Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/44ugppP1OtP4ikdS_EdnCRhqU3g.roa
File: 44ugppP1OtP4ikdS_EdnCRhqU3g.roa (raw, json)
Hash identifier: 2j+vlSwNZhstZYjQeoNzaIg3fY6GAhnPNhJ74ZLQcRw=
Subject key identifier: E3:8B:A0:A6:93:F5:3A:D3:F8:8A:47:52:FC:47:67:09:18:6A:53:78
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019745018879FD493347C717ABA9F70817C5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/44ugppP1OtP4ikdS_EdnCRhqU3g.roa
Signing time: Fri 06 Jun 2025 11:30:17 +0000
ROA not before: Fri 06 Jun 2025 11:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:01:88:79:fd:49:33:47:c7:17:ab:a9:f7:08:17:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 6 11:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e38ba0a693f53ad3f88a4752fc476709186a5378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:de:13:f3:49:22:c1:70:17:a4:8d:7c:15:
22:a1:62:00:0c:b5:b5:2d:88:05:6b:be:a3:4e:10:
d6:c1:bb:01:b3:af:86:e7:56:70:ed:2b:23:80:19:
23:c6:f9:46:c0:ff:29:56:84:9a:cf:27:7b:fc:df:
fb:d0:60:79:47:7f:5e:3f:3c:d6:54:a4:60:92:97:
1f:ef:4a:ef:7b:eb:0e:91:e5:5c:dc:85:08:29:a9:
31:02:39:48:e3:90:62:ca:e2:8a:8f:86:3d:57:27:
01:b4:17:70:07:4c:02:19:ed:d3:cf:77:a8:f3:1d:
91:00:4c:23:a4:e2:f2:74:9e:5f:28:89:84:bb:13:
e2:d6:7d:cd:42:93:d4:d2:5b:7e:08:f1:d0:17:3f:
da:05:53:1a:ef:60:ef:32:72:10:f6:26:70:23:da:
2e:4a:8a:fa:7d:64:0a:18:60:7a:d8:9d:89:f3:8c:
c3:49:09:ed:69:0a:bd:03:8b:d5:19:fd:c7:71:ae:
cb:6a:3d:7a:46:48:41:1d:e3:ae:7f:46:76:b4:29:
72:1a:b2:26:1f:74:27:89:4b:ec:fd:31:85:18:bc:
3b:3b:0a:17:07:05:a1:d8:ce:8d:b2:2e:e9:e5:2f:
25:8b:e5:6e:f5:5c:13:8c:ee:49:ee:bb:8b:7b:c8:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:A0:A6:93:F5:3A:D3:F8:8A:47:52:FC:47:67:09:18:6A:53:78
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/44ugppP1OtP4ikdS_EdnCRhqU3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
77.242.154.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
88.209.247.0/24
92.52.208.0/21
92.52.218.0/24
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:de:6a:7e:7f:07:08:3d:b1:a8:2d:6d:97:71:1c:86:ff:35:
c7:52:d6:ac:b8:98:60:d9:3f:20:25:59:73:42:b1:41:14:45:
ff:39:95:0e:14:b7:86:6e:3c:1d:4c:bf:87:3d:03:aa:d0:da:
ef:4c:13:4a:a5:9c:1b:b3:d1:ad:47:4c:c5:12:7b:40:47:5c:
6a:da:06:6e:90:62:76:d8:98:fa:ba:11:68:d3:55:19:5f:9c:
5b:e2:4e:49:cb:3c:32:35:44:1b:55:3a:10:4a:06:ee:99:66:
a2:3d:fa:06:4b:16:2f:bc:15:13:ed:9a:50:c0:d0:ee:bb:3d:
8f:ba:c8:cb:95:59:e3:56:1d:20:48:70:90:a1:6a:fe:35:99:
d0:9f:f0:8f:04:5a:4b:58:57:2b:b3:17:57:e1:34:69:0a:e7:
15:05:2c:89:bb:db:60:18:c4:64:b3:18:1b:56:3c:26:24:e4:
df:73:83:97:78:bf:09:cf:65:30:0e:44:ff:f8:15:d4:bc:e7:
e3:39:93:d3:3b:b0:e3:6a:08:54:d2:26:19:6f:b7:52:99:50:
45:23:ea:60:f6:f4:7f:f9:78:df:30:df:90:e0:37:97:6e:6c:
15:9f:db:d9:a1:25:28:1f:62:b9:de:75:b4:63:83:b4:29:e8:
1b:4c:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:26 2025 by rpki-client