Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sO-x8u5MvAJM5HqMMNLiazWXXSU.roa
File: sO-x8u5MvAJM5HqMMNLiazWXXSU.roa (raw, json)
Hash identifier: UkZv8rXt233s5P+hXTTWsxTtpjqemgLApXK0wADjl1M=
Subject key identifier: B0:EF:B1:F2:EE:4C:BC:02:4C:E4:7A:8C:30:D2:E2:6B:35:97:5D:25
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01989FA14DC12BEA64BD96D83AE3DA5F775B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sO-x8u5MvAJM5HqMMNLiazWXXSU.roa
Signing time: Tue 12 Aug 2025 18:53:25 +0000
ROA not before: Tue 12 Aug 2025 18:53:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
193.37.139.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1034::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1059::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1074::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:2000::/40 maxlen: 48
2a0c:9a40:2100::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2300::/40 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:2400::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2800::/40 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2e00::/40 maxlen: 48
2a0c:9a40:3000::/36 maxlen: 48
2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a46:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a1:4d:c1:2b:ea:64:bd:96:d8:3a:e3:da:5f:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 12 18:53:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0efb1f2ee4cbc024ce47a8c30d2e26b35975d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:aa:7d:59:e6:59:d9:1b:3f:12:2c:6c:c5:
b9:82:e0:96:dd:f1:4b:a8:69:b4:6b:4e:5c:06:6a:
7d:de:22:40:94:0a:f2:c9:ba:87:e3:ea:26:5b:f0:
30:7c:ea:3e:85:57:f5:f3:cf:d5:51:ab:0e:d0:eb:
33:c8:d8:3a:59:3c:6a:70:11:1c:c0:9f:80:0f:f9:
d7:19:c2:31:9a:5b:db:73:69:c8:01:9e:1d:44:9d:
55:e5:87:7f:aa:29:a9:38:be:ba:c3:59:d2:e8:d9:
24:20:c3:53:79:51:00:e9:cf:70:06:6f:c3:aa:8d:
71:d6:58:26:26:65:77:4a:40:84:08:2a:69:71:be:
f7:bd:3f:11:f1:9a:39:7e:8e:19:26:67:c7:7e:f9:
65:0e:01:04:6f:8e:07:c9:ae:78:ba:25:1a:87:b1:
9d:e1:cf:2f:d4:df:dc:7c:9e:6e:5c:5c:94:c1:7b:
70:0e:4b:af:74:20:16:e3:f8:37:74:f9:f6:b3:75:
58:d4:3f:1a:43:e3:4e:08:bf:97:d8:5f:8d:c2:df:
6d:20:51:74:ca:4d:27:3f:1e:d6:09:51:c3:69:8b:
27:19:08:de:eb:d3:42:b7:a6:3b:26:1a:0b:90:dc:
a5:db:36:fd:35:5b:d9:f7:37:f0:84:88:93:2c:2a:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:B1:F2:EE:4C:BC:02:4C:E4:7A:8C:30:D2:E2:6B:35:97:5D:25
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sO-x8u5MvAJM5HqMMNLiazWXXSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1059:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2000::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:2eff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:3000::/36
2a0c:9a40:8a90::/48
2a0c:9a44::/48
2a0c:9a46:500::/40
Signature Algorithm: sha256WithRSAEncryption
2c:50:13:0e:ad:7d:78:05:c9:dd:56:f8:7a:81:5f:bc:be:b7:
e9:d9:b9:fa:8c:03:55:c3:37:ab:57:95:0d:32:d4:eb:27:cd:
51:9e:b3:23:fa:16:f2:b6:cf:e6:22:43:e6:fe:ef:34:8f:ff:
53:07:65:e0:b7:51:8c:80:8e:16:a8:19:c2:92:61:03:71:63:
21:d0:7e:0e:c8:b8:e1:03:fc:28:be:8b:72:9d:9b:bf:5c:20:
b3:91:b1:e2:6d:94:21:a5:bb:39:36:ce:7c:a4:83:18:78:69:
07:51:f8:29:6e:bb:1f:07:83:7b:da:a8:17:0f:b1:e5:db:f0:
b7:c7:36:25:42:04:39:92:fe:30:81:3e:aa:ca:99:ad:89:18:
03:c0:bf:a9:bf:bf:4c:bd:15:6d:4b:ab:c4:c5:6f:6c:c6:af:
c1:70:10:df:68:30:2c:15:e0:e9:e8:29:a3:ea:05:0e:19:ba:
01:12:bd:8b:94:56:32:73:4b:cd:fe:6e:24:11:8c:8e:e2:44:
7a:32:df:68:69:36:df:0a:7b:85:ea:4b:09:3b:e2:e3:d1:4d:
2f:53:de:3a:ad:15:c5:3d:af:f6:46:ac:e4:81:c4:a6:38:f6:
5b:d9:3d:0e:09:b5:c2:04:c5:a9:94:c4:d0:fc:ef:35:bb:24:
e3:74:0d:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:42 2025 by rpki-client