Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/VQdBddpukAmJt5hMDo3MH_s40gY.roa
File: VQdBddpukAmJt5hMDo3MH_s40gY.roa (raw, json)
Hash identifier: Ye0y1BoPENu4y2+F2w73JV34dGGP4dVDpycXyq9GQwY=
Subject key identifier: 55:07:41:75:DA:6E:90:09:89:B7:98:4C:0E:8D:CC:1F:FB:38:D2:06
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0199448FDD717756B56E235337D343ACB8CF
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/VQdBddpukAmJt5hMDo3MH_s40gY.roa
Signing time: Sat 13 Sep 2025 19:31:43 +0000
ROA not before: Sat 13 Sep 2025 19:31:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 45.80.228.0/22 maxlen: 24
45.88.100.0/24 maxlen: 24
45.93.62.0/23 maxlen: 23
45.95.129.0/24 maxlen: 24
178.159.94.0/24 maxlen: 24
185.221.196.0/23 maxlen: 24
185.232.18.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
185.246.216.0/24 maxlen: 24
185.246.217.0/24 maxlen: 24
185.253.24.0/24 maxlen: 24
194.113.238.0/24 maxlen: 24
194.113.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:44:8f:dd:71:77:56:b5:6e:23:53:37:d3:43:ac:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Sep 13 19:31:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55074175da6e900989b7984c0e8dcc1ffb38d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:a8:89:08:8b:ff:77:14:4a:cb:36:5a:8b:
05:cd:56:49:48:88:10:46:43:91:5f:92:89:a7:3d:
4d:81:69:cf:8b:76:26:79:be:52:70:4f:83:12:cf:
e1:73:8b:eb:31:4b:c4:49:2c:76:e3:75:0c:76:79:
c5:e7:ae:a7:2e:e8:7c:dc:05:27:2e:00:de:75:ed:
27:41:a3:74:ed:5b:ee:e6:07:df:34:0f:78:57:cc:
44:6d:01:13:a5:6b:3c:12:3f:d1:36:8a:23:46:64:
d4:71:15:0b:21:31:16:83:99:38:33:a5:a9:6c:25:
98:37:f0:64:39:22:7f:4b:7c:5c:a6:fd:a3:23:24:
1e:84:a9:a1:05:75:3e:94:06:72:f9:58:b7:5b:ae:
45:d7:cd:86:eb:22:cf:ce:4b:d6:23:8c:15:1a:0a:
b3:aa:d1:2c:cc:ed:d1:cf:fd:8b:78:76:fc:dc:c1:
9a:f6:c9:84:2f:a0:d9:7e:5b:2f:5f:4e:33:f6:d5:
c4:51:a4:ca:00:42:dc:6d:19:c2:75:94:98:2d:5f:
1a:a0:72:66:60:c2:2c:7a:5b:be:b1:d9:b6:3a:27:
c1:e7:2e:77:69:a0:cd:92:59:16:f8:18:49:46:77:
5d:51:50:95:af:86:4e:1e:b1:d5:15:c0:64:6f:f0:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:07:41:75:DA:6E:90:09:89:B7:98:4C:0E:8D:CC:1F:FB:38:D2:06
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/VQdBddpukAmJt5hMDo3MH_s40gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
45.88.100.0/24
45.93.62.0/23
45.95.129.0/24
178.159.94.0/24
185.221.196.0/23
185.232.18.0/23
185.238.88.0/22
185.246.216.0/23
185.253.24.0/24
194.113.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:15:4f:b4:2c:b9:ce:bb:2a:7c:72:94:de:b0:4e:57:48:a2:
96:72:77:1e:0d:0f:30:96:f3:3f:bf:5f:11:21:03:12:f1:86:
07:ce:85:1d:fa:0f:30:be:6f:cb:c9:67:e6:35:04:46:63:84:
cd:89:01:61:f5:eb:fc:17:fe:fd:a9:a8:b2:93:f6:a1:7e:a7:
10:3f:8e:18:84:29:5b:34:60:c0:e1:1a:37:71:15:17:e6:d6:
7d:12:fc:34:67:42:16:42:bb:ba:4b:f6:3c:51:f1:59:a7:23:
4b:6b:7f:5d:62:aa:84:da:f1:59:8c:7d:7f:54:af:f5:ba:67:
4d:3a:9c:6f:da:e4:c2:62:44:38:21:97:01:de:f2:25:51:0d:
47:36:f0:89:d4:55:d4:bd:d7:a6:4a:6c:09:70:49:85:7d:8a:
d7:ee:b1:bf:d8:ab:7d:9f:73:b3:05:f6:23:07:49:0c:8b:bc:
b3:a6:31:0c:68:ca:47:3f:e1:c0:d0:22:47:98:ff:6b:a0:87:
7e:ef:31:92:62:9a:a7:aa:2e:36:08:0c:48:d6:8e:57:dd:b5:
e0:ce:a9:80:ef:78:62:ac:5d:d1:31:9c:51:ca:56:c9:de:d8:
71:b7:41:c1:72:85:1a:8d:55:94:d7:ba:16:0b:b1:9c:f4:0a:
73:17:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:13 2025 by rpki-client