4f:a3:4e:f0:8d:83:2a:b8:be:32:8f:72:f6:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EE:51:76:62:04:23:20:96:55:F0:1A:C0:7D:BD:75:4B:46:9A:F2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PO5RdmIEIyCWVfAawH29dUtGmvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.250.180.0/24
193.17.183.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ef:46:8f:8b:f4:91:9a:9a:7b:05:8a:70:d5:d8:f8:3e:dd:
54:fb:e7:00:c5:0f:4f:6f:28:cc:25:10:38:50:aa:ef:2e:3e:
c8:e4:8b:e7:73:e9:4b:b2:03:80:7d:3d:60:4a:f3:ec:ec:5a:
7d:34:27:34:26:ae:90:40:16:b5:91:b1:83:b3:f8:73:be:1a:
2a:14:97:3f:4c:c3:c1:53:d6:cd:df:eb:19:67:15:70:3c:84:
f5:3d:27:15:17:99:ad:21:a1:0a:7e:b9:b0:63:5c:b8:f2:32:
63:50:19:e8:2c:78:6a:d8:30:d8:d1:a7:cb:b2:64:0d:bb:9d:
93:e2:f5:f7:2c:32:b1:fc:1e:79:59:2a:55:d5:29:c9:f1:ff:
1c:73:9d:51:9d:df:4f:84:f9:a6:c2:1d:08:ad:9b:34:10:ff:
2b:86:d9:a4:9c:3f:ea:b2:26:ce:b8:e1:e0:8a:20:d4:67:bd:
bd:68:d5:17:13:5d:93:58:28:d5:69:2f:0c:52:f0:df:06:c8:
bd:0e:a0:04:08:cd:22:25:05:6b:1b:e0:38:89:21:3a:84:d9:
2d:2c:da:28:52:26:2a:24:01:70:60:5d:23:ff:e7:30:30:cd:
97:44:81:94:03:d9:00:71:c1:45:78:e7:78:71:d0:aa:67:a1:
e2:df:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:41:04 2025 by rpki-client