Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/IhSZr0Z9WAryW3beq7rPy6X_4sU.roa
File: IhSZr0Z9WAryW3beq7rPy6X_4sU.roa (raw, json)
Hash identifier: 14IyrHQZmrwmRvkqbCvXFLBTUIcbof5P325HFm3nQa8=
Subject key identifier: 22:14:99:AF:46:7D:58:0A:F2:5B:76:DE:AB:BA:CF:CB:A5:FF:E2:C5
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01987A17FCD7FA0937F6CCBA1C0D20AA6184
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/IhSZr0Z9WAryW3beq7rPy6X_4sU.roa
Signing time: Tue 05 Aug 2025 11:57:29 +0000
ROA not before: Tue 05 Aug 2025 11:57:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201986
IP address blocks: 45.153.212.0/23 maxlen: 23
45.153.214.0/23 maxlen: 23
109.68.127.0/24 maxlen: 24
178.219.56.0/21 maxlen: 21
178.219.58.0/23 maxlen: 23
185.57.68.0/22 maxlen: 22
185.150.164.0/22 maxlen: 22
185.150.164.0/23 maxlen: 23
185.150.166.0/24 maxlen: 24
185.150.167.0/24 maxlen: 24
194.61.88.0/22 maxlen: 24
194.61.90.0/24 maxlen: 24
2a02:5960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:17:fc:d7:fa:09:37:f6:cc:ba:1c:0d:20:aa:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Aug 5 11:57:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=221499af467d580af25b76deabbacfcba5ffe2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:db:ab:f4:af:26:e8:5e:be:a8:1d:67:62:
52:14:a5:b7:35:e3:6a:dd:a9:e2:1f:1e:7f:bf:c9:
c2:02:0a:01:27:65:03:12:6a:bd:8c:db:54:98:3b:
71:19:95:70:c0:04:8b:a1:bc:31:8b:d7:ac:14:63:
12:c9:9a:fc:9e:c2:21:51:7d:17:d2:e1:ad:2d:fe:
41:0f:65:7a:f0:15:1a:9c:7b:48:3c:8c:10:f8:0b:
20:28:f5:28:32:0c:3e:43:cb:4e:a2:91:c6:9c:82:
8d:a8:49:50:57:a3:0d:07:b4:f3:9d:ab:37:96:14:
6d:91:0a:ae:17:1a:7e:28:c7:d2:e1:8b:d1:08:6e:
ee:6c:4e:8c:f5:ff:6a:fa:2a:46:71:d3:6b:2c:3c:
d7:54:19:a6:f8:0a:99:c1:9e:85:bd:b7:df:e0:f2:
fa:6f:7a:00:ba:cc:d0:9d:83:e8:c8:1e:17:0b:88:
e8:2f:5d:50:01:0f:78:51:2b:13:fd:50:7c:87:53:
18:00:22:b2:98:1c:37:6d:bd:fc:de:02:73:1b:0b:
34:5e:21:5e:d8:44:11:e4:5a:71:e2:ea:ef:5c:e0:
b2:0e:15:94:dd:22:8d:5c:f4:7a:fe:1a:9a:f1:5b:
18:36:02:7e:a3:4d:b7:c5:84:7b:b8:b3:a6:2c:83:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:99:AF:46:7D:58:0A:F2:5B:76:DE:AB:BA:CF:CB:A5:FF:E2:C5
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/IhSZr0Z9WAryW3beq7rPy6X_4sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.212.0/22
109.68.127.0/24
178.219.56.0/21
185.57.68.0/22
185.150.164.0/22
194.61.88.0/22
IPv6:
2a02:5960::/32
Signature Algorithm: sha256WithRSAEncryption
15:60:c4:31:94:e0:17:e4:29:49:5b:85:7a:d5:5e:e4:6d:6d:
16:44:33:26:f8:a8:cb:b7:4d:64:3f:5a:20:94:3e:8c:a8:78:
40:f7:55:fd:42:36:b8:c3:1d:68:65:73:3f:4a:b1:42:75:f5:
11:c3:db:c6:60:f5:44:d9:00:26:d0:65:96:b5:89:1b:60:29:
10:f5:27:0b:e3:9e:26:39:a3:c3:33:07:ac:a7:3e:68:1b:52:
10:4d:ca:4e:4d:50:62:c1:11:5b:a2:c8:4c:80:6a:6d:0a:94:
6b:6f:05:68:c9:fb:4c:dc:fa:06:80:93:b6:ea:b1:2e:68:94:
55:1d:43:64:0a:68:ba:3e:c1:3b:c6:91:7e:44:d4:77:d2:78:
7b:cf:09:3f:13:45:a4:be:8f:bb:f3:6e:2c:63:a4:34:4b:9b:
02:5d:7f:93:77:2e:62:58:a0:40:a4:f7:46:47:0f:7d:0f:ea:
fb:4f:7c:b4:94:e6:35:55:bd:95:f7:cf:bf:75:25:dd:1e:20:
c9:c2:d0:98:8f:6f:09:85:bc:7d:9a:53:12:36:32:26:e8:ae:
52:a7:6b:a8:20:c2:15:f1:7e:40:dd:8c:89:11:03:5e:a6:31:
cb:54:63:5f:b1:f9:d0:46:d4:01:59:57:8e:68:ea:67:5f:1a:
e9:b7:f2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 14:26:25 2025 by rpki-client