Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j70sHbF2QUGSqUD4A46oLM_UoK8.roa
File: j70sHbF2QUGSqUD4A46oLM_UoK8.roa (raw, json)
Hash identifier: Cy1aiWMY2S4NGJ0B+N+jhcPO8niz7XJMl3zJJ2PSjZ0=
Subject key identifier: 8F:BD:2C:1D:B1:76:41:41:92:A9:40:F8:03:8E:A8:2C:CF:D4:A0:AF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0198F5CA5BEE2E6B12B152EA7ADD93E48423
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j70sHbF2QUGSqUD4A46oLM_UoK8.roa
Signing time: Fri 29 Aug 2025 12:25:36 +0000
ROA not before: Fri 29 Aug 2025 12:25:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.132.39.0/24 maxlen: 24
45.135.35.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
45.140.65.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
83.138.51.0/24 maxlen: 24
83.138.52.0/24 maxlen: 24
84.246.82.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
91.224.140.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
176.116.2.0/24 maxlen: 24
176.116.5.0/24 maxlen: 24
176.116.9.0/24 maxlen: 24
176.116.20.0/24 maxlen: 24
176.116.23.0/24 maxlen: 24
176.126.109.0/24 maxlen: 24
176.126.112.0/24 maxlen: 24
176.126.115.0/24 maxlen: 24
193.0.245.0/24 maxlen: 24
193.0.246.0/24 maxlen: 24
193.5.1.0/24 maxlen: 24
193.33.67.0/24 maxlen: 24
193.58.171.0/24 maxlen: 24
193.58.178.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:ca:5b:ee:2e:6b:12:b1:52:ea:7a:dd:93:e4:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 29 12:25:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fbd2c1db176414192a940f8038ea82ccfd4a0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:45:e1:65:f5:a2:56:10:90:81:1e:ed:79:
dd:05:2f:b1:f2:a1:6c:28:c2:24:ca:13:51:49:d6:
16:6e:5b:4c:7f:7b:d4:55:9b:62:27:f2:5b:04:79:
b9:a0:38:dd:b2:42:d4:b5:e7:1e:d7:c4:81:ea:66:
78:ed:f1:74:0a:1c:35:c0:d7:f0:9a:9c:4b:f1:35:
d3:06:b7:ae:73:3c:94:bb:39:4d:a8:1d:28:b4:73:
3c:a1:87:7b:12:3a:2c:2c:a5:1c:fa:e8:41:c2:5e:
f8:17:92:31:34:12:6c:ef:74:cd:fe:55:13:b7:4f:
9e:14:bb:c3:d9:73:57:0f:f8:b0:a7:59:33:a6:62:
9b:b2:0c:a4:4d:c7:3e:c6:96:83:7f:8e:db:fd:99:
0e:7a:ee:6d:a6:5f:c0:73:2b:f5:be:e1:e0:73:38:
f5:e4:a5:99:7a:a0:32:1d:99:1f:fe:f2:e7:fb:de:
80:c5:c1:fa:5d:55:20:30:40:f5:5d:09:73:a0:62:
0b:73:07:6f:bf:71:32:b2:37:df:f5:52:b6:23:b4:
c9:1a:67:36:d5:ce:f0:43:66:86:85:0d:23:7a:3e:
60:33:dd:87:1a:62:13:d1:09:8b:53:89:f4:8a:47:
da:8d:56:18:b4:42:6c:65:7b:49:85:46:8a:5b:c2:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BD:2C:1D:B1:76:41:41:92:A9:40:F8:03:8E:A8:2C:CF:D4:A0:AF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j70sHbF2QUGSqUD4A46oLM_UoK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
45.129.1.0/24
45.132.39.0/24
45.135.35.0/24
45.138.7.0/24
45.138.156.0/24
45.138.212.0/24
45.138.215.0/24
45.140.65.0/24
45.149.130.0/23
45.152.118.0/23
83.138.51.0-83.138.52.255
84.246.82.0/24
91.206.69.0/24
91.224.140.0/24
91.237.104.0/23
176.116.2.0/24
176.116.5.0/24
176.116.9.0/24
176.116.20.0/24
176.116.23.0/24
176.126.109.0/24
176.126.112.0/24
176.126.115.0/24
193.0.245.0-193.0.246.255
193.5.1.0/24
193.33.67.0/24
193.58.171.0/24
193.58.178.0/24
195.96.155.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dc:cc:fe:99:be:37:cc:54:69:40:34:60:93:4b:85:dd:02:
b1:d0:93:39:c6:fb:18:b5:44:a1:e1:57:f0:0e:5b:d0:f2:90:
79:08:d5:5e:37:d4:e2:7d:a9:0b:e8:c0:e5:61:b3:50:b9:89:
36:4e:f5:0b:58:9f:f7:1e:03:8b:f4:a4:a1:bf:03:f3:92:28:
38:d6:91:52:9e:56:10:1c:62:1f:f2:2d:cc:e9:61:b2:a0:74:
fc:7d:05:c7:d1:e2:5e:52:7c:fe:2e:6f:79:77:0b:96:92:52:
3f:1d:86:20:b2:f7:ab:3c:5a:ca:fb:ea:15:eb:6f:35:f7:33:
3e:8f:a4:d7:6f:76:80:0b:49:2b:68:62:ef:5c:50:b8:32:06:
e3:d5:9e:11:69:58:66:ee:04:e5:e4:1a:29:91:c1:f3:67:c8:
8a:d4:c0:70:92:1f:b1:66:83:6e:9b:38:61:85:eb:6a:a0:d3:
32:be:5c:a0:a3:df:9d:f5:a0:65:8c:3b:21:c9:c5:13:89:3e:
f7:2c:02:99:27:4a:24:f3:75:ef:a3:00:6e:b5:b6:30:f3:e5:
a4:9b:1c:c1:e7:70:63:38:04:93:c8:d4:3c:11:0c:3c:f7:5b:
ce:93:af:0b:6b:69:48:e7:46:4b:98:8b:39:e0:b2:b7:31:59:
50:d2:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:31 2025 by rpki-client