Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/2CMmm-IO3y31CC1PnY_uGGrhn9w.roa
File: 2CMmm-IO3y31CC1PnY_uGGrhn9w.roa (raw, json)
Hash identifier: 4X4+4X/uOYbuErCckaKak0v4fA7/5gtq1a9L2A4Lw/g=
Subject key identifier: D8:23:26:9B:E2:0E:DF:2D:F5:08:2D:4F:9D:8F:EE:18:6A:E1:9F:DC
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01987572B793BC45E21EDB5D1363B1773F10
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/2CMmm-IO3y31CC1PnY_uGGrhn9w.roa
Signing time: Mon 04 Aug 2025 14:18:29 +0000
ROA not before: Mon 04 Aug 2025 14:18:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 932
IP address blocks: 45.83.236.0/24 maxlen: 24
45.150.198.0/23 maxlen: 24
91.208.73.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
2a12:ab80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:72:b7:93:bc:45:e2:1e:db:5d:13:63:b1:77:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 4 14:18:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d823269be20edf2df5082d4f9d8fee186ae19fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:05:40:1f:65:ca:db:18:dc:27:ab:dd:74:
f6:22:44:97:b8:eb:9b:4a:eb:3c:cb:d2:d3:fe:81:
da:13:7f:9f:18:e8:3f:3a:2c:6a:9a:e2:c8:2d:6b:
a7:16:03:30:eb:ef:f5:55:be:5d:9d:82:b9:a0:a8:
50:72:b2:ef:4c:1b:5d:6b:5c:ad:80:cc:98:01:5f:
93:cd:16:ff:0a:d7:19:da:30:e9:26:a3:1a:27:ce:
6d:aa:bd:c5:67:eb:74:67:fe:eb:da:a3:bb:bb:64:
ca:e1:52:72:e5:97:d8:f8:07:a8:33:6f:f7:ac:e9:
c8:7a:ad:a1:35:b1:ef:70:5f:42:65:70:c7:08:8c:
32:68:75:f9:cd:7d:26:08:d9:f3:79:27:18:18:c6:
f4:00:52:b4:ad:00:69:51:e4:bb:5b:02:95:e8:6c:
71:95:5a:33:57:db:fc:b6:5e:aa:74:b3:c4:81:27:
f5:89:57:01:f1:90:84:35:79:62:2d:3f:e9:d5:a5:
3e:32:52:3b:bd:ed:35:4c:16:27:cb:ca:c6:07:40:
ec:e5:14:dd:9a:02:e4:c0:88:72:93:cd:0d:39:22:
7a:f4:a5:ba:15:5f:9e:f7:ef:9d:1a:85:77:de:59:
a5:38:19:e3:3a:1a:37:ed:55:86:77:f2:58:0c:fc:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:26:9B:E2:0E:DF:2D:F5:08:2D:4F:9D:8F:EE:18:6A:E1:9F:DC
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/2CMmm-IO3y31CC1PnY_uGGrhn9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.236.0/24
45.150.198.0/23
91.208.73.0/24
91.208.104.0/24
91.213.200.0/24
91.217.135.0/24
IPv6:
2a12:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
60:a3:fa:8a:00:af:6e:f2:74:aa:af:3a:a6:be:b2:cf:4a:a7:
f9:c2:93:13:a2:c0:66:50:93:8a:54:65:6f:ec:d5:67:f3:1e:
6e:9f:92:5e:e9:2d:e0:53:53:ed:ec:5c:47:30:47:f2:2d:5d:
ef:88:28:ba:49:69:5b:8b:c8:7a:49:99:cb:5e:53:9e:5f:e8:
fc:4d:e2:c8:a0:ea:be:1c:58:c3:1f:4c:3e:30:e9:d0:20:f5:
89:cb:de:b3:5b:20:17:8f:95:3f:42:32:c2:cf:47:19:bb:27:
bb:a6:6b:dd:36:ad:ee:dd:be:78:8d:bc:5e:b5:0f:71:a4:3c:
91:86:da:35:96:2d:7c:7f:64:e9:15:4e:31:1b:c2:c6:bf:5b:
f6:48:4e:75:7f:36:23:a8:f1:1e:eb:c5:bc:6f:3a:3c:a7:d8:
0c:2d:35:0a:61:65:33:11:67:db:d3:63:ff:5a:bf:69:93:3b:
d3:67:e0:6b:33:ba:10:c6:8f:94:79:e4:3f:8e:bd:01:e3:f8:
b8:c7:c7:18:ca:df:f0:0b:f0:71:16:71:d2:e8:ee:ef:d0:5c:
e3:dd:39:e6:9b:b7:ff:ec:bf:23:2c:95:96:6c:ca:e7:33:24:
bb:e7:5b:0b:da:eb:e9:62:be:86:33:41:f6:01:a8:0c:75:ba:
31:13:a8:84
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZh1creTvEXiHttdE2Oxdz8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwODA0MTQxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODIzMjY5YmUyMGVkZjJkZjUwODJkNGY5ZDhmZWUxODZhZTE5ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVcFQB9lytsY3Cer3XT2IkSXuOub
Sus8y9LT/oHaE3+fGOg/OixqmuLILWunFgMw6+/1Vb5dnYK5oKhQcrLvTBtda1yt
gMyYAV+TzRb/CtcZ2jDpJqMaJ85tqr3FZ+t0Z/7r2qO7u2TK4VJy5ZfY+AeoM2/3
rOnIeq2hNbHvcF9CZXDHCIwyaHX5zX0mCNnzeScYGMb0AFK0rQBpUeS7WwKV6Gxx
lVozV9v8tl6qdLPEgSf1iVcB8ZCENXliLT/p1aU+MlI7ve01TBYny8rGB0Ds5RTd
mgLkwIhyk80NOSJ69KW6FV+e9++dGoV33lmlOBnjOho37VWGd/JYDPzSnwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFNgjJpviDt8t9QgtT52P7hhq4Z/cMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvMkNNbW0tSU8zeTMxQ0MxUG5ZX3VHR3Jobjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQALVPsAwQB
LZbGAwQAW9BJAwQAW9BoAwQAW9XIAwQAW9mHMA0EAgACMAcDBQMqEquAMA0GCSqG
SIb3DQEBCwUAA4IBAQBgo/qKAK9u8nSqrzqmvrLPSqf5wpMTosBmUJOKVGVv7NVn
8x5un5Je6S3gU1Pt7FxHMEfyLV3viCi6SWlbi8h6SZnLXlOeX+j8TeLIoOq+HFjD
H0w+MOnQIPWJy96zWyAXj5U/QjLCz0cZuye7pmvdNq3u3b54jbxetQ9xpDyRhto1
li18f2TpFU4xG8LGv1v2SE51fzYjqPEe68W8bzo8p9gMLTUKYWUzEWfb02P/Wr9p
kzvTZ+BrM7oQxo+UeeQ/jr0B4/i4x8cYyt/wC/BxFnHS6O7v0Fzj3Tnmm7f/7L8j
LJWWbMrnMyS751sL2uvpYr6GM0H2AagMdboxE6iE
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:01 2025 by rpki-client