Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eDZzIUIMomB_qfs0VB6Sz3As44Q.roa
File: eDZzIUIMomB_qfs0VB6Sz3As44Q.roa (raw, json)
Hash identifier: mDrCJQd/OK1nS9bLifL5IQcywVAmSmCEvutedWR6rGQ=
Subject key identifier: 78:36:73:21:42:0C:A2:60:7F:A9:FB:34:54:1E:92:CF:70:2C:E3:84
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198A8F01BB51EB7D1B4E5BECAA515D3B248
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eDZzIUIMomB_qfs0VB6Sz3As44Q.roa
Signing time: Thu 14 Aug 2025 14:16:04 +0000
ROA not before: Thu 14 Aug 2025 14:16:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:f0:1b:b5:1e:b7:d1:b4:e5:be:ca:a5:15:d3:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 14 14:16:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78367321420ca2607fa9fb34541e92cf702ce384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:05:dc:31:de:cd:65:85:0a:9f:25:c1:d3:
fd:1b:02:df:28:66:b7:1c:08:76:74:a9:67:48:05:
34:c4:f2:31:96:9d:67:e1:bc:72:8d:fc:e6:c0:36:
c5:63:07:14:88:13:19:d9:36:c5:b3:fe:25:8d:0a:
4d:fa:bc:0a:62:1d:3a:90:f4:e7:eb:af:1b:ba:ef:
f2:43:b3:c6:55:78:d6:7d:27:e7:e5:fc:16:82:fa:
6a:8b:1b:05:c5:6d:ac:79:4a:23:48:d2:45:69:b0:
14:6f:a9:54:16:79:1b:28:d9:f1:25:ef:b7:7e:70:
d3:c3:d4:22:f0:e6:1e:0e:29:19:20:77:0f:ee:6e:
23:55:68:f5:76:40:8b:47:74:fc:41:85:2f:2e:73:
dc:43:d6:fe:96:b1:d2:b5:77:fa:82:b4:32:04:2e:
e3:d2:35:62:31:40:59:2d:34:38:97:0a:00:f2:b0:
95:e3:8f:0f:2b:40:80:81:b7:1f:ea:e7:5c:bf:75:
e3:0a:fd:38:81:1d:1f:1d:87:11:ce:6e:4e:e8:f5:
e8:ad:a4:60:90:52:a3:dc:fb:8c:c5:85:c0:46:a3:
25:59:a3:60:49:67:5f:a8:e7:89:25:c5:29:d5:0f:
6c:0f:73:97:58:77:bd:be:99:b0:cd:8a:9b:5b:5f:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:73:21:42:0C:A2:60:7F:A9:FB:34:54:1E:92:CF:70:2C:E3:84
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eDZzIUIMomB_qfs0VB6Sz3As44Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/23
62.192.152.0/24
77.81.182.0/24
79.110.227.0/24
85.204.18.0/24
89.34.106.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.107.0/24
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
40:16:e7:d5:6f:6f:a8:0b:ff:e3:9b:c5:d5:82:0f:8d:2a:40:
2f:da:2a:ac:75:71:9a:99:bb:c3:69:07:f6:e6:38:4c:b3:28:
05:94:22:f8:af:f7:e3:12:d5:ae:e3:43:74:a5:eb:2c:2c:38:
c8:90:2c:84:35:70:03:29:40:a7:2e:3a:ad:84:be:e8:b9:8c:
2a:0f:9b:c8:15:25:9a:0a:fc:7e:33:99:90:09:05:62:a6:56:
ff:89:59:b2:79:75:00:5b:6e:bf:30:67:eb:aa:ca:7a:d5:27:
f4:1d:9e:89:6d:3f:3b:6d:51:99:06:26:ec:72:14:8e:72:62:
fb:5b:09:10:94:b2:a5:a1:62:2f:b9:ca:da:af:f8:dd:88:b7:
f5:57:af:ea:41:cf:7e:6d:81:a3:00:a4:cd:76:dd:e4:38:4d:
ff:8f:9c:45:97:c5:ab:60:07:85:83:0b:f8:7a:75:40:cb:ea:
10:49:65:72:3a:3f:4c:35:18:ce:f6:59:2e:0e:aa:42:48:b1:
f1:1f:56:94:3b:98:04:92:01:78:2c:6e:d3:9d:f8:9a:d0:29:
fb:83:00:7d:23:3a:cf:1d:7b:7f:7f:4f:05:74:65:24:24:19:
8c:4d:a5:9c:21:95:83:e8:2d:b2:ae:9d:6f:bc:6b:aa:54:a8:
f4:ff:6c:01
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZio8Bu1HrfRtOW+yqUV07JIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwODE0MTQxNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODM2NzMyMTQyMGNhMjYwN2ZhOWZiMzQ1NDFlOTJjZjcwMmNlMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SsF3DHezWWFCp8lwdP9GwLfKGa3
HAh2dKlnSAU0xPIxlp1n4bxyjfzmwDbFYwcUiBMZ2TbFs/4ljQpN+rwKYh06kPTn
668buu/yQ7PGVXjWfSfn5fwWgvpqixsFxW2seUojSNJFabAUb6lUFnkbKNnxJe+3
fnDTw9Qi8OYeDikZIHcP7m4jVWj1dkCLR3T8QYUvLnPcQ9b+lrHStXf6grQyBC7j
0jViMUBZLTQ4lwoA8rCV448PK0CAgbcf6udcv3XjCv04gR0fHYcRzm5O6PXoraRg
kFKj3PuMxYXARqMlWaNgSWdfqOeJJcUp1Q9sD3OXWHe9vpmwzYqbW19thwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFHg2cyFCDKJgf6n7NFQeks9wLOOEMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZURaeklVSU1vbUJfcWZzMFZCNlN6M0FzNDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQBLVgO
AwQAPsCYAwQATVG2AwQAT27jAwQAVcwSAwQAWSJqAwQAWSXAAwQAWSgkAwQAWSjX
AwQAWS0jAwQAWS8kAwQAXXNrAwQAXXYkAwQAXXeaAwQAXsarAwQAgAApAwQAsN+8
AwQAucbpAwQAvPHdAwQAwbKGMA0GCSqGSIb3DQEBCwUAA4IBAQBAFufVb2+oC//j
m8XVgg+NKkAv2iqsdXGambvDaQf25jhMsygFlCL4r/fjEtWu40N0pessLDjIkCyE
NXADKUCnLjqthL7ouYwqD5vIFSWaCvx+M5mQCQViplb/iVmyeXUAW26/MGfrqsp6
1Sf0HZ6JbT87bVGZBibschSOcmL7WwkQlLKloWIvucrar/jdiLf1V6/qQc9+bYGj
AKTNdt3kOE3/j5xFl8WrYAeFgwv4enVAy+oQSWVyOj9MNRjO9lkuDqpCSLHxH1aU
O5gEkgF4LG7Tnfia0Cn7gwB9IzrPHXt/f08FdGUkJBmMTaWcIZWD6C2yrp1vvGuq
VKj0/2wB
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:48:34 2025 by rpki-client