Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xTOEhh9p4RymiNQwcgDkIPoWXig.roa
File: xTOEhh9p4RymiNQwcgDkIPoWXig.roa (raw, json)
Hash identifier: dJQebYvpjiRqOOdAVW03HWmkL2dz2Gf6xmn3pLChPFw=
Subject key identifier: C5:33:84:86:1F:69:E1:1C:A6:88:D4:30:72:00:E4:20:FA:16:5E:28
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0196A5E945718DC461DE15D85DCEFC4679F5
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xTOEhh9p4RymiNQwcgDkIPoWXig.roa
Signing time: Tue 06 May 2025 14:04:10 +0000
ROA not before: Tue 06 May 2025 14:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/24 maxlen: 24
85.142.76.0/24 maxlen: 24
85.142.81.0/24 maxlen: 24
85.142.82.0/24 maxlen: 24
85.142.84.0/23 maxlen: 24
85.142.87.0/24 maxlen: 24
85.142.99.0/24 maxlen: 24
85.142.100.0/23 maxlen: 24
85.142.113.0/24 maxlen: 24
85.142.115.0/24 maxlen: 24
85.142.128.0/20 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.244.0/24 maxlen: 24
85.142.246.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.253.0/24 maxlen: 24
85.142.254.0/23 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
85.143.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e9:45:71:8d:c4:61:de:15:d8:5d:ce:fc:46:79:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: May 6 14:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c53384861f69e11ca688d4307200e420fa165e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:b6:2d:2d:b9:f2:d1:4f:9d:a4:27:37:22:
db:9b:0e:07:c7:6e:67:86:4e:63:51:b1:e2:38:ce:
ae:2e:c1:cc:d4:db:40:be:b9:1a:3d:fb:46:96:7f:
3c:69:9c:28:fa:7d:5a:be:a7:38:77:9e:f0:de:f5:
ad:6e:95:8d:bb:1d:a6:49:b3:3a:00:06:1f:e0:a1:
cc:4c:ca:66:b9:22:ed:06:fb:f9:6d:dc:97:a4:78:
3a:fc:bd:5f:35:05:dc:06:dc:fc:24:b5:e8:30:b7:
4f:3f:d0:7f:29:d3:82:40:4e:5b:04:09:8f:80:42:
de:ba:8d:dc:1b:c6:0d:81:e2:e6:1b:57:b6:ad:b5:
a3:0f:3c:d9:4c:ea:a3:5c:b1:a0:3b:1f:81:ec:72:
df:a2:2f:5a:a6:13:f9:d9:b3:cd:fe:ef:b4:a1:66:
06:2a:b9:46:58:06:da:a8:72:d1:f7:6c:d9:5e:08:
68:1e:79:bd:92:42:c2:db:1a:62:21:2c:8b:2e:c0:
0f:7c:19:9e:c2:75:32:59:7f:ef:6f:96:e4:83:d7:
34:71:47:1c:e1:9a:6f:fe:87:b7:bc:b2:44:32:b9:
71:84:47:1a:47:b7:f9:e2:2d:9f:48:d9:e2:5f:f1:
f5:21:8f:82:c6:0f:54:52:e2:33:5e:bd:39:03:08:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:84:86:1F:69:E1:1C:A6:88:D4:30:72:00:E4:20:FA:16:5E:28
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xTOEhh9p4RymiNQwcgDkIPoWXig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0/24
85.142.76.0/24
85.142.81.0-85.142.82.255
85.142.84.0/23
85.142.87.0/24
85.142.99.0-85.142.101.255
85.142.113.0/24
85.142.115.0/24
85.142.128.0/20
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.244.0/24
85.142.246.0/24
85.142.250.0/24
85.142.253.0-85.142.255.255
85.143.41.0-85.143.44.255
85.143.48.0/22
Signature Algorithm: sha256WithRSAEncryption
86:62:c5:63:97:ce:63:c0:6e:a6:0d:6f:4b:90:f4:26:1a:e0:
62:d7:cb:bd:a9:3c:1b:68:7e:6b:5b:93:c5:75:d3:88:6b:7c:
86:64:48:5e:89:85:be:41:0d:94:b6:3a:4c:be:f9:9a:ab:a6:
b3:18:f8:c2:5a:f5:76:ee:73:66:16:32:3e:36:40:74:ee:ba:
b2:16:63:71:31:75:36:57:dc:a4:3a:32:51:dd:fd:60:46:62:
01:af:a2:41:07:11:69:fe:e0:09:07:30:ed:3a:e9:ae:a9:80:
62:23:9d:55:bd:d2:e5:b1:21:f2:d6:9f:ee:10:1b:58:cd:c7:
3c:f1:4f:75:73:7f:72:a9:64:0c:66:0e:11:fd:99:a9:5e:1c:
58:2e:ea:e3:fc:0b:45:b4:bf:bc:db:4d:a9:33:1e:61:61:64:
59:21:d3:8e:3f:90:a7:04:1b:78:9b:e3:71:1e:19:e9:c5:26:
88:ee:2d:75:db:a4:fb:7a:26:75:e9:7f:ed:db:09:d2:56:3c:
08:42:a7:29:63:7d:9e:22:17:2b:1b:28:23:b6:57:62:cd:7a:
75:3d:1c:4c:7e:3d:46:7e:6b:34:d3:3a:64:7b:8b:ee:eb:2d:
43:a4:60:fe:c4:d0:54:a3:1c:42:46:a3:ef:48:8d:d0:66:87:
43:f0:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:02:59 2025 by rpki-client