Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/8JaSgFcH49HBn461hhPZA96Q-_Q.roa
File: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (raw, json)
Hash identifier: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=
Subject key identifier: F0:96:92:80:57:07:E3:D1:C1:9F:8E:B5:86:13:D9:03:DE:90:FB:F4
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 019880BB5E5FFC1B7B5EBC536797A1073B2A
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/8JaSgFcH49HBn461hhPZA96Q-_Q.roa
Signing time: Wed 06 Aug 2025 18:53:39 +0000
ROA not before: Wed 06 Aug 2025 18:53:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 45.11.16.0/22 maxlen: 22
45.11.19.0/24 maxlen: 24
45.138.172.0/22 maxlen: 22
45.138.172.0/24 maxlen: 24
45.138.173.0/24 maxlen: 24
45.138.174.0/24 maxlen: 24
45.138.175.0/24 maxlen: 24
45.147.228.0/22 maxlen: 22
45.153.240.0/22 maxlen: 22
91.200.100.0/22 maxlen: 22
152.89.244.0/22 maxlen: 22
152.89.247.0/24 maxlen: 24
160.20.144.0/24 maxlen: 24
160.20.145.0/24 maxlen: 24
160.20.146.0/24 maxlen: 24
160.20.147.0/24 maxlen: 24
2a09:38c0::/29 maxlen: 48
2a09:38c0:aaaa::/48 maxlen: 48
2a0c:6a40::/29 maxlen: 29
2a0c:6a41:f230::/48 maxlen: 48
2a0d:4cc0::/29 maxlen: 29
2a0e:5100::/29 maxlen: 29
2a0e:b540::/29 maxlen: 29
2a0e:b540:ff03::/48 maxlen: 48
2a10:9c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:bb:5e:5f:fc:1b:7b:5e:bc:53:67:97:a1:07:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Aug 6 18:53:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f09692805707e3d1c19f8eb58613d903de90fbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:0f:5f:45:b4:af:f2:81:c0:4a:1e:7f:fd:
88:1e:27:a8:53:de:86:b8:ae:67:3d:fd:5a:fa:91:
a3:62:84:7f:03:74:17:ae:0e:c6:d8:ed:48:f4:71:
d2:c7:10:09:52:15:00:99:c6:cf:9c:3a:96:cd:7f:
4b:5f:46:c4:09:12:6a:55:a5:a4:4b:03:37:9f:69:
b4:90:70:b9:32:b6:5f:19:48:d5:6f:a6:d7:36:3d:
2d:0e:c9:cf:eb:f0:d7:4c:3f:c3:dd:56:b8:84:91:
d1:db:8f:a8:6d:ae:df:b7:c6:d2:39:29:a6:e1:50:
27:17:a5:d0:85:f2:56:e2:6e:e1:f0:f1:17:10:85:
d3:d3:32:25:98:d0:b4:d0:7b:2e:05:47:fc:81:9b:
1b:e1:0d:a9:5a:57:d7:0e:a6:72:30:a7:8f:dd:30:
fe:93:c0:3f:1d:36:59:88:87:14:3a:90:60:6e:b7:
79:1f:10:ad:1a:2d:9c:22:c8:bc:b8:21:f1:bb:5d:
32:b2:fe:d7:a7:76:9c:c3:93:68:ac:0d:3b:46:24:
98:8e:c2:a4:a1:49:5e:47:da:43:73:6f:05:1e:25:
64:d4:2e:4e:74:f0:2d:65:62:44:a9:a4:d0:d6:22:
13:63:92:cf:b0:d0:4f:6e:aa:12:2d:59:8e:fd:3d:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:92:80:57:07:E3:D1:C1:9F:8E:B5:86:13:D9:03:DE:90:FB:F4
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/8JaSgFcH49HBn461hhPZA96Q-_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.16.0/22
45.138.172.0/22
45.147.228.0/22
45.153.240.0/22
91.200.100.0/22
152.89.244.0/22
160.20.144.0/22
IPv6:
2a09:38c0::/29
2a0c:6a40::/29
2a0d:4cc0::/29
2a0e:5100::/29
2a0e:b540::/29
2a10:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
13:dd:63:d8:6a:09:01:1b:c6:34:57:c7:e0:cf:da:09:e0:58:
cd:50:7b:db:89:ff:e8:dc:9c:92:e8:90:de:41:1b:9e:e5:a2:
fc:1f:9b:58:3b:7c:4d:77:d0:1c:34:f3:43:f4:ff:2a:4b:90:
18:a3:b3:88:88:94:c4:11:2f:3d:17:29:70:fd:66:55:4e:16:
c4:fd:ba:4c:08:9d:20:46:bf:0f:80:1e:0f:56:f6:5a:77:a3:
b0:af:65:23:4c:b3:f7:df:51:ad:9f:22:f7:46:e0:64:81:45:
fa:8f:16:85:3c:8a:41:32:bc:16:2f:f6:eb:cf:75:2e:d2:19:
ce:5b:ce:39:1a:6a:ab:87:bb:28:b0:f0:9a:1e:91:b5:75:0c:
d4:5d:01:e8:97:db:5a:ca:58:0e:78:e6:88:e9:10:7e:45:c5:
f7:1c:d5:3d:d5:5e:23:28:5e:99:02:95:93:43:82:a5:41:d3:
02:c2:9f:dc:73:2a:b9:4b:44:10:c9:b1:cd:50:f1:29:c5:98:
26:06:3a:0c:5d:20:22:ba:93:1c:57:1e:a6:49:a4:9e:fc:12:
02:e0:00:28:d5:2c:e3:8b:4e:b5:d1:d6:bc:8a:67:1e:3c:4f:
78:df:dc:35:48:06:59:bb:e2:4b:d3:56:0d:71:6c:9f:da:b0:
04:43:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:52 2025 by rpki-client