Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/TvA9yelIeCEsBOpJLkUsBtajKVo.roa
File: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (raw, json)
Hash identifier: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=
Subject key identifier: 4E:F0:3D:C9:E9:48:78:21:2C:04:EA:49:2E:45:2C:06:D6:A3:29:5A
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 01983352908B903AB0230C2BCFBE7D917CCE
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/TvA9yelIeCEsBOpJLkUsBtajKVo.roa
Signing time: Tue 22 Jul 2025 18:08:25 +0000
ROA not before: Tue 22 Jul 2025 18:08:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14593
IP address blocks: 87.251.24.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
150.228.0.0/17 maxlen: 24
162.43.192.0/22 maxlen: 24
169.155.224.0/19 maxlen: 24
176.116.124.0/23 maxlen: 24
188.92.248.0/21 maxlen: 24
188.95.144.0/23 maxlen: 24
209.198.128.0/19 maxlen: 24
212.105.128.0/19 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/21 maxlen: 24
217.65.136.0/22 maxlen: 24
217.142.16.0/20 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:52:90:8b:90:3a:b0:23:0c:2b:cf:be:7d:91:7c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Jul 22 18:08:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef03dc9e94878212c04ea492e452c06d6a3295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:33:98:e5:ab:6c:7a:0a:1e:04:43:cd:d0:
07:06:34:14:b8:0e:23:4c:99:c1:86:fd:5d:2f:fa:
65:25:74:5f:5b:b8:87:a4:18:4e:c6:0e:79:17:c6:
4e:ec:09:27:59:48:4c:09:b8:36:f2:0c:35:ba:17:
ce:7f:e5:1a:59:e7:da:7e:a0:4e:82:e3:35:71:90:
ab:df:09:14:f9:45:a9:9e:59:83:bb:90:4a:4e:bb:
b9:84:a9:06:96:4e:85:c3:1b:81:1e:4a:43:24:2a:
9c:69:4d:90:31:15:7d:aa:3c:c1:dd:95:6d:15:7c:
4b:e7:5e:1d:b1:dc:7a:21:6a:37:70:f3:1e:37:49:
24:d3:81:ea:d3:c9:dd:da:86:65:89:2c:8b:51:65:
bc:fb:ba:d4:30:fe:6a:3f:98:5b:fe:cb:ae:25:52:
d3:88:cc:b4:87:52:85:7d:60:35:19:38:5f:e1:79:
c6:3b:e0:7b:c0:c6:39:43:d7:74:11:af:d5:3e:c6:
dc:b4:b0:19:c5:92:f4:01:54:5d:27:e9:cd:3b:be:
cd:1b:08:bf:7f:90:b1:83:1a:47:51:33:ab:27:4d:
9c:5b:27:69:28:d3:b8:e2:55:f5:56:c3:fe:05:8b:
3c:4c:78:61:58:50:3f:0d:bc:c0:5c:75:0d:3c:06:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:3D:C9:E9:48:78:21:2C:04:EA:49:2E:45:2C:06:D6:A3:29:5A
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/TvA9yelIeCEsBOpJLkUsBtajKVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.24.0/21
91.102.180.0/22
145.224.64.0/18
150.228.0.0/17
162.43.192.0/22
169.155.224.0/19
176.116.124.0/23
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
212.105.128.0/19
216.128.0.0/19
217.65.136.0/21
217.142.16.0/20
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
0f:8b:6a:76:c3:ad:fa:62:db:1f:ea:58:fd:56:6f:78:0a:49:
4c:98:a3:81:f4:d3:3e:19:15:fe:31:4c:1f:8b:90:a1:f7:16:
eb:20:72:94:72:06:41:21:43:7c:52:4c:01:1c:f3:39:18:8f:
99:16:4c:27:7a:90:ca:98:cc:ce:da:47:f7:d9:b8:ad:6f:25:
9a:68:ff:ff:56:ce:15:40:cc:eb:f6:23:fa:c9:63:1e:3f:4b:
9c:73:b4:95:88:81:71:24:2b:67:1d:88:43:fe:97:88:fa:28:
31:94:ec:0f:81:0e:16:97:cd:17:54:ed:36:ef:ef:b6:a8:10:
ac:37:6b:ec:89:11:e8:52:b8:24:03:09:e6:e2:ba:c0:2c:3b:
41:0f:24:25:d2:b1:78:6e:2c:14:d6:83:08:4e:60:32:fc:6a:
a9:d0:f8:09:39:c6:9d:79:4d:64:36:74:9a:36:0a:41:8b:d6:
7a:5d:d0:da:a1:ff:ef:43:b4:8d:94:de:3f:34:37:ec:98:a1:
32:7d:b9:be:85:12:62:24:04:fa:e4:03:c8:30:2d:96:6c:6d:
41:a5:ea:d7:ab:3b:ba:7a:3b:d4:5a:64:d4:94:66:e5:a9:c1:
cd:90:5b:4e:66:b6:e7:ab:11:31:ee:ae:d9:16:b0:3e:f0:21:
da:75:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:56 2025 by rpki-client