
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa
File: j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa (raw, json)
Hash identifier: bJ01HQANAS/OiptPUmVVckwNOFEFT58VNH/38hKXIpc=
Subject key identifier: 8F:69:EE:3C:77:5C:A2:A5:5F:6F:F8:39:09:07:4B:2C:0E:90:9A:AF
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01985AF9FB7C30D7AE3D7807B99F43ACBEB5
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa
Signing time: Wed 30 Jul 2025 10:56:28 +0000
ROA not before: Wed 30 Jul 2025 10:56:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 45.83.186.0/23 maxlen: 23
45.83.186.0/24 maxlen: 24
45.83.187.0/24 maxlen: 24
45.86.28.0/22 maxlen: 22
45.86.28.0/23 maxlen: 23
45.86.28.0/24 maxlen: 24
45.86.29.0/24 maxlen: 24
45.86.30.0/24 maxlen: 24
45.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:f9:fb:7c:30:d7:ae:3d:78:07:b9:9f:43:ac:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jul 30 10:56:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f69ee3c775ca2a55f6ff83909074b2c0e909aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:66:8f:98:7f:77:05:79:f9:74:a7:78:33:
8d:40:c9:39:39:46:89:0b:68:38:f5:d2:74:84:57:
e2:02:1e:d2:12:ab:61:ba:4d:c9:36:93:14:99:7a:
37:38:5b:c0:2d:30:96:4a:a3:cf:05:e5:12:36:6d:
3d:dd:40:7d:bb:0f:85:d1:4a:bf:9c:09:4e:2c:3b:
66:58:3a:9a:88:35:2a:ad:f9:2f:8a:55:e3:67:94:
b0:65:1e:22:71:52:71:f2:b5:9f:37:39:97:a9:6d:
af:e3:95:77:b2:85:94:18:6b:42:a9:57:39:e8:db:
47:8b:63:b3:bb:7b:76:88:25:e2:e4:c9:47:e7:7a:
8d:4d:e9:2e:94:43:97:9c:9c:02:8a:ad:16:38:3d:
cf:fb:c6:6a:1a:0e:68:f7:c8:9d:84:85:d7:00:fe:
6f:cf:40:8c:84:1f:9a:d5:89:0d:66:cd:0e:83:a9:
ce:63:ce:1a:c9:f5:12:71:02:9b:1e:af:07:87:d1:
5c:12:6f:9e:1b:4a:fb:b3:65:3d:f4:b1:43:7f:ed:
7c:8e:d1:0e:04:a3:b6:ed:9e:08:7e:a6:e0:09:c0:
b8:e5:bb:71:70:a8:00:e1:fa:2e:8f:0d:a2:0a:eb:
c5:be:45:02:78:b1:82:03:b7:04:37:86:05:57:60:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:EE:3C:77:5C:A2:A5:5F:6F:F8:39:09:07:4B:2C:0E:90:9A:AF
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.186.0/23
45.86.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:bb:e7:66:4a:b9:cc:15:c7:d4:c1:2d:16:be:18:78:00:9c:
ae:71:4c:03:93:6b:74:a6:f4:19:f4:75:d3:4e:8e:89:5f:5e:
7b:d0:48:2d:08:66:c8:a4:a5:ee:29:4c:0c:90:38:12:f4:9d:
0a:cb:b6:b7:50:ae:8a:d6:d5:c2:86:f9:b8:64:49:3e:8a:50:
62:89:cb:ee:91:7b:2b:b6:de:95:d7:ce:a6:aa:c1:3f:c8:f6:
c2:10:bb:f3:e2:e5:11:9e:3f:66:cd:78:2c:e2:8f:03:4f:38:
be:cb:89:b8:b6:77:cd:43:93:0f:01:de:83:b4:74:cf:bc:d5:
27:fb:4c:dc:79:a8:bc:d6:cb:43:81:ab:67:05:6e:5b:a2:cd:
40:d1:56:27:9a:8c:fe:62:95:f4:ed:42:dc:31:bd:a0:78:c5:
33:9f:8c:45:d9:f0:c2:e3:22:d3:fa:61:72:91:74:7c:ee:c4:
a8:22:13:e0:0b:72:66:86:f7:a1:01:82:54:7c:c1:a0:15:bd:
02:b8:59:b3:ad:75:b5:cb:84:75:2b:7e:63:5b:a0:fb:18:dd:
7f:62:3e:91:ce:8b:69:29:e2:9b:d0:d2:13:ec:9a:1b:8c:55:
88:e5:a2:fa:94:ba:76:47:aa:4d:7b:6b:16:b7:af:0c:6f:77:
44:7e:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:13 2025 by rpki-client