Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/2rV0fErR1tCgcpWxJ0FhHRcvyp8.roa
File: 2rV0fErR1tCgcpWxJ0FhHRcvyp8.roa (raw, json)
Hash identifier: 6/cFTxQuxsHhzOtxKaBP2cvtktclfkdE7pzBGL8Qdn8=
Subject key identifier: DA:B5:74:7C:4A:D1:D6:D0:A0:72:95:B1:27:41:61:1D:17:2F:CA:9F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019942FC9D4985B4E654E136BC133F83588E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/2rV0fErR1tCgcpWxJ0FhHRcvyp8.roa
Signing time: Sat 13 Sep 2025 12:11:15 +0000
ROA not before: Sat 13 Sep 2025 12:11:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35346
IP address blocks: 45.67.116.0/24 maxlen: 24
91.242.64.0/18 maxlen: 24
91.242.68.0/23 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.78.0/24 maxlen: 24
91.242.79.0/24 maxlen: 24
91.242.80.0/24 maxlen: 24
91.242.82.0/24 maxlen: 24
91.242.85.0/24 maxlen: 24
91.242.97.0/24 maxlen: 24
91.242.99.0/24 maxlen: 24
91.242.102.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 20
91.242.112.0/24 maxlen: 24
91.242.113.0/24 maxlen: 24
91.242.114.0/24 maxlen: 24
91.242.115.0/24 maxlen: 24
91.242.116.0/24 maxlen: 24
91.242.117.0/24 maxlen: 24
91.242.118.0/24 maxlen: 24
91.242.119.0/24 maxlen: 24
91.242.120.0/24 maxlen: 24
91.242.121.0/24 maxlen: 24
91.242.122.0/24 maxlen: 24
178.175.176.0/22 maxlen: 24
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
195.138.108.0/24 maxlen: 24
2a07:5540::/29 maxlen: 29
2a07:c040::/29 maxlen: 29
2a09:700::/29 maxlen: 29
2a09:15c0::/29 maxlen: 29
2a09:3ac0::/29 maxlen: 29
2a09:4440::/29 maxlen: 29
2a09:4c40::/29 maxlen: 29
2a09:63c0::/29 maxlen: 29
2a09:7640::/29 maxlen: 29
2a09:7b40::/29 maxlen: 29
2a09:7f00::/29 maxlen: 29
2a09:a480::/29 maxlen: 29
2a09:bdc0::/29 maxlen: 29
2a09:ca40::/29 maxlen: 29
2a09:e400::/29 maxlen: 29
2a09:f6c0::/29 maxlen: 29
2a09:f940::/29 maxlen: 29
2a09:fdc0::/29 maxlen: 29
2a0a:3700::/29 maxlen: 29
2a0a:3780::/29 maxlen: 29
2a0a:6000::/29 maxlen: 29
2a0a:ef00::/29 maxlen: 29
2a0b:280::/29 maxlen: 29
2a0b:5d00::/29 maxlen: 29
2a0c:380::/29 maxlen: 29
2a0c:3600::/32 maxlen: 32
2a0c:3780::/29 maxlen: 29
2a0c:57c0::/29 maxlen: 29
2a0c:ae00::/29 maxlen: 29
2a0d:1a00::/29 maxlen: 29
2a0d:dac0::/29 maxlen: 29
2a0d:fb00::/29 maxlen: 29
2a0e:f80::/29 maxlen: 29
2a0e:2080::/29 maxlen: 29
2a0e:2500::/29 maxlen: 29
2a0e:3380::/29 maxlen: 29
2a0e:3540::/29 maxlen: 29
2a0e:3c40::/29 maxlen: 29
2a0e:7880::/29 maxlen: 29
2a0e:b000::/29 maxlen: 29
2a0e:c3c0::/29 maxlen: 29
2a0e:c700::/29 maxlen: 29
2a0e:c800::/29 maxlen: 29
2a0e:d180::/29 maxlen: 29
2a0e:d880::/29 maxlen: 29
2a0e:e540::/29 maxlen: 29
2a0e:e8c0::/29 maxlen: 29
2a0e:e940::/29 maxlen: 29
2a0e:f540::/29 maxlen: 29
2a0f:740::/29 maxlen: 29
2a0f:1b40::/29 maxlen: 29
2a0f:3900::/29 maxlen: 29
2a0f:4840::/29 maxlen: 29
2a0f:6200::/29 maxlen: 29
2a0f:82c0::/29 maxlen: 29
2a0f:9380::/29 maxlen: 29
2a0f:b200::/29 maxlen: 29
