Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jLfhhonDgD3lODq7DVlGevDd8CA.roa
File: jLfhhonDgD3lODq7DVlGevDd8CA.roa (raw, json)
Hash identifier: Vy3J4+iLS0r3np1qFgOa21tSXN62wrEeaVa++V8BfVY=
Subject key identifier: 8C:B7:E1:86:89:C3:80:3D:E5:38:3A:BB:0D:59:46:7A:F0:DD:F0:20
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197D49BFFF0E3C704970DCCCB88D7EB90A2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jLfhhonDgD3lODq7DVlGevDd8CA.roa
Signing time: Fri 04 Jul 2025 08:44:42 +0000
ROA not before: Fri 04 Jul 2025 08:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.90.17.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.5.64.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:9b:ff:f0:e3:c7:04:97:0d:cc:cb:88:d7:eb:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 4 08:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb7e18689c3803de5383abb0d59467af0ddf020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:8a:71:51:df:55:14:6f:8c:63:70:8f:70:
d8:45:8e:72:57:e9:a5:87:09:fa:60:36:cf:42:a2:
90:3e:26:86:5e:a1:b9:34:4f:d5:b8:07:bc:f1:31:
c1:f4:9b:b2:57:53:eb:1c:e1:04:e4:f2:dd:4b:46:
fb:1c:18:fc:55:04:1e:da:8d:f3:f1:7a:9e:fb:60:
74:b5:15:e0:1e:e7:fc:21:d9:8a:7f:a4:b3:97:a0:
67:30:d2:30:9a:e7:f7:27:c9:a0:81:e7:cc:51:75:
64:b5:26:cd:a1:c3:39:3b:b5:09:01:91:54:de:a5:
5c:56:ed:98:92:e5:3f:9d:7e:ab:c6:fc:ae:31:47:
6f:6a:fb:37:20:4f:d4:56:ab:b4:f1:d3:a2:d2:a4:
94:8e:67:7e:b7:b1:51:e2:5d:4f:4f:b4:80:03:fa:
11:26:be:bb:0f:d7:aa:2e:d0:0b:80:1b:ab:8b:ac:
d8:3f:71:97:f3:1b:63:f8:30:50:bf:d3:99:22:db:
80:2d:8e:71:9d:2d:7c:62:5d:90:0a:c9:d2:a0:bc:
6a:c5:95:d7:e7:e2:39:85:48:81:11:79:ff:76:22:
14:82:83:88:02:ff:ac:65:1b:df:74:fd:80:d9:38:
6c:58:9c:77:b6:de:65:03:41:d0:95:6b:5f:f7:0c:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:E1:86:89:C3:80:3D:E5:38:3A:BB:0D:59:46:7A:F0:DD:F0:20
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jLfhhonDgD3lODq7DVlGevDd8CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
185.126.82.0/24
185.199.54.0/24
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.250.0/23
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.5.64.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:09:18:6e:59:2a:03:25:b4:b1:b9:a2:3c:18:65:e9:48:83:
4a:99:2a:b1:69:d0:4e:7f:32:3d:66:78:c9:85:39:f5:1f:65:
3b:10:ab:45:b9:c7:15:a4:99:f0:cb:f7:f8:f8:bf:38:76:d9:
e0:8a:e8:43:84:16:76:73:2a:28:5b:ef:21:97:15:da:ea:59:
96:77:0f:4c:28:19:2a:0a:b6:ae:c3:bb:fb:24:d3:fc:a2:1e:
03:23:c3:98:ed:39:9e:c0:99:08:f7:54:5b:82:7a:fe:64:8a:
bf:e3:59:26:86:69:fe:17:84:2c:a8:8d:61:ad:81:50:03:f9:
67:b0:41:2f:9e:00:c8:bd:79:17:ac:9c:00:ed:ca:06:fd:4a:
a0:ec:98:0c:1a:52:b3:4d:a1:93:48:03:e9:87:6c:69:0e:cc:
a5:6c:c4:91:7a:f8:db:fb:76:36:b4:c2:d4:87:cf:eb:f2:cc:
60:a2:04:4f:14:48:e6:2a:99:9d:36:07:14:13:b7:f2:be:6a:
c9:1f:9b:fa:fe:c9:9a:a6:79:95:b1:c9:16:aa:38:a7:8a:54:
60:fc:96:03:a4:ae:78:ea:5d:f9:f3:fc:cd:a3:15:da:3d:a8:
af:91:07:b2:ce:aa:fb:75:4d:f1:ef:25:3e:8a:49:77:fb:08:
cd:63:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:50:11 2025 by rpki-client