Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0r24pIQSTUD5N5L07GOWGFKPpV8.roa
File: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (raw, json)
Hash identifier: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=
Subject key identifier: D2:BD:B8:A4:84:12:4D:40:F9:37:92:F4:EC:63:96:18:52:8F:A5:5F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019767E656E598C39362D099553E0541B195
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0r24pIQSTUD5N5L07GOWGFKPpV8.roa
Signing time: Fri 13 Jun 2025 06:07:18 +0000
ROA not before: Fri 13 Jun 2025 06:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e6:56:e5:98:c3:93:62:d0:99:55:3e:05:41:b1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 13 06:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2bdb8a484124d40f93792f4ec639618528fa55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:eb:af:61:27:ab:28:e6:8b:6a:ad:97:ad:
5d:52:58:5a:bd:70:58:2c:76:8f:23:cd:a5:19:0f:
a1:3f:9a:29:43:a0:22:79:29:b6:b1:45:41:49:ef:
37:28:03:e1:a2:29:52:fb:43:0c:f4:21:c8:02:f3:
07:0d:49:62:e0:1b:4f:f8:e3:f6:12:42:9b:08:c1:
d0:7f:e1:6b:a1:92:3e:77:25:4a:4f:7a:a2:3c:a7:
e1:86:44:78:bd:73:c7:6e:35:e0:9c:94:64:52:10:
e0:17:05:ba:e7:c5:19:98:be:4d:40:0a:7f:39:26:
78:a3:d8:87:66:37:63:5c:26:fa:c6:eb:13:2f:47:
7d:a7:dc:57:b0:e3:4f:e1:e6:66:61:c6:dc:49:a1:
dc:b0:8b:ed:83:d6:84:34:60:d8:46:7f:23:e2:18:
46:ac:99:e8:5d:af:5b:64:36:36:78:15:59:15:19:
da:02:57:31:c7:a7:44:13:9d:4c:1b:84:4a:e9:ad:
3f:9c:a5:82:49:0b:ec:8f:0d:62:20:3a:71:37:15:
06:6a:b0:a5:37:4c:47:f0:47:83:c1:20:1e:80:71:
dc:af:64:6f:4e:a7:66:d0:b6:c0:57:88:ba:4f:fb:
5d:62:f4:e8:69:bc:5d:ac:20:37:57:b4:af:40:be:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:B8:A4:84:12:4D:40:F9:37:92:F4:EC:63:96:18:52:8F:A5:5F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0r24pIQSTUD5N5L07GOWGFKPpV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
74:db:8c:bd:2d:25:1a:b6:d4:54:e1:e2:cc:e4:e7:e2:79:59:
cb:3f:c2:f0:7f:db:4a:a6:69:90:8a:7a:1b:4d:3a:35:88:c0:
87:bf:2c:f4:e0:21:d0:cc:20:42:d8:cf:ae:ee:a0:45:53:eb:
d8:0b:38:71:0c:bd:d2:10:bb:f7:14:20:19:db:cd:3c:34:45:
f9:c2:43:4f:1d:07:69:86:93:8a:65:5a:82:0f:32:33:7d:a5:
b9:01:ab:f8:25:f9:dc:39:29:06:e9:2d:6f:12:09:3f:da:72:
e7:c4:2e:23:fb:c6:98:59:01:6a:27:10:41:d4:d5:a2:23:f0:
2f:47:d3:9d:90:80:f0:b5:6c:e2:6a:b3:dc:33:a4:8f:e9:6d:
56:78:75:ea:1e:af:59:fe:fc:5d:b4:76:06:d6:a7:3d:09:a9:
02:93:11:b8:a2:c5:44:e6:ad:47:e0:26:29:b2:b0:b5:65:5a:
8e:b5:89:52:69:67:81:e2:b8:a2:20:10:65:e6:a2:e7:43:0f:
03:7a:21:cf:c0:94:08:a7:31:32:8e:d7:69:ec:a0:9e:ab:5e:
20:ed:f0:62:0e:92:c4:5b:e9:1e:be:1a:64:b6:4a:77:47:ad:
45:98:f6:a7:6d:aa:75:09:e3:c1:df:03:cb:4a:2d:3c:1c:0b:
d8:b9:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:45 2025 by rpki-client