Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-wUuJsdwLg_lYZGNZTnJ1P42tZ0.roa
File: 1-wUuJsdwLg_lYZGNZTnJ1P42tZ0.roa (raw, json)
Hash identifier: OqqOjLTpcprLcvH3PKtp5G5Z6Qb5xEcfPENB1WlFK5I=
Subject key identifier: FB:05:2E:26:C7:70:2E:0F:E5:61:91:8D:65:39:C9:D4:FE:36:B5:9D
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0198F5CA5C1DFFC7A7A90AB3A36389650858
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-wUuJsdwLg_lYZGNZTnJ1P42tZ0.roa
Signing time: Fri 29 Aug 2025 12:25:36 +0000
ROA not before: Fri 29 Aug 2025 12:25:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.136.206.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.53.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.140.173.0/24 maxlen: 24
45.141.186.0/24 maxlen: 24
45.141.187.0/24 maxlen: 24
45.145.162.0/24 maxlen: 24
45.147.1.0/24 maxlen: 24
45.149.83.0/24 maxlen: 24
45.152.225.0/24 maxlen: 24
45.154.162.0/24 maxlen: 24
85.202.166.0/24 maxlen: 24
85.202.167.0/24 maxlen: 24
91.212.82.0/24 maxlen: 24
91.220.84.0/24 maxlen: 24
91.220.90.0/24 maxlen: 24
91.220.126.0/24 maxlen: 24
91.221.38.0/24 maxlen: 24
92.249.13.0/24 maxlen: 24
92.249.14.0/24 maxlen: 24
193.150.98.0/24 maxlen: 24
193.150.170.0/24 maxlen: 24
193.150.171.0/24 maxlen: 24
193.163.199.0/24 maxlen: 24
194.33.8.0/24 maxlen: 24
194.33.9.0/24 maxlen: 24
194.55.103.0/24 maxlen: 24
194.55.104.0/24 maxlen: 24
194.61.76.0/24 maxlen: 24
194.61.233.0/24 maxlen: 24
194.147.84.0/24 maxlen: 24
194.147.85.0/24 maxlen: 24
195.245.110.0/24 maxlen: 24
213.139.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:ca:5c:1d:ff:c7:a7:a9:0a:b3:a3:63:89:65:08:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 29 12:25:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb052e26c7702e0fe561918d6539c9d4fe36b59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:07:4b:b8:a7:cb:5d:e9:39:6c:46:cd:8c:
49:c4:8a:6b:0f:5a:37:52:ed:cf:9e:2d:1a:35:4d:
e3:ca:53:fb:f5:59:71:81:58:f2:38:5a:88:20:93:
22:35:95:4b:15:94:23:69:14:ff:03:3c:5b:ce:ad:
07:de:09:7b:26:28:0d:82:ee:1f:ed:36:d4:9d:bd:
f9:3f:6c:86:f6:ff:fe:75:5b:26:43:bb:71:de:2a:
ec:02:be:7d:67:9f:7c:c9:db:9f:56:08:5c:53:2d:
66:5e:e7:36:90:33:7c:e7:6c:67:45:17:13:f9:ca:
fe:5f:3d:69:17:48:cc:6c:cc:18:b9:ac:95:d4:6e:
ae:f5:85:92:d3:e1:92:1a:c1:2f:78:de:aa:2d:59:
c9:b4:a6:c4:00:39:26:a6:53:6a:4a:c8:eb:74:83:
ea:20:2c:05:10:90:4e:1d:ff:f7:f9:58:5c:3b:ef:
5e:42:09:d4:fd:51:93:a0:48:39:89:e2:a1:8a:c3:
d4:80:d6:69:ab:93:f1:33:30:91:ab:de:56:1e:45:
1c:cf:46:b6:91:22:aa:4d:ce:06:fa:3d:d9:16:90:
8d:ed:a3:b4:e8:2d:90:04:58:2e:8b:23:af:e5:08:
c6:48:7f:3a:6c:6a:e1:0d:a7:ed:f1:15:eb:db:f8:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:2E:26:C7:70:2E:0F:E5:61:91:8D:65:39:C9:D4:FE:36:B5:9D
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-wUuJsdwLg_lYZGNZTnJ1P42tZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.206.0/24
45.137.52.0/23
45.137.55.0/24
45.137.191.0/24
45.139.28.0/24
45.139.31.0/24
45.140.171.0/24
45.140.173.0/24
45.141.186.0/23
45.145.162.0/24
45.147.1.0/24
45.149.83.0/24
45.152.225.0/24
45.154.162.0/24
85.202.166.0/23
91.212.82.0/24
91.220.84.0/24
91.220.90.0/24
91.220.126.0/24
91.221.38.0/24
92.249.13.0-92.249.14.255
193.150.98.0/24
193.150.170.0/23
193.163.199.0/24
194.33.8.0/23
194.55.103.0-194.55.104.255
194.61.76.0/24
194.61.233.0/24
194.147.84.0/23
195.245.110.0/24
213.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fd:37:44:8c:d1:9e:b2:37:f5:ef:59:44:83:2a:cb:4d:66:
57:66:99:69:e5:82:ab:39:61:f0:15:f8:b6:ae:e4:b2:d1:97:
a5:13:4c:12:f7:b6:d5:e0:fa:0c:1f:b9:16:21:95:72:8b:d8:
8c:2a:6d:b2:9d:1c:75:16:ab:ba:ec:3f:63:45:46:cb:53:63:
93:7e:2a:47:52:31:26:30:53:35:b5:64:0c:32:07:73:ec:ee:
cd:9c:78:28:1a:2c:d4:56:25:ed:ef:47:02:d8:06:d2:2b:56:
a8:f9:5e:be:26:c7:10:55:5b:c7:43:a8:2a:32:ab:df:94:9b:
cc:4b:f1:c6:bc:72:d8:24:bd:75:4d:25:42:f6:e0:29:55:d8:
fa:64:42:19:6c:65:18:d5:a8:a5:48:4f:2e:2e:c9:9e:3f:5a:
dd:c7:ca:79:ce:78:82:24:a0:cd:69:c5:e2:49:2f:f7:5e:05:
5b:7a:15:6f:a8:14:40:75:91:1c:dd:3c:23:a4:ba:10:44:4e:
47:53:91:bc:38:db:d9:7d:8f:3a:d7:ef:6a:ae:fa:b0:7c:6d:
43:06:83:bf:ab:b4:57:f4:48:48:ff:a5:e7:1b:13:cd:7b:7f:
39:b3:ed:a6:10:4d:00:de:3e:6f:09:73:c8:ae:28:15:d3:6a:
a6:8b:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:04 2025 by rpki-client