Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa
File: 1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa (raw, json)
Hash identifier: j4/Gl/mQufV5n5quU+YzE8lGK989RzijTqRKBSqxgrU=
Subject key identifier: D6:80:5D:30:0E:DE:D9:9F:14:D9:98:FA:0C:AC:59:3E:CF:45:C6:B9
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019A076AADF3FC396786AAB0140A0072CA65
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa
Signing time: Tue 21 Oct 2025 15:37:03 +0000
ROA not before: Tue 21 Oct 2025 15:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 45.87.6.0/23 maxlen: 24
78.110.120.0/24 maxlen: 24
78.110.122.0/24 maxlen: 24
78.110.123.0/24 maxlen: 24
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
152.89.44.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.47.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/24 maxlen: 24
185.58.241.0/24 maxlen: 24
185.58.242.0/24 maxlen: 24
185.58.243.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:6a:ad:f3:fc:39:67:86:aa:b0:14:0a:00:72:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Oct 21 15:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6805d300eded99f14d998fa0cac593ecf45c6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:bc:83:04:aa:83:c1:c6:f6:d8:7d:b4:af:
51:c0:a1:25:5b:08:be:f7:3f:44:4b:39:c0:12:31:
a8:b4:60:ba:9f:91:cf:d9:6b:dc:18:78:a5:07:88:
30:1f:0b:2b:e1:5e:ff:df:27:dc:e1:03:21:3b:55:
dc:db:b7:4c:b6:d0:39:9d:8a:bc:b9:80:8e:74:a7:
2d:59:ce:44:99:c5:df:e2:a3:26:40:f7:54:56:2b:
2f:a9:5b:14:39:91:a5:79:97:76:0c:66:a3:75:cf:
8c:6d:35:3c:16:32:24:db:0a:b7:45:39:9e:72:ac:
d5:8b:54:aa:b2:27:c6:24:d8:18:9f:2c:28:38:08:
4f:19:b3:8b:a1:68:a2:83:7c:09:6e:b7:e7:e0:e1:
30:a8:b6:ab:de:33:ce:96:db:7a:09:87:ac:86:a0:
04:77:4e:58:54:27:b7:38:4a:5b:69:8e:05:2e:21:
0d:36:d1:3d:bc:6a:26:6e:ad:49:f4:c6:5b:86:10:
29:7b:71:14:10:b7:5b:10:a0:e7:67:d4:61:9d:29:
fa:10:c8:74:09:87:1b:50:3a:e2:f5:00:7a:f4:63:
8e:4e:77:1d:be:9d:6d:cf:6e:72:19:b4:7f:a1:5a:
c1:43:e2:af:97:57:71:03:86:2c:96:cb:14:ec:40:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:5D:30:0E:DE:D9:9F:14:D9:98:FA:0C:AC:59:3E:CF:45:C6:B9
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/1oBdMA7e2Z8U2Zj6DKxZPs9Fxrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.6.0/23
78.110.120.0/24
78.110.122.0/23
88.135.36.0/22
91.236.168.0/23
152.89.44.0/24
152.89.46.0/23
185.18.213.0-185.18.214.255
185.51.200.0/22
185.58.240.0/22
185.112.151.0/24
185.128.136.0/24
185.141.105.0-185.141.107.255
185.141.132.0/24
185.141.135.0/24
188.209.153.0/24
195.110.38.0/24
195.211.45.0-195.211.46.255
Signature Algorithm: sha256WithRSAEncryption
4a:37:b0:60:64:2a:3a:40:58:33:93:d8:44:16:1a:e3:88:7b:
e8:66:f9:88:bb:f0:16:a8:60:58:ce:0d:60:33:65:cc:c2:9c:
47:9c:b4:62:66:da:58:1e:92:18:3f:0f:06:a9:25:93:33:a5:
61:f5:da:b0:be:15:3f:d2:db:b5:98:56:02:2f:f9:04:c4:8b:
1c:88:f5:77:c5:c2:f4:3d:5d:1a:05:36:59:81:78:0a:af:69:
84:ef:28:d4:d5:ff:8f:48:4a:85:37:bb:44:30:3d:14:a7:51:
24:6b:7d:ad:29:3f:4d:3e:db:93:6c:05:36:ab:6e:eb:a0:0b:
d9:d2:06:5c:4e:bc:32:01:7a:d3:71:d2:f4:99:70:cc:d0:c0:
6f:cb:f0:49:f7:f2:4e:c0:1c:52:56:b5:89:91:91:30:ca:ef:
19:6f:1c:c0:f8:d2:fa:d8:b6:ba:5d:36:e3:50:e4:03:97:13:
9b:df:fa:ae:32:b3:af:fe:7f:ce:76:65:43:45:f9:15:9c:4d:
4f:eb:c6:18:70:c8:d3:68:ac:a8:fe:45:7b:95:6e:0e:16:f2:
60:52:e2:5c:21:a7:75:e7:1a:e9:60:3b:70:70:6e:9f:6e:c0:
fd:21:c0:9a:9a:f8:af:88:e7:58:95:a4:92:a9:f2:e7:bb:19:
49:9c:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:55:51 2025 by rpki-client