Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/fHwbuKmo2CK36Zvix3cU0fytdMg.roa
File: fHwbuKmo2CK36Zvix3cU0fytdMg.roa (raw, json)
Hash identifier: 837DuOduNlriLHDjUbJ8NtGNUf2LQkcWK+CE6Nfv/to=
Subject key identifier: 7C:7C:1B:B8:A9:A8:D8:22:B7:E9:9B:E2:C7:77:14:D1:FC:AD:74:C8
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 01997B20B0D08EF80471E5E5085CD59B36B2
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/fHwbuKmo2CK36Zvix3cU0fytdMg.roa
Signing time: Wed 24 Sep 2025 09:49:23 +0000
ROA not before: Wed 24 Sep 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 5.144.128.0/21 maxlen: 21
5.144.128.0/22 maxlen: 22
5.144.128.0/23 maxlen: 23
5.144.128.0/24 maxlen: 24
5.144.129.0/24 maxlen: 24
5.144.130.0/23 maxlen: 24
5.144.130.0/24 maxlen: 24
5.144.131.0/24 maxlen: 24
5.144.132.0/22 maxlen: 22
5.144.132.0/23 maxlen: 24
5.144.132.0/24 maxlen: 24
5.144.133.0/24 maxlen: 24
5.144.134.0/23 maxlen: 24
5.144.134.0/24 maxlen: 24
5.144.135.0/24 maxlen: 24
45.92.92.0/22 maxlen: 24
45.92.92.0/23 maxlen: 24
45.92.92.0/24 maxlen: 24
45.92.93.0/24 maxlen: 24
45.92.94.0/23 maxlen: 24
45.92.94.0/24 maxlen: 24
45.92.95.0/24 maxlen: 24
45.138.132.0/22 maxlen: 24
45.138.132.0/23 maxlen: 24
45.138.132.0/24 maxlen: 24
45.138.133.0/24 maxlen: 24
45.138.134.0/24 maxlen: 24
45.138.135.0/24 maxlen: 24
80.91.208.0/24 maxlen: 24
185.36.231.0/24 maxlen: 24
185.40.16.0/24 maxlen: 24
185.83.112.0/22 maxlen: 22
185.83.112.0/23 maxlen: 23
185.83.112.0/24 maxlen: 24
185.83.113.0/24 maxlen: 24
185.83.114.0/23 maxlen: 24
185.83.114.0/24 maxlen: 24
185.83.115.0/24 maxlen: 24
185.83.181.0/24 maxlen: 24
185.83.183.0/24 maxlen: 24
185.89.22.0/24 maxlen: 24
185.169.6.0/24 maxlen: 24
185.173.104.0/22 maxlen: 24
185.173.104.0/24 maxlen: 24
185.173.105.0/24 maxlen: 24
185.173.106.0/24 maxlen: 24
185.173.107.0/24 maxlen: 24
185.205.203.0/24 maxlen: 24
185.208.76.0/22 maxlen: 22
185.208.76.0/23 maxlen: 23
185.208.78.0/23 maxlen: 24
185.208.78.0/24 maxlen: 24
185.208.79.0/24 maxlen: 24
193.3.231.0/24 maxlen: 24
193.162.129.0/24 maxlen: 24
2a05:9a00::/29 maxlen: 29
2a05:9a00::/48 maxlen: 48
2a05:9a00:1::/48 maxlen: 48
2a05:9a00:2::/48 maxlen: 48
2a05:9a00:3::/48 maxlen: 48
2a05:9a00:4::/48 maxlen: 48
2a05:9a00:1000::/48 maxlen: 48
2a05:9a00:1001::/48 maxlen: 48
2a05:9a00:1002::/48 maxlen: 48
2a05:9a00:1003::/48 maxlen: 48
2a07:7ec0::/29 maxlen: 29
2a07:e440::/29 maxlen: 29
2a10:4340::/29 maxlen: 29
2a10:5c40::/29 maxlen: 29
