Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Av5SzJRRD3vy1EqO8zaw2x8AxeQ.roa
File: Av5SzJRRD3vy1EqO8zaw2x8AxeQ.roa (raw, json)
Hash identifier: YTI+eqyFUqGOTtLUCbS/Mne8jMXOnPny4QloLqsehFk=
Subject key identifier: 02:FE:52:CC:94:51:0F:7B:F2:D4:4A:8E:F3:36:B0:DB:1F:00:C5:E4
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01985184996BDF3D3302EBBEFC80424F7FAC
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Av5SzJRRD3vy1EqO8zaw2x8AxeQ.roa
Signing time: Mon 28 Jul 2025 14:51:41 +0000
ROA not before: Mon 28 Jul 2025 14:51:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.0.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.192.0/20 maxlen: 20
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.0.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.0.0/24 maxlen: 24
89.124.128.0/18 maxlen: 18
89.124.192.0/19 maxlen: 19
89.124.224.0/20 maxlen: 20
89.124.245.0/24 maxlen: 24
89.124.248.0/21 maxlen: 21
89.125.0.0/16 maxlen: 16
89.126.0.0/22 maxlen: 22
89.126.4.0/22 maxlen: 22
89.126.8.0/22 maxlen: 22
89.126.12.0/22 maxlen: 22
89.126.16.0/22 maxlen: 22
89.126.20.0/22 maxlen: 22
89.126.24.0/22 maxlen: 22
89.126.28.0/22 maxlen: 22
89.127.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
89.127.192.0/19 maxlen: 19
89.127.224.0/20 maxlen: 20
89.127.240.0/21 maxlen: 21
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:84:99:6b:df:3d:33:02:eb:be:fc:80:42:4f:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jul 28 14:51:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02fe52cc94510f7bf2d44a8ef336b0db1f00c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:63:f2:52:19:ab:9f:9a:5e:ef:d5:e5:5c:
55:7d:43:41:eb:0b:6d:16:a6:cb:cc:32:35:2e:7b:
f8:f0:bc:d8:78:5b:d1:cb:f1:ee:86:b9:c3:78:f5:
5f:a2:1c:da:e5:f3:01:fa:ae:dc:71:08:ea:b2:0e:
fb:e2:f7:d4:e3:82:2d:7f:ee:45:18:22:f0:f7:90:
9b:0e:a1:e3:11:91:58:72:c1:71:6d:3f:7c:79:cd:
ea:2c:a3:61:82:8b:5d:37:f7:1a:ab:b3:5b:ec:56:
1d:09:18:3d:45:84:00:4f:ee:91:2d:e4:f5:de:a9:
c9:ff:b7:a6:50:c1:97:cd:4f:52:f2:69:9d:7e:9e:
51:81:41:b6:69:50:09:6c:83:06:bc:f0:bc:85:78:
5a:99:8d:38:4c:30:aa:86:5a:c9:ce:34:37:08:f6:
c3:c5:25:3b:fb:68:36:48:d7:91:10:59:fe:10:52:
95:31:b7:ba:72:d5:54:1a:bd:8c:95:0c:20:d1:43:
50:e3:dd:8f:cb:05:47:2c:d6:35:b2:ed:58:96:0e:
60:7d:4c:de:5a:ed:54:f6:2d:5e:e2:72:6f:fa:10:
41:a4:a0:9b:9f:c0:ee:ef:53:6b:c1:09:ff:33:1e:
ce:a6:62:59:06:9c:71:a2:8f:d9:8a:20:99:f1:55:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:52:CC:94:51:0F:7B:F2:D4:4A:8E:F3:36:B0:DB:1F:00:C5:E4
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Av5SzJRRD3vy1EqO8zaw2x8AxeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.87.255
87.192.192.0/20
87.192.216.0/22
87.192.222.0/23
87.232.0.0/19
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.0.0/24
89.124.128.0-89.124.239.255
89.124.245.0/24
89.124.248.0-89.126.31.255
89.127.0.0-89.127.251.255
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
85:44:c4:d5:fb:4e:0d:4f:64:81:cd:e5:b3:95:a6:f0:cb:9b:
f6:a5:fd:b5:77:0f:58:8b:0c:7e:f1:b9:61:af:5d:15:75:f0:
70:87:db:df:9a:75:ba:81:b7:a5:25:58:b9:79:5c:79:78:2a:
6f:b2:bb:eb:f3:76:39:05:8f:f1:e9:85:8a:a9:fb:b3:b1:22:
37:89:ec:48:eb:84:7f:48:3c:f3:ef:cb:b1:0e:08:57:6d:38:
87:62:9e:43:f6:60:8b:ec:e4:00:b2:13:cd:e2:c0:7e:dd:43:
6e:91:15:56:d6:b5:95:2a:88:79:fe:fd:6e:dc:ab:46:f2:5b:
09:6e:c9:75:66:58:2e:b9:fd:de:58:46:c4:15:bb:1e:43:69:
5a:d9:49:da:94:89:ca:ee:8d:a5:8e:1e:e8:47:98:d7:49:96:
8c:ab:c9:39:d4:eb:31:49:cb:20:2b:8e:47:5d:33:bb:fa:81:
11:db:4a:79:b6:c5:6e:d4:19:2b:d7:cc:15:fc:d6:ec:ee:20:
2c:80:1e:b1:a1:d5:87:67:9d:c8:ef:27:fb:67:57:59:11:1a:
5a:c4:6e:ee:5b:b3:98:b8:5e:91:e9:40:2a:3f:e1:f2:90:e5:
1f:73:96:df:49:41:9c:ec:57:8e:d3:60:11:a5:bd:4c:85:57:
29:77:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:54 2025 by rpki-client