Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Lf1cCl1IpFmYHIudcOFMfjDfEHo.roa
File: Lf1cCl1IpFmYHIudcOFMfjDfEHo.roa (raw, json)
Hash identifier: KjEuRJMPD034xqLQUzhOXBLOQ1h7H0ojX7rXNXHplxI=
Subject key identifier: 2D:FD:5C:0A:5D:48:A4:59:98:1C:8B:9D:70:E1:4C:7E:30:DF:10:7A
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01987A81350A17DEAE8D6A4EF19505FE7F3B
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Lf1cCl1IpFmYHIudcOFMfjDfEHo.roa
Signing time: Tue 05 Aug 2025 13:52:24 +0000
ROA not before: Tue 05 Aug 2025 13:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:81:35:0a:17:de:ae:8d:6a:4e:f1:95:05:fe:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 5 13:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dfd5c0a5d48a459981c8b9d70e14c7e30df107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:43:57:6d:c0:02:8a:9b:f6:6e:e6:c0:b5:
81:51:cf:64:84:a7:d7:10:02:c9:a6:54:ce:67:54:
c9:f5:90:bb:69:b3:5d:d7:be:aa:b5:27:23:7d:5b:
dd:5e:aa:52:85:f0:89:ec:e4:d9:3d:59:84:e1:6d:
73:b5:d1:7f:11:27:ef:e5:25:4b:e3:48:16:9e:8f:
0d:2f:1a:09:2b:a2:cc:72:9f:76:b2:98:28:46:69:
6d:08:e0:9d:d2:f0:b6:fc:1b:03:7d:de:a0:5c:4e:
b7:c7:19:09:e5:36:ce:16:b9:e4:07:14:6d:36:68:
71:6b:8e:f1:3c:14:63:bf:6d:d1:82:3d:03:4b:c6:
ec:4a:df:18:52:bf:2d:48:6b:a9:fd:73:08:fd:a3:
e7:e7:d7:4d:f1:3d:fd:cd:f8:d0:a3:cf:e2:47:f4:
e4:ff:bc:6d:19:fb:65:1f:9a:ef:49:de:1f:8e:31:
91:fd:70:86:a4:b5:71:b2:7b:5c:0a:2e:d0:e8:79:
c8:7d:63:e0:d9:f5:2a:7b:ee:b6:2d:cb:25:54:67:
0e:03:0b:7f:c4:90:1a:70:2f:bb:fa:56:79:d5:7f:
7e:75:17:31:25:c2:37:2e:7c:98:3e:9c:d3:79:e5:
40:c5:fd:56:c9:13:c7:43:55:3a:68:0d:d4:de:dc:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:5C:0A:5D:48:A4:59:98:1C:8B:9D:70:E1:4C:7E:30:DF:10:7A
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Lf1cCl1IpFmYHIudcOFMfjDfEHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.212.0/22
46.102.106.0/24
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
92.63.224.0/24
176.98.40.0/24
185.109.48.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:e0:ae:f6:df:cb:c0:0a:a0:fa:fb:b1:b0:9f:f3:56:47:d0:
42:47:13:e7:9a:0e:05:cf:a2:42:8a:a5:40:76:af:4f:d6:b4:
1c:8d:51:ef:d4:78:7e:a8:12:bb:94:cc:54:fd:6f:67:8b:0a:
de:9b:1a:71:76:ab:99:30:a8:8a:a8:ff:e6:a3:24:30:8b:62:
ea:d7:18:ce:df:58:51:48:5c:8b:aa:09:e5:5f:2c:25:f1:92:
93:f3:8b:d8:25:94:7e:a9:61:86:86:f2:b4:55:37:63:3b:16:
0a:92:69:f6:e6:90:f4:b6:22:19:ae:4c:b2:96:81:5d:8c:35:
72:a3:01:99:c8:ea:d2:c9:b1:a6:62:84:32:79:e2:82:d3:b8:
c3:c8:9c:b0:f0:cd:09:fb:a2:41:79:a5:99:e6:c0:88:7f:e6:
84:6b:3c:b7:ac:17:0c:29:07:5c:87:de:78:87:1b:1b:f2:7a:
7e:f7:de:d2:9c:d4:ae:b4:3d:98:8d:e6:c6:f8:95:8a:4c:6a:
91:4d:e5:df:42:2c:65:cd:d2:0c:6e:e3:51:3e:aa:47:e2:a5:
7d:d5:16:4c:a3:f0:b3:8d:e5:a4:57:a0:ca:32:03:1d:f4:81:
7e:54:72:6f:87:3f:06:dc:bf:e5:47:0e:0d:4c:17:18:c4:66:
af:44:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:01 2025 by rpki-client