Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/iuYZctM9ho40y9O9NGu8oiwydyQ.roa
File: iuYZctM9ho40y9O9NGu8oiwydyQ.roa (raw, json)
Hash identifier: iVbT4XgjGA1oWctdpXO1acTvsUwxsInkD3aqlUFGvoo=
Subject key identifier: 8A:E6:19:72:D3:3D:86:8E:34:CB:D3:BD:34:6B:BC:A2:2C:32:77:24
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 01985BE371792FF0E08CCEBE8442EC8A47DF
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/iuYZctM9ho40y9O9NGu8oiwydyQ.roa
Signing time: Wed 30 Jul 2025 15:11:29 +0000
ROA not before: Wed 30 Jul 2025 15:11:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34373
IP address blocks: 45.128.64.0/22 maxlen: 24
45.132.40.0/22 maxlen: 24
77.74.124.0/22 maxlen: 24
86.48.68.0/22 maxlen: 24
91.219.76.0/22 maxlen: 24
185.56.52.0/22 maxlen: 24
185.63.56.0/22 maxlen: 24
185.69.204.0/22 maxlen: 24
185.96.44.0/22 maxlen: 24
185.97.228.0/22 maxlen: 24
185.116.40.0/22 maxlen: 24
185.165.68.0/22 maxlen: 24
185.210.128.0/22 maxlen: 24
193.105.233.0/24 maxlen: 24
195.253.200.0/21 maxlen: 24
217.61.253.0/24 maxlen: 24
2a00:4140::/29 maxlen: 48
2a06:900::/29 maxlen: 48
2a06:7bc0::/29 maxlen: 48
2a0b:57c0::/29 maxlen: 48
2a0b:ec00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:e3:71:79:2f:f0:e0:8c:ce:be:84:42:ec:8a:47:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Jul 30 15:11:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae61972d33d868e34cbd3bd346bbca22c327724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:31:16:1c:c3:08:17:ea:b1:c6:a9:5e:88:
4f:d2:51:c5:9e:95:9f:cf:0f:5a:a4:ff:84:f4:38:
65:0e:db:98:10:8f:a0:8d:a8:bf:3a:28:24:2e:f7:
1f:a9:c6:23:9f:04:b5:69:4c:65:a7:e5:03:cf:3d:
3d:e1:58:55:87:c1:6b:3e:2c:dd:44:8e:9c:34:4a:
6d:00:86:57:4e:ae:85:61:d8:cf:3a:b0:6b:15:48:
e5:24:24:49:7f:3e:d7:87:33:64:a0:f2:3a:23:f0:
b3:55:38:07:0f:3f:f5:5e:da:99:01:cc:98:90:f5:
5e:41:d9:60:f5:c2:89:ec:51:b6:66:bc:ba:48:b6:
bd:96:1b:2c:d0:27:ef:79:97:97:06:ad:b9:40:29:
63:73:f7:44:62:8c:a1:8d:76:47:46:1a:8b:21:0a:
78:5b:e6:64:b4:07:ff:95:30:9d:7c:19:75:6d:42:
f3:00:31:f3:98:19:f8:ab:56:87:f5:65:8e:51:56:
69:b5:50:31:6d:b5:d6:3d:76:13:75:bf:13:70:db:
90:d5:6e:f4:38:24:39:c1:d4:c1:3f:cb:32:cb:bb:
b5:eb:fa:3e:f8:d4:fe:25:35:4d:71:f6:76:34:68:
f1:0a:09:1c:41:94:63:45:c9:ac:30:a9:0e:b4:66:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:19:72:D3:3D:86:8E:34:CB:D3:BD:34:6B:BC:A2:2C:32:77:24
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/iuYZctM9ho40y9O9NGu8oiwydyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.64.0/22
45.132.40.0/22
77.74.124.0/22
86.48.68.0/22
91.219.76.0/22
185.56.52.0/22
185.63.56.0/22
185.69.204.0/22
185.96.44.0/22
185.97.228.0/22
185.116.40.0/22
185.165.68.0/22
185.210.128.0/22
193.105.233.0/24
195.253.200.0/21
217.61.253.0/24
IPv6:
2a00:4140::/29
2a06:900::/29
2a06:7bc0::/29
2a0b:57c0::/29
2a0b:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:32:74:33:ad:71:6f:8e:c6:44:5d:ca:2f:cf:a4:7a:60:d6:
b5:4b:12:e4:e5:49:11:88:de:07:25:b1:cf:38:d6:eb:9f:63:
bb:c1:fb:5e:b4:b9:09:fe:30:7b:fe:ff:29:e3:13:ee:ad:7b:
31:ba:ad:ed:89:d4:db:4a:4d:30:c2:d6:3a:82:fb:4d:34:37:
55:ac:45:bc:e7:8b:c8:8c:da:ea:0c:2d:28:48:c2:3e:63:43:
4b:0c:b7:04:0a:40:95:b2:de:71:f1:b7:5b:9a:86:62:04:5f:
57:cb:cf:ca:7f:7f:5b:da:92:10:9d:32:6e:33:b4:66:9c:07:
19:c2:e6:72:ec:84:97:c2:e0:b4:7c:fa:e6:5c:57:bc:69:ac:
39:f6:05:79:a2:f0:3d:c0:fd:36:96:e6:f3:b3:fa:7d:41:1b:
bf:0d:60:75:6c:24:de:24:84:fa:a7:e4:c0:2d:49:23:29:57:
3f:5b:6f:b5:e8:bb:f8:e2:b8:bd:2c:fb:a1:85:e9:f7:1e:4a:
c3:0a:eb:d8:3d:38:31:4e:8d:ac:3b:24:04:4d:51:36:da:67:
4a:d8:1a:62:08:00:c5:e2:3e:dd:61:60:a5:7b:9b:34:4d:d6:
2d:31:98:74:e2:7d:d2:9e:1c:15:ca:79:78:cf:b5:b2:e0:f2:
0e:f2:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:06:54 2025 by rpki-client