Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lbw4jerYeZNyQbKpGzfW18PuCQk.roa
File: lbw4jerYeZNyQbKpGzfW18PuCQk.roa (raw, json)
Hash identifier: niS3tBe1zLAPsXpUwz/PQ2yiAA40ohdwg0UvcE+c8sk=
Subject key identifier: 95:BC:38:8D:EA:D8:79:93:72:41:B2:A9:1B:37:D6:D7:C3:EE:09:09
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0198A8FB16C8CC350E20F09C67097037BE5E
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lbw4jerYeZNyQbKpGzfW18PuCQk.roa
Signing time: Thu 14 Aug 2025 14:28:04 +0000
ROA not before: Thu 14 Aug 2025 14:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.59.232.0/22 maxlen: 24
185.68.245.0/24 maxlen: 24
185.79.51.0/24 maxlen: 24
185.79.79.0/24 maxlen: 24
185.81.172.0/24 maxlen: 24
185.81.173.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 24
185.81.186.0/23 maxlen: 24
185.89.40.0/24 maxlen: 24
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 24
185.95.100.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.80.0/24 maxlen: 24
185.96.83.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.112.56.0/23 maxlen: 24
185.175.224.0/23 maxlen: 24
185.185.147.0/24 maxlen: 24
193.221.215.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:fb:16:c8:cc:35:0e:20:f0:9c:67:09:70:37:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 14 14:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95bc388dead879937241b2a91b37d6d7c3ee0909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:10:8c:31:f6:22:e3:2b:ac:27:af:e4:ce:
86:e6:16:4c:05:34:9e:34:a3:f3:2f:40:83:be:83:
10:c6:33:22:63:82:88:36:b0:13:5d:2f:67:fa:70:
c8:95:97:12:fc:3e:eb:9b:e7:0e:6c:a3:49:dc:0f:
49:16:0a:21:8d:b4:b7:24:a8:3c:bf:d2:1a:4b:22:
63:01:bf:c6:0a:73:7b:32:e3:a7:d4:b0:6c:a4:8e:
4f:c1:32:4f:eb:72:4e:2e:68:c9:2b:7f:22:29:87:
37:2c:40:27:9f:53:09:ab:90:8c:39:da:e1:d7:6e:
3c:04:a6:3b:60:4d:24:4e:fe:51:f0:d0:52:da:f2:
6e:59:2c:40:f8:ac:fd:c2:57:cf:72:b0:7c:d5:6a:
c9:7f:b0:30:ed:8f:4a:c7:86:43:17:00:10:28:e5:
22:8c:2c:88:85:78:c4:96:1b:92:34:8b:06:98:44:
6e:49:12:ee:e8:2b:f2:aa:2c:6c:4d:eb:72:36:48:
d4:5e:e5:bf:a0:ca:80:81:43:8a:ca:11:9d:a4:d5:
f3:e3:2a:e0:f5:d7:6e:0c:5d:94:8c:02:0d:9b:fe:
c8:5b:a6:b2:bf:ea:85:9c:ba:b4:8c:a6:b0:b2:ea:
85:8a:49:39:e6:98:44:56:38:98:a2:70:96:13:10:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:38:8D:EA:D8:79:93:72:41:B2:A9:1B:37:D6:D7:C3:EE:09:09
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lbw4jerYeZNyQbKpGzfW18PuCQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.59.232.0/22
185.68.245.0/24
185.79.51.0/24
185.79.79.0/24
185.81.172.0/22
185.81.184.0/22
185.89.40.0/24
185.89.104.0/21
185.95.100.0/22
185.96.80.0/24
185.96.83.0/24
185.96.132.0/24
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.112.56.0/23
185.175.224.0/23
185.185.147.0/24
193.221.215.0/24
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:71:8f:ac:5b:c0:70:08:59:66:66:28:0e:84:c3:02:0f:a6:
d4:5f:76:33:d1:f2:0c:01:a4:d8:c4:1e:3e:8b:8e:32:a9:12:
36:f3:74:6c:a4:6c:a0:84:ed:e0:59:9b:d9:5b:14:d6:8c:41:
f4:96:b6:ab:5a:cc:66:7f:2e:07:0a:5f:7c:eb:d7:d3:01:ea:
7c:a8:57:3e:99:f5:b4:1e:98:cb:98:65:25:cb:e2:d3:96:a4:
2f:21:7a:81:a7:18:ea:fb:b8:9c:21:38:5d:6f:20:b4:b2:86:
bf:cb:53:03:51:67:85:81:47:1a:7e:b5:55:8b:76:0d:30:ac:
24:e5:83:64:27:2a:c2:90:bc:d8:aa:a5:c5:15:8a:2c:0b:14:
8c:9c:54:12:6a:58:32:19:50:4f:cd:e3:45:62:9f:45:51:6a:
77:19:06:2f:5b:17:ee:a0:e2:86:e1:82:8f:3c:27:d3:a7:66:
dd:d6:c5:19:be:b5:f4:43:b8:db:af:b7:c0:23:f9:10:b5:27:
de:75:28:28:4a:1d:9c:46:19:43:02:b3:6a:9e:01:30:fb:c1:
c4:7b:3c:1f:41:da:06:2a:f4:26:ef:bf:61:e7:fc:2d:9a:a5:
4c:79:dc:40:82:35:fa:3d:3b:20:71:ba:c5:ad:8b:60:0e:9a:
f2:da:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:43 2025 by rpki-client