Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AMULzdLeJWGnSSYfxTEEALehVms.roa
File: AMULzdLeJWGnSSYfxTEEALehVms.roa (raw, json)
Hash identifier: uGryA7mlvXLaN0xdt8CbpX8Lu3XlwjBu6dcj4Und1rE=
Subject key identifier: 00:C5:0B:CD:D2:DE:25:61:A7:49:26:1F:C5:31:04:00:B7:A1:56:6B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019870441F72A5FA3465ABBBCC134DABD7E5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AMULzdLeJWGnSSYfxTEEALehVms.roa
Signing time: Sun 03 Aug 2025 14:09:29 +0000
ROA not before: Sun 03 Aug 2025 14:09:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.86.244.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.154.228.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
193.254.235.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:70:44:1f:72:a5:fa:34:65:ab:bb:cc:13:4d:ab:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 3 14:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00c50bcdd2de2561a749261fc5310400b7a1566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:0d:4c:df:1c:91:63:60:11:d9:2d:b3:5b:
dd:4c:01:7c:94:fc:3e:66:35:e8:de:b0:6c:39:ab:
3d:43:3e:a3:25:53:e3:e8:b9:3c:f5:bd:ad:19:f7:
8f:fb:8e:e0:d0:7b:74:07:be:cc:70:92:b4:fa:6b:
e5:fb:0b:ea:f2:68:83:2e:be:77:4a:2e:d8:51:2d:
a8:cd:3f:0c:2d:e3:56:8e:4c:c3:15:d9:8d:24:dd:
d9:38:79:ba:66:58:0e:c3:6e:40:2f:fd:44:c6:48:
1f:b6:97:f7:f9:52:61:27:3f:8d:38:85:93:d2:cb:
3e:a8:2e:1a:a6:6b:2c:7a:3e:03:8c:e4:43:73:e5:
73:8f:6e:00:c4:c4:d5:3d:98:7e:f2:5b:32:b5:e0:
30:b7:d7:a2:56:b9:4d:51:02:bb:73:5f:4f:3a:a6:
44:a3:70:85:5b:bb:e1:aa:a3:53:07:f5:a9:d9:1e:
4f:5a:8e:3c:d9:90:0d:3e:ba:04:51:c9:9c:07:40:
5d:08:0e:32:e8:3b:c5:1c:98:b7:30:ec:00:d6:6d:
65:34:73:61:0a:39:f9:04:52:21:97:15:7e:84:e4:
59:5f:93:6b:a5:d0:2f:49:0a:ef:c8:67:42:29:db:
5c:66:c3:af:82:65:3b:b1:e5:76:1e:aa:fc:ee:f3:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:0B:CD:D2:DE:25:61:A7:49:26:1F:C5:31:04:00:B7:A1:56:6B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AMULzdLeJWGnSSYfxTEEALehVms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.244.0/24
45.94.47.0/24
45.95.97.0/24
45.130.128.0/24
45.134.184.0/24
45.151.104.0/24
45.154.58.0/24
45.154.228.0/24
85.209.130.0/24
185.164.59.0/24
192.156.217.0/24
193.8.1.0/24
193.23.245.0/24
193.39.245.0/24
193.254.234.0/23
194.62.30.0/24
194.62.66.0/24
195.66.26.0/24
195.158.192.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
bd:3b:96:15:06:6b:67:9f:41:06:d3:f4:44:fb:5a:fd:67:3f:
0e:93:e0:9a:aa:ab:e6:d1:49:34:03:24:0b:4e:c2:c1:8c:bc:
60:df:c5:29:27:87:58:bd:d4:19:e3:da:05:bd:a8:ab:64:b1:
0c:bb:05:58:04:79:a6:fd:da:59:65:3b:70:9e:f3:5b:a8:c0:
d3:d8:16:ce:81:be:e0:42:50:bf:41:6e:54:f9:d1:53:7b:26:
8e:88:e0:20:fe:8b:3b:88:8c:ed:71:21:49:df:71:83:c7:0d:
75:cd:ce:76:3c:0f:d7:e6:33:d2:9d:8f:1a:7e:65:ba:04:2c:
68:45:3c:8a:31:7c:7d:fb:fe:2c:1c:c5:0a:e6:63:16:73:30:
da:07:87:9f:0d:a0:8a:29:19:28:79:2f:fc:9d:13:e0:8d:d4:
87:7b:d8:48:96:bb:88:7f:b4:81:b9:db:95:6f:6f:92:1f:5b:
e1:ed:8d:3d:e7:53:c3:7e:30:12:ae:55:25:c4:48:87:06:ef:
bd:1d:c8:c0:d8:a6:c6:01:8a:19:07:fb:66:39:46:b8:27:5b:
04:13:d3:2e:f2:5a:c5:21:cf:7d:05:89:00:f7:47:f5:f8:c1:
20:1b:4e:ec:81:cc:f5:b0:d8:94:93:51:cf:2c:24:13:7f:f2:
6c:12:8a:98
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZhwRB9ypfo0Zau7zBNNq9flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwODAzMTQwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGM1MGJjZGQyZGUyNTYxYTc0OTI2MWZjNTMxMDQwMGI3YTE1NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y8NTN8ckWNgEdkts1vdTAF8lPw+
ZjXo3rBsOas9Qz6jJVPj6Lk89b2tGfeP+47g0Ht0B77McJK0+mvl+wvq8miDLr53
Si7YUS2ozT8MLeNWjkzDFdmNJN3ZOHm6ZlgOw25AL/1Exkgftpf3+VJhJz+NOIWT
0ss+qC4apmssej4DjORDc+Vzj24AxMTVPZh+8lsyteAwt9eiVrlNUQK7c19POqZE
o3CFW7vhqqNTB/Wp2R5PWo482ZANProEUcmcB0BdCA4y6DvFHJi3MOwA1m1lNHNh
Cjn5BFIhlxV+hORZX5NrpdAvSQrvyGdCKdtcZsOvgmU7seV2Hqr87vMRsQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFADFC83S3iVhp0kmH8UxBAC3oVZrMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQU1VTHpkTGVKV0duU1NZZnhURUVBTGVoVm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzB4BAIAATByAwQALVb0
AwQALV4vAwQALV9hAwQALYKAAwQALYa4AwQALZdoAwQALZo6AwQALZrkAwQAVdGC
AwQAuaQ7AwQAwJzZAwQAwQgBAwQAwRf1AwQAwSf1AwQBwf7qAwQAwj4eAwQAwj5C
AwQAw0IaAwQAw57AMB8EAgACMBkDBwAqD+fEABADBQMqETUAAwcAKhOMhgEgMA0G
CSqGSIb3DQEBCwUAA4IBAQC9O5YVBmtnn0EG0/RE+1r9Zz8Ok+Caqqvm0Uk0AyQL
TsLBjLxg38UpJ4dYvdQZ49oFvairZLEMuwVYBHmm/dpZZTtwnvNbqMDT2BbOgb7g
QlC/QW5U+dFTeyaOiOAg/os7iIztcSFJ33GDxw11zc52PA/X5jPSnY8afmW6BCxo
RTyKMXx9+/4sHMUK5mMWczDaB4efDaCKKRkoeS/8nRPgjdSHe9hIlruIf7SBuduV
b2+SH1vh7Y0951PDfjASrlUlxEiHBu+9HcjA2KbGAYoZB/tmOUa4J1sEE9Mu8lrF
Ic99BYkA90f1+MEgG07sgcz1sNiUk1HPLCQTf/JsEoqY
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:01 2025 by rpki-client