Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa
File: r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa (raw, json)
Hash identifier: /vknbDgQuhM62eluETPZRwPfDO3C56/MY/cEqhgERrQ=
Subject key identifier: AF:C7:B2:9F:E4:EB:00:52:E9:FF:A9:94:8D:7A:1A:AA:CE:43:4D:4D
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 01987A947F80C3FDA8B5E6F2DA8E95CAADAE
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa
Signing time: Tue 05 Aug 2025 14:13:28 +0000
ROA not before: Tue 05 Aug 2025 14:13:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198068
IP address blocks: 5.45.112.0/20 maxlen: 32
5.101.112.0/20 maxlen: 32
5.101.176.0/20 maxlen: 32
5.188.16.0/21 maxlen: 32
5.188.24.0/22 maxlen: 32
45.67.128.0/22 maxlen: 32
46.36.216.0/21 maxlen: 32
159.253.16.0/21 maxlen: 32
181.114.240.0/20 maxlen: 32
185.4.72.0/22 maxlen: 32
2a03:f480::/32 maxlen: 128
2a09:8240::/32 maxlen: 32
2a09:8240:1::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:94:7f:80:c3:fd:a8:b5:e6:f2:da:8e:95:ca:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Aug 5 14:13:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc7b29fe4eb0052e9ffa9948d7a1aaace434d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:8e:18:c7:84:a1:52:6d:1f:77:11:1e:24:
a7:de:43:d7:f1:fb:2a:89:50:d4:5d:a2:3c:ec:7b:
37:23:db:78:2b:23:df:e6:77:d7:80:40:05:07:70:
c6:82:d5:91:8f:93:78:7e:99:e4:82:bf:dd:c9:d6:
0c:e5:bd:f1:86:64:2e:31:be:91:73:e9:c4:55:54:
1d:89:c1:b8:ef:37:0c:07:c2:d7:5f:ef:4c:a8:f0:
75:a8:72:4c:25:38:98:ae:be:37:2f:4d:47:30:d9:
f1:3d:b4:c8:72:8b:71:5e:c5:10:22:ab:2d:ae:2d:
93:e3:1b:60:0d:cc:0b:e5:f5:da:64:5b:af:9e:d3:
9d:c6:ef:df:97:9d:b7:5d:09:db:99:3c:f0:a3:99:
8c:ec:40:14:4c:2c:25:2c:72:57:34:94:12:1d:ae:
6f:0d:82:b3:97:4c:99:f6:ab:31:23:7c:87:fb:15:
8a:c8:d5:19:54:e0:b3:95:44:87:0a:81:b7:37:e1:
0d:aa:55:bc:cb:eb:dd:de:9f:9a:53:c6:dd:89:e4:
52:1b:71:c3:c8:07:b0:af:8a:f0:e6:fa:be:7a:b2:
6e:77:b1:60:d0:dc:86:98:8b:95:47:13:06:f5:ec:
ad:52:cf:91:b8:f4:e0:15:36:7c:95:df:dc:ff:23:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:B2:9F:E4:EB:00:52:E9:FF:A9:94:8D:7A:1A:AA:CE:43:4D:4D
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.112.0/20
5.101.112.0/20
5.101.176.0/20
5.188.16.0-5.188.27.255
45.67.128.0/22
46.36.216.0/21
159.253.16.0/21
181.114.240.0/20
185.4.72.0/22
IPv6:
2a03:f480::/32
2a09:8240::/32
Signature Algorithm: sha256WithRSAEncryption
81:d1:a9:2e:2c:e8:7c:af:df:de:38:24:d6:06:27:a0:50:94:
81:7c:fe:4b:75:a8:1a:2a:42:1c:e2:c3:35:ac:80:72:ea:c9:
92:49:b7:c3:56:67:63:ae:ea:45:be:aa:de:0e:e9:a0:68:40:
b2:6b:5f:3a:b6:eb:87:7e:ec:34:29:ac:8a:a3:e1:9d:d2:16:
83:a7:2b:bd:9b:d3:9b:de:08:a1:a3:dd:1c:07:97:25:ef:98:
e9:5f:5d:ef:17:de:6d:ba:97:ca:94:f7:7d:d8:e3:16:f3:15:
3b:86:f7:dc:88:8b:b9:af:73:3a:a5:a1:2d:97:b1:58:e9:6e:
f3:ed:68:31:39:4f:f0:77:f9:5e:55:40:dc:40:c2:e3:a4:4f:
52:ca:10:9e:08:57:70:7e:33:16:54:ca:9f:3d:67:a8:39:d1:
de:20:e0:0a:68:03:01:dc:da:17:52:52:95:c5:b6:cd:7e:c0:
da:76:13:a5:ac:0f:f2:4f:7e:7b:8a:bd:af:e5:cb:ec:0a:a3:
2a:57:fe:03:0d:f2:79:34:cf:60:8b:bf:4b:c8:3f:46:f0:9e:
86:82:97:1f:9b:0b:e5:f1:d2:1f:15:7c:70:8b:10:a3:e9:39:
1e:90:c2:8a:01:72:dc:fb:a2:b8:0d:d6:db:0a:f3:42:c5:a1:
19:41:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:04 2025 by rpki-client