2a10:6140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:20:b0:d0:8e:f8:04:71:e5:e5:08:5c:d5:9b:36:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Sep 24 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c7c1bb8a9a8d822b7e99be2c77714d1fcad74c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:9e:53:ff:09:f9:a7:43:1f:70:98:7e:1e:
40:52:a8:28:55:2e:e2:a7:8d:28:e2:31:a6:f8:8b:
60:3e:7b:b8:5d:a6:8f:24:42:9a:67:5c:04:9d:94:
dd:ab:c6:ac:e6:5f:f0:e3:21:59:df:1b:c1:29:91:
a4:3b:f3:ba:8d:13:41:a7:e6:20:57:1f:50:67:76:
4a:25:de:a4:47:54:0d:34:b3:7f:65:fa:21:16:51:
50:e6:57:8b:67:2f:9a:5f:51:f3:ab:be:a1:d4:4e:
72:56:22:79:78:a3:16:64:ff:fe:96:73:3e:57:4f:
eb:4c:f2:43:52:03:82:6e:2a:62:b1:31:da:eb:ff:
a5:ff:de:9c:c1:98:a4:09:ed:1d:83:a4:78:1c:29:
aa:dc:a0:3b:e1:14:a6:66:8a:09:44:df:e8:6b:e3:
7c:b3:df:01:c0:aa:8d:bd:71:2d:29:ea:2f:ba:32:
83:0f:87:d8:3a:73:dd:b5:0f:cd:21:52:e4:e5:3d:
ea:6e:4a:b4:8d:40:04:d2:0c:d9:c7:1d:41:ab:65:
ce:4b:ae:48:cf:34:31:e1:e3:16:f7:59:04:25:5f:
ab:2f:36:a6:49:56:4b:15:cd:2b:1e:a2:ff:f3:a4:
f8:13:86:7a:39:76:75:57:6c:30:24:de:02:cc:27:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:1B:B8:A9:A8:D8:22:B7:E9:9B:E2:C7:77:14:D1:FC:AD:74:C8
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/fHwbuKmo2CK36Zvix3cU0fytdMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.128.0/21
45.92.92.0/22
45.138.132.0/22
80.91.208.0/24
185.36.231.0/24
185.40.16.0/24
185.83.112.0/22
185.83.181.0/24
185.83.183.0/24
185.89.22.0/24
185.169.6.0/24
185.173.104.0/22
185.205.203.0/24
185.208.76.0/22
193.3.231.0/24
193.162.129.0/24
IPv6:
2a05:9a00::/29
2a07:7ec0::/29
2a07:e440::/29
2a10:4340::/29
2a10:5c40::/29
2a10:6140::/29
Signature Algorithm: sha256WithRSAEncryption
62:54:ec:e7:dc:c2:e5:34:a0:89:87:66:0f:e1:e5:44:77:d4:
39:c0:41:f5:10:4e:bb:68:87:44:42:e1:4d:59:31:f0:cc:4d:
3c:6a:67:1d:7d:92:a0:90:ee:44:ed:a4:fe:29:bd:75:86:3c:
8c:10:30:01:5b:05:f2:8d:33:b1:6a:09:5f:b9:5c:59:73:87:
0a:e0:11:21:ec:c1:ec:c0:bc:ae:52:b2:f2:73:de:2d:18:e1:
df:02:90:30:fb:e8:27:c2:22:ef:db:ec:f5:45:76:63:41:a1:
c8:e8:e3:5c:d2:e8:e3:22:6d:90:43:3f:ba:57:1c:a8:ca:11:
6a:8a:a8:8a:77:b4:a0:ff:29:84:f1:79:18:20:1d:e2:d8:e0:
a4:9a:14:86:1e:46:ae:cf:24:6e:8b:48:04:c8:94:a3:e6:aa:
fe:6d:d1:c9:d0:e6:eb:58:7a:e5:fc:b8:c7:78:f7:15:e2:8a:
c3:b3:f8:e4:a5:10:0c:52:83:af:39:5b:fe:a5:e0:1d:2b:f3:
b7:e4:62:35:89:f4:fd:a3:c9:c0:c0:80:f5:c2:b8:1a:98:16:
63:d1:5e:51:92:35:bc:48:ba:87:79:c5:34:bf:ea:2a:45:00:
25:13:a2:a2:33:2f:50:c6:be:b5:8e:98:0e:2a:ca:fe:10:45:
db:dc:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:01 2025 by rpki-client