Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ECV5IlA6Dz5y-0gAWmq1VJj_y9o.roa
File: ECV5IlA6Dz5y-0gAWmq1VJj_y9o.roa (raw, json)
Hash identifier: NsSqSTY8eBYsD0PWnW6pOG0r2M3bW+q8o0qkYjcnm5A=
Subject key identifier: 10:25:79:22:50:3A:0F:3E:72:FB:48:00:5A:6A:B5:54:98:FF:CB:DA
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01988314DF75978BA2D65FC428BC99EDAE36
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ECV5IlA6Dz5y-0gAWmq1VJj_y9o.roa
Signing time: Thu 07 Aug 2025 05:50:39 +0000
ROA not before: Thu 07 Aug 2025 05:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:14:df:75:97:8b:a2:d6:5f:c4:28:bc:99:ed:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 7 05:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10257922503a0f3e72fb48005a6ab55498ffcbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:fb:3f:42:e0:8c:8b:f8:dd:98:37:72:85:
80:e5:02:6a:30:38:1d:ac:b8:6d:7b:5b:01:30:c9:
5e:64:69:b7:74:da:67:c3:56:67:19:f6:3c:ae:a8:
97:c4:6e:0a:ef:7b:94:c9:60:7e:75:89:76:72:d4:
1b:e9:a3:84:1f:6e:ba:51:98:cc:da:e5:ae:0c:df:
4e:25:94:5b:e5:a0:7d:1b:9a:b3:4a:b5:7d:f2:dd:
b7:77:dc:17:c7:20:80:13:04:50:83:c8:c6:33:55:
0c:b1:fe:bf:12:ac:7a:28:b6:ef:c3:09:51:4b:6d:
2f:02:a3:36:5c:94:07:36:91:d5:e1:38:ad:55:28:
84:dc:9e:86:cd:08:43:12:22:fd:da:50:d3:c8:e3:
44:c7:20:8e:60:9d:66:62:21:6c:a4:ff:ac:b7:24:
86:2e:78:99:e1:65:e6:41:9f:92:34:96:f5:77:ea:
5b:35:f2:75:eb:ee:89:51:f1:bb:e5:89:6b:74:11:
5f:8d:f1:f8:54:c1:4e:de:cf:0c:22:34:29:97:a1:
63:5a:52:c8:a5:b0:85:d6:ad:56:26:98:91:4e:e2:
d6:ae:01:b1:35:5c:42:91:33:76:2b:fa:9f:c5:3a:
30:bd:4f:bc:a5:6b:da:bb:4e:bf:ef:3d:c1:d4:9d:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:79:22:50:3A:0F:3E:72:FB:48:00:5A:6A:B5:54:98:FF:CB:DA
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ECV5IlA6Dz5y-0gAWmq1VJj_y9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.159.255
91.92.33.0/24
91.92.35.0/24
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.216.255
93.152.218.0/24
93.152.220.0-93.152.224.255
93.152.226.0/23
93.152.233.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:44:3a:23:f5:9f:b1:32:61:3e:76:4f:16:f2:33:f4:df:6c:
28:62:e6:ca:84:f4:fd:03:d6:d1:57:cc:6a:10:33:eb:1b:7e:
d3:4d:1e:97:bd:c6:37:ca:ae:25:f4:0b:80:9d:dc:f8:a2:36:
7f:a2:3d:d5:61:16:16:1c:ff:7d:ea:3e:38:4b:b5:be:2d:99:
e6:7a:12:3d:a6:0e:95:00:2c:4e:13:42:1f:66:5f:b1:11:33:
d0:5c:e8:af:34:df:6c:3c:1d:cb:04:71:10:63:d2:4b:27:80:
c9:13:53:14:64:3c:73:f6:a6:e2:30:12:14:4f:eb:eb:3e:a8:
00:6b:b2:6c:ed:0f:a8:06:26:5e:4d:b1:40:a8:6c:56:68:8b:
98:c3:a2:0a:b9:67:bd:b4:61:e1:03:b6:d4:dc:94:23:aa:3b:
9a:e2:62:fc:53:13:6a:15:e4:45:9d:23:cf:54:99:41:f8:8d:
4d:b7:19:15:e1:0c:0a:04:9b:60:8e:70:92:de:50:60:e2:6b:
90:e8:02:0f:99:99:0c:cc:ea:c4:e2:34:3f:d5:0b:a7:d6:1e:
6b:db:50:e6:c1:5a:a6:93:20:6a:d2:db:e0:3f:bd:a8:c0:6a:
55:f4:04:50:09:ee:05:b7:91:e2:b7:95:da:f7:28:7d:07:5f:
19:ee:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:34 2025 by rpki-client