Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eklIh11j7mom2tuU95QmgABo-2E.roa
File: eklIh11j7mom2tuU95QmgABo-2E.roa (raw, json)
Hash identifier: 8OSQTZ+AYD0+vVdlIYaV9gv1gJUtdQ/zC3XZpQiN6Ag=
Subject key identifier: 7A:49:48:87:5D:63:EE:6A:26:DA:DB:94:F7:94:26:80:00:68:FB:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01988F7F61B32E61EDD13051EC501E647443
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eklIh11j7mom2tuU95QmgABo-2E.roa
Signing time: Sat 09 Aug 2025 15:42:26 +0000
ROA not before: Sat 09 Aug 2025 15:42:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.131.186.0/24 maxlen: 24
45.136.136.0/24 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:7f:61:b3:2e:61:ed:d1:30:51:ec:50:1e:64:74:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 9 15:42:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a4948875d63ee6a26dadb94f79426800068fb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:23:f8:78:f6:40:b5:f6:c4:62:89:fa:72:
bd:db:c5:3c:40:8b:ff:77:52:61:df:a6:d9:40:1e:
17:eb:95:15:60:87:f8:b5:f4:83:39:a5:68:6a:0d:
c1:df:d5:b2:51:a6:ba:39:3c:94:10:ef:d6:2e:fc:
8b:b4:26:45:ed:7e:29:38:83:78:55:7c:c9:df:a8:
69:50:ca:3e:3e:97:0f:bd:98:88:a4:32:be:15:37:
86:6e:68:56:4e:f4:86:cc:f6:01:14:21:2e:33:ef:
01:65:c5:16:0a:0f:9b:6d:fd:4a:c6:39:d6:41:99:
5e:6e:20:81:87:f5:66:02:62:03:17:45:f8:2b:f0:
9e:d4:ac:b9:b5:4a:8c:62:9f:db:ed:f5:ae:84:fb:
c6:c0:00:35:99:45:aa:4b:f9:ba:6f:8f:a7:e6:ac:
b2:1c:51:6a:13:1f:8d:da:45:75:5c:6a:cc:df:b8:
56:9d:ee:b8:06:5a:bb:c9:e2:55:4a:d6:35:52:86:
c8:5a:8e:ef:a1:59:08:18:bf:89:89:94:16:98:48:
70:3c:e6:20:ed:4f:6f:1b:12:13:f3:39:a0:d4:ab:
d0:37:01:de:e9:a9:b1:28:4b:a3:39:6a:ce:54:c8:
ba:d1:49:23:a3:67:b0:66:3a:e4:fd:f7:de:be:bc:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:49:48:87:5D:63:EE:6A:26:DA:DB:94:F7:94:26:80:00:68:FB:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eklIh11j7mom2tuU95QmgABo-2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
45.136.136.0/23
45.136.139.0/24
185.102.84.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
72:52:61:01:11:af:da:dc:94:9d:dd:a7:a8:a1:1f:60:a6:9b:
60:6b:11:9c:56:c0:cf:4f:37:29:5c:c6:a6:d2:6f:02:58:df:
36:36:d2:08:a9:6c:81:ea:df:a4:73:2f:39:fe:a1:cd:3a:0d:
0f:4d:b3:59:62:37:96:b0:79:f3:80:ac:fe:aa:d1:73:82:e6:
6a:eb:e1:c7:96:6b:3b:21:87:1c:6c:c8:25:22:72:20:c0:a0:
63:d6:fa:34:91:87:c6:2e:6e:7d:65:1d:b8:00:67:a6:c6:c3:
61:8b:8f:71:f0:8d:d4:dd:17:5c:71:08:08:04:7d:20:08:04:
22:aa:da:b2:cd:12:ff:23:59:92:f8:c2:9a:67:0b:03:e2:6b:
91:a2:32:cd:7d:f1:09:e9:14:1a:ee:16:a7:00:25:42:85:38:
9f:c2:7b:7a:d2:95:64:fb:46:14:04:4d:ce:ff:ad:94:f0:ea:
5e:6d:b3:86:96:5e:55:2b:7a:29:26:b8:dd:37:ac:b4:75:58:
69:37:04:2f:a8:11:e6:a3:f9:88:4f:dc:79:de:05:aa:5d:41:
51:27:87:0c:8d:8d:fc:3e:1e:c1:60:4a:d3:1c:64:d4:d5:86:
cb:f1:90:ba:e5:2d:09:c3:83:2c:4a:bc:51:a1:32:6f:7f:c7:
7b:fc:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:46:58 2025 by rpki-client