2a0f:da00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:fc:9d:49:85:b4:e6:54:e1:36:bc:13:3f:83:58:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 13 12:11:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dab5747c4ad1d6d0a07295b12741611d172fca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:62:36:d5:60:e1:78:f5:5d:f0:3a:a0:30:
5e:c1:de:4d:75:fc:89:95:a3:54:c2:a4:b4:6e:e6:
9f:e1:30:fa:75:5e:c7:d1:90:4c:30:2a:7f:92:54:
34:cd:22:e8:d1:a4:db:ae:29:cc:46:98:c7:9b:de:
a5:b7:c9:08:8a:2f:00:55:b5:72:b7:1d:f2:aa:50:
4a:dd:78:7e:a4:2f:1b:be:aa:04:4f:de:75:cc:14:
0c:24:db:76:6f:9b:7e:ec:4a:84:6a:50:04:04:50:
33:c2:1a:e8:9d:48:dc:29:68:de:98:7a:2e:02:62:
82:5e:89:06:ba:e2:40:79:c9:9b:2d:f1:e3:89:52:
9c:71:17:b4:3a:ad:6f:1e:92:33:ee:c8:a4:b4:73:
d5:a3:cc:fc:28:71:93:8c:79:85:54:41:54:7b:51:
73:a5:49:f0:b9:f2:04:cb:23:75:33:36:4b:d7:2a:
d3:79:ab:ee:b3:ab:f4:0b:8e:cb:0d:e5:fb:3a:e1:
8d:7a:2d:a0:8b:7c:a2:82:ed:42:03:48:06:49:42:
d1:46:4c:f4:95:e1:b1:30:22:1f:6b:a3:af:3d:84:
e9:a6:3b:cf:c1:ec:3a:da:5e:5b:49:d0:a7:4c:77:
9d:88:2d:32:e2:b2:fe:f9:fb:91:ac:d8:8f:23:a2:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B5:74:7C:4A:D1:D6:D0:A0:72:95:B1:27:41:61:1D:17:2F:CA:9F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/2rV0fErR1tCgcpWxJ0FhHRcvyp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
91.242.64.0/18
178.175.176.0/22
194.114.144.0/24
195.138.108.0/24
IPv6:
2a07:5540::/29
2a07:c040::/29
2a09:700::/29
2a09:15c0::/29
2a09:3ac0::/29
2a09:4440::/29
2a09:4c40::/29
2a09:63c0::/29
2a09:7640::/29
2a09:7b40::/29
2a09:7f00::/29
2a09:a480::/29
2a09:bdc0::/29
2a09:ca40::/29
2a09:e400::/29
2a09:f6c0::/29
2a09:f940::/29
2a09:fdc0::/29
2a0a:3700::/29
2a0a:3780::/29
2a0a:6000::/29
2a0a:ef00::/29
2a0b:280::/29
2a0b:5d00::/29
2a0c:380::/29
2a0c:3600::/32
2a0c:3780::/29
2a0c:57c0::/29
2a0c:ae00::/29
2a0d:1a00::/29
2a0d:dac0::/29
2a0d:fb00::/29
2a0e:f80::/29
2a0e:2080::/29
2a0e:2500::/29
2a0e:3380::/29
2a0e:3540::/29
2a0e:3c40::/29
2a0e:7880::/29
2a0e:b000::/29
2a0e:c3c0::/29
2a0e:c700::/29
2a0e:c800::/29
2a0e:d180::/29
2a0e:d880::/29
2a0e:e540::/29
2a0e:e8c0::/29
2a0e:e940::/29
2a0e:f540::/29
2a0f:740::/29
2a0f:1b40::/29
2a0f:3900::/29
2a0f:4840::/29
2a0f:6200::/29
2a0f:82c0::/29
2a0f:9380::/29
2a0f:b200::/29
2a0f:da00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:12:ef:7c:6e:34:1e:85:22:f3:28:69:6b:bc:04:1d:42:94:
32:75:ce:00:a2:de:c7:38:38:bc:c5:62:28:49:6e:9a:22:b9:
01:00:9a:60:2e:be:e6:90:1f:f4:b3:3e:d8:e4:3d:f9:b9:e8:
f3:3c:22:b9:40:95:78:92:60:57:f5:bb:ae:e6:06:1d:48:96:
7a:7d:9d:16:88:93:07:9c:5d:f2:39:54:04:b2:26:d8:b1:46:
09:58:70:72:f3:36:eb:d1:3f:3e:2d:53:b9:48:83:22:54:eb:
99:6b:70:19:62:b4:09:1e:e0:08:70:0a:f2:5e:82:69:ec:8a:
be:7c:cd:07:9e:fd:c6:34:cd:ed:3f:25:ec:c2:c3:d2:f0:e1:
dd:af:ec:b4:74:58:ae:10:f2:60:dd:a7:ad:0d:d8:c3:f8:c5:
3c:3a:3a:17:48:da:04:bd:00:ec:c2:e0:df:9f:af:82:fc:1a:
01:9d:b7:51:92:74:b0:6e:14:ab:d3:3f:4e:50:25:86:b6:c7:
ee:51:03:f2:e3:50:22:11:c1:69:fe:35:99:32:64:0d:a5:f2:
97:86:7d:8b:11:34:d7:53:8d:35:0d:a7:04:18:1b:46:fc:ac:
a5:77:66:66:25:bc:cd:29:0c:21:64:15:e5:ce:d7:16:b1:98:
3c:23:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:15 2025 by rpki-client