Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/jSjfKvzyOnWZuydcXt3rIa9SA5