Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AB0nwtUAiYqTaCw8V6F4QOG8slE.roa
File: AB0nwtUAiYqTaCw8V6F4QOG8slE.roa (raw, json)
Hash identifier: QhLX9Gj8zZdcE/kGB2GQOVNJTT42LEvSVN72oXhnxXg=
Subject key identifier: 00:1D:27:C2:D5:00:89:8A:93:68:2C:3C:57:A1:78:40:E1:BC:B2:51
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019759F1084C9186B96DAAA1D287C20199B7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AB0nwtUAiYqTaCw8V6F4QOG8slE.roa
Signing time: Tue 10 Jun 2025 13:04:17 +0000
ROA not before: Tue 10 Jun 2025 13:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213005
IP address blocks: 45.81.155.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
92.60.34.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.179.228.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
185.211.180.0/22 maxlen: 22
185.223.220.0/22 maxlen: 22
185.227.128.0/22 maxlen: 22
185.230.48.0/22 maxlen: 24
185.245.34.0/23 maxlen: 23
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:f1:08:4c:91:86:b9:6d:aa:a1:d2:87:c2:01:99:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 10 13:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=001d27c2d500898a93682c3c57a17840e1bcb251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:c6:75:d6:98:97:e8:27:73:f8:c5:94:5a:
38:e1:2d:62:17:23:b9:93:60:b2:04:c2:c5:10:cf:
84:08:ec:03:7e:cd:6b:58:d9:23:2f:a2:67:90:fb:
36:fc:a7:dd:2a:67:1b:71:89:af:dc:b6:05:5f:5c:
d2:27:d6:a5:3f:5e:6f:dc:60:d7:5f:bd:63:52:38:
9d:cc:2e:34:c7:b9:4a:b4:3b:d6:9f:c6:af:07:25:
f6:a0:7d:60:01:17:fa:a1:43:46:57:8f:3c:2e:21:
76:48:01:c0:7c:64:6d:4d:a2:a3:b5:d3:9c:40:8e:
a2:82:c8:20:3d:bd:f5:a2:17:2f:a8:d2:3f:a4:b9:
49:02:86:11:a2:82:0c:fa:44:f1:6a:6c:a1:9d:1b:
3b:94:65:3a:92:d5:f8:97:ec:d3:66:2c:b2:c6:09:
66:3a:83:03:a9:50:c0:0e:a3:28:a6:c6:bc:70:e4:
6d:21:94:ac:7f:55:47:04:ac:df:52:68:08:f6:cf:
03:48:ca:a2:28:9b:6f:34:2d:c2:58:fa:85:e3:81:
19:b7:67:5c:ad:3e:1b:07:f6:53:de:38:5c:d6:5b:
76:6e:9b:b9:25:e6:83:cd:d7:f1:22:4f:a4:28:8c:
84:b9:ff:e4:ee:c9:e2:9b:64:08:3f:f1:7b:aa:76:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:27:C2:D5:00:89:8A:93:68:2C:3C:57:A1:78:40:E1:BC:B2:51
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AB0nwtUAiYqTaCw8V6F4QOG8slE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.155.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
92.60.34.0/24
93.92.228.0/22
185.106.124.0/22
185.179.228.0/22
185.189.64.0/22
185.211.180.0/22
185.223.220.0/22
185.227.128.0/22
185.230.48.0/22
185.245.34.0/23
193.26.152.0/22
193.35.88.0/22
194.38.56.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:bf:75:51:fb:ec:74:ea:f9:10:39:16:29:94:10:bc:b3:a9:
6a:f0:cd:9c:82:0a:a1:eb:44:fe:df:aa:fb:e4:cf:da:d0:61:
74:5a:12:78:07:3b:45:c8:09:fd:ba:85:b9:01:e8:77:84:ae:
73:d4:16:f0:c6:15:61:0b:4b:39:31:8b:0b:57:84:4f:62:c3:
ee:09:40:3d:11:43:25:94:6f:e5:64:ea:ce:4a:d8:91:fd:cb:
3c:b8:f2:31:9f:3c:0d:17:14:b0:d1:58:78:1d:c9:b3:59:8f:
ea:b6:9a:92:6c:84:24:b4:6d:41:bb:d8:54:ec:53:a5:a3:6e:
e4:8e:62:52:fa:d2:27:16:90:40:4e:61:d9:f6:cc:9f:2b:82:
3b:09:6d:c0:71:8e:b3:28:0f:5e:c9:2f:d5:53:3c:49:37:29:
af:c1:06:76:23:7f:0b:53:cf:be:c6:b7:ef:b2:0e:7b:43:83:
c9:77:ff:9d:cc:3e:88:99:2b:6a:ad:58:9a:05:5b:4d:50:69:
e1:c3:14:1b:bf:80:21:ef:9a:ff:62:4c:41:e3:15:bb:98:ff:
1a:10:58:78:a1:c2:80:02:52:91:8c:6d:f8:83:ba:73:dd:f3:
22:c7:3b:7f:82:05:e3:41:ed:63:c7:ab:af:82:d4:ef:4d:d0:
8c:a7:40:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:12:53 2025 by rpki-client