Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/9yOwmAU645k5B-2q5IOc7M05GTo.roa
File: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (raw, json)
Hash identifier: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=
Subject key identifier: F7:23:B0:98:05:3A:E3:99:39:07:ED:AA:E4:83:9C:EC:CD:39:19:3A
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 01985ACFDDFA5461DC446EF59D759D286E6C
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/9yOwmAU645k5B-2q5IOc7M05GTo.roa
Signing time: Wed 30 Jul 2025 10:10:28 +0000
ROA not before: Wed 30 Jul 2025 10:10:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206805
IP address blocks: 45.84.152.0/23 maxlen: 24
45.84.154.0/24 maxlen: 24
45.84.155.0/24 maxlen: 24
45.145.188.0/23 maxlen: 23
45.145.190.0/23 maxlen: 23
45.145.190.0/24 maxlen: 24
45.145.191.0/24 maxlen: 24
80.85.248.0/23 maxlen: 23
80.85.250.0/23 maxlen: 23
80.85.252.0/24 maxlen: 24
80.85.253.0/24 maxlen: 24
80.85.254.0/23 maxlen: 24
176.119.0.0/21 maxlen: 21
178.159.32.0/23 maxlen: 24
185.159.111.0/24 maxlen: 24
185.228.48.0/22 maxlen: 24
185.247.192.0/22 maxlen: 24
188.64.149.0/24 maxlen: 24
188.64.150.0/23 maxlen: 24
193.19.100.0/23 maxlen: 24
193.141.230.0/23 maxlen: 23
193.142.20.0/23 maxlen: 23
193.246.144.0/24 maxlen: 24
193.246.150.0/24 maxlen: 24
193.246.153.0/24 maxlen: 24
193.246.159.0/24 maxlen: 24
203.81.208.0/20 maxlen: 24
2a0c:ee00::/32 maxlen: 40
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
2a0c:ee00:200::/40 maxlen: 40
2a0c:ee00:20c::/48 maxlen: 48
2a0c:ee00:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:cf:dd:fa:54:61:dc:44:6e:f5:9d:75:9d:28:6e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jul 30 10:10:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f723b098053ae3993907edaae4839ceccd39193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:a6:5c:78:51:3d:54:75:c8:dc:17:4a:a2:
f2:52:4c:85:45:04:94:be:d2:8a:3d:88:22:4a:c9:
d9:a8:d6:97:fa:5a:84:3c:56:49:3a:3a:e5:14:07:
e7:9c:2d:d7:31:9b:1c:17:83:69:54:5c:9a:1c:29:
45:7c:84:68:04:ad:7e:45:9b:89:82:1f:e7:0a:15:
b5:a6:5c:7d:5b:9b:43:14:d2:99:db:78:d7:b8:5c:
24:7c:36:da:55:7b:41:38:e2:93:68:20:81:e4:8c:
4a:91:ba:07:54:80:2c:d8:c2:89:06:26:df:59:62:
44:c3:8b:dd:dd:1a:44:1d:60:d4:41:fb:99:f7:e9:
44:0a:40:0e:f4:62:89:3f:20:bb:21:31:52:3f:c2:
0f:7a:18:93:59:5b:8d:c5:d4:1c:0d:ff:ad:65:7f:
49:3e:03:b1:fc:2c:fe:b1:50:0e:d6:5b:97:9c:e8:
84:6f:d0:a5:40:65:1e:e4:8b:3d:fa:bc:b8:31:e5:
a7:d7:63:ec:c4:65:83:22:f0:af:f9:ff:8d:15:b8:
82:e7:1f:00:e6:f0:12:43:96:a1:48:7f:73:92:3f:
43:98:94:6a:c3:fd:f1:3a:f6:d5:92:18:b5:17:75:
c8:ee:a9:34:16:75:da:74:db:06:61:d1:c0:6c:8f:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:B0:98:05:3A:E3:99:39:07:ED:AA:E4:83:9C:EC:CD:39:19:3A
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/9yOwmAU645k5B-2q5IOc7M05GTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/22
80.85.248.0/21
176.119.0.0/21
178.159.32.0/23
185.159.111.0/24
185.228.48.0/22
185.247.192.0/22
188.64.149.0-188.64.151.255
193.19.100.0/23
193.141.230.0/23
193.142.20.0/23
193.246.144.0/24
193.246.150.0/24
193.246.153.0/24
193.246.159.0/24
203.81.208.0/20
IPv6:
2a0c:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
38:71:cc:00:36:eb:ff:7f:03:fc:c8:30:24:db:59:67:b1:cd:
6e:5b:9e:c4:77:22:2b:2e:99:ab:7c:04:0d:6b:76:56:93:1b:
05:cc:fb:a6:aa:ba:a9:9a:09:bf:df:c6:a6:1c:d3:70:0c:ec:
14:4f:1f:5a:ec:fb:9f:af:fb:dd:ee:73:5e:77:f7:45:d5:10:
66:1e:59:2c:fa:4c:a2:0e:c2:ab:f1:29:63:42:3d:ce:35:6f:
ca:1c:c5:13:9b:7f:47:5b:94:7b:c7:2d:f1:6a:ae:a8:f5:84:
f2:33:b8:a7:01:f3:f5:06:70:a0:5f:41:63:ec:7c:6e:ae:ec:
af:3f:96:38:4e:25:31:b5:62:c6:3a:ce:5f:c8:60:97:bd:2c:
d1:8d:9c:94:44:45:a2:cb:a2:2a:86:b5:44:0e:fd:bb:ba:f1:
4c:e3:82:5a:e2:0a:a8:4d:91:42:3e:0a:c0:40:ff:79:a9:7c:
e7:ce:2b:65:31:62:31:33:ee:46:3a:55:83:19:e1:f9:a0:0b:
ba:9a:09:ad:26:82:c9:87:5d:dd:71:d5:d5:04:c2:0f:24:0c:
f6:fd:9b:dd:e1:c0:f2:5b:6b:43:2a:4c:57:c7:c3:ed:01:b0:
9d:8a:ab:94:d5:0b:55:ce:81:97:e3:84:57:4f:24:2e:6d:13:
86:aa:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:39 2025 by rpki-client