Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1GI9sMOPm1Az-xJ5QH3D9jT4mJ0.roa
File: 1GI9sMOPm1Az-xJ5QH3D9jT4mJ0.roa (raw, json)
Hash identifier: Tb2zimAo+bAVUUDH9ADVjrXPGfUBctjbyLmwj0YdROk=
Subject key identifier: D4:62:3D:B0:C3:8F:9B:50:33:FB:12:79:40:7D:C3:F6:34:F8:98:9D
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01983DCAEAE7F190C366FF43F14FC8D9B800
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1GI9sMOPm1Az-xJ5QH3D9jT4mJ0.roa
Signing time: Thu 24 Jul 2025 18:56:05 +0000
ROA not before: Thu 24 Jul 2025 18:56:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.61.60.0/23 maxlen: 23
5.61.62.0/23 maxlen: 23
45.136.196.0/24 maxlen: 24
45.136.197.0/24 maxlen: 24
45.136.198.0/24 maxlen: 24
45.136.199.0/24 maxlen: 24
92.63.226.0/24 maxlen: 24
114.129.8.0/24 maxlen: 24
148.222.184.0/24 maxlen: 24
176.97.64.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.70.0/23 maxlen: 23
176.97.72.0/24 maxlen: 24
176.97.73.0/24 maxlen: 24
176.97.75.0/24 maxlen: 24
176.97.76.0/24 maxlen: 24
176.97.77.0/24 maxlen: 24
176.97.78.0/24 maxlen: 24
185.87.148.0/23 maxlen: 23
185.87.150.0/23 maxlen: 23
185.132.125.0/24 maxlen: 24
188.116.22.0/24 maxlen: 24
195.54.170.0/24 maxlen: 24
195.54.171.0/24 maxlen: 24
2a02:c6c1:4::/48 maxlen: 48
2a02:c6c1:5::/48 maxlen: 48
2a02:c6c1:6::/48 maxlen: 48
2a02:c6c1:7::/48 maxlen: 48
2a02:c6c1:8::/48 maxlen: 48
2a02:c6c1:9::/48 maxlen: 48
2a02:c6c1:a::/48 maxlen: 48
2a02:c6c1:b::/48 maxlen: 48
2a02:c6c1:143::/48 maxlen: 48
2a0c:6742::/48 maxlen: 48
2a0e:a7c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:ca:ea:e7:f1:90:c3:66:ff:43:f1:4f:c8:d9:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 24 18:56:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4623db0c38f9b5033fb1279407dc3f634f8989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:5a:2b:c1:69:85:f5:7f:b5:a3:96:5e:91:
9a:dd:04:bd:e6:e3:10:5d:4d:42:d8:e7:d8:7a:a0:
37:a9:ad:7e:9d:e2:26:d0:ef:d6:ca:98:20:73:9a:
c8:8b:b5:a8:c9:05:96:ca:ea:1c:19:ee:a3:47:d0:
e1:4f:70:11:54:ea:ad:33:c6:21:31:2b:a2:30:d1:
f5:e7:f9:6a:ed:5e:f6:75:fe:cf:e5:da:df:5c:25:
f2:4b:69:30:e3:e4:ff:0a:a8:8a:f3:48:b6:3f:ee:
a7:af:ff:eb:50:b4:c1:c5:3e:7a:04:64:38:b0:16:
f7:20:38:8b:55:23:a6:8c:2a:6a:c3:73:63:69:7a:
91:81:aa:ba:72:9f:f3:ec:4c:0c:13:cc:79:c5:1d:
35:36:a7:c6:77:58:1b:33:ea:51:24:76:04:fb:0f:
3c:46:46:13:83:06:ed:d0:52:a7:0f:e8:8b:47:97:
15:27:8d:cc:7c:ef:d0:7a:e2:d6:62:c7:49:a3:57:
ec:13:ee:a1:a2:d0:d4:e7:c8:e0:0b:1b:9f:61:9a:
98:de:7e:c9:14:28:f4:d7:a1:02:39:d0:bd:0c:57:
00:61:7c:ec:a0:32:96:17:28:c7:bb:4e:59:3e:b1:
e3:a2:f6:ab:dc:2d:14:e4:f2:3b:c2:79:0b:cd:a9:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:3D:B0:C3:8F:9B:50:33:FB:12:79:40:7D:C3:F6:34:F8:98:9D
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1GI9sMOPm1Az-xJ5QH3D9jT4mJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
45.136.196.0/22
92.63.226.0/24
114.129.8.0/24
148.222.184.0/24
176.97.64.0-176.97.73.255
176.97.75.0-176.97.78.255
185.87.148.0/22
185.132.125.0/24
188.116.22.0/24
195.54.170.0/23
IPv6:
2a02:c6c1:4::-2a02:c6c1:b:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:143::/48
2a0c:6742::/48
2a0e:a7c1::/48
Signature Algorithm: sha256WithRSAEncryption
8d:ad:45:58:50:c1:e6:76:62:fc:a3:45:2a:2a:a8:74:a7:99:
84:38:fb:0b:f9:53:1d:ba:ec:2d:36:46:7d:3d:f0:c0:79:0a:
d0:a6:1a:8e:cb:3b:85:e4:d5:64:7a:85:c7:1d:d1:d8:e3:7c:
29:62:b9:54:b8:fe:15:f3:63:72:5b:d6:28:f0:25:c5:62:d4:
e3:03:4b:99:cd:e8:fb:7e:de:82:1d:53:8f:bc:87:ff:50:04:
8e:3c:62:52:3c:a7:80:00:be:b1:bd:c2:36:5a:37:43:9a:23:
92:6c:dd:d5:6c:b1:84:82:6d:0d:15:69:62:86:0e:16:fa:78:
76:50:ac:bf:4b:ff:f2:ec:30:0a:f4:d3:e7:f0:b6:e5:18:e6:
be:81:a0:3b:6b:7a:e6:8d:c0:e8:37:d2:27:06:44:a1:e7:9f:
f6:df:13:89:7f:66:10:1d:e8:50:09:5f:0d:ec:69:f5:84:5e:
98:a7:51:fb:3c:c5:66:12:d4:f4:f1:ac:9f:a9:0c:bf:8d:0b:
a2:60:a0:9f:0c:8a:89:ae:98:ce:dc:ef:ab:33:57:6b:cf:6b:
e2:d1:14:0c:b7:49:65:3f:68:48:02:e1:e0:e5:80:e7:e0:06:
36:77:a9:6e:04:a6:8e:6a:f1:a8:ee:8a:3f:17:c2:ca:77:29:
1f:7a:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:15 2025 by rpki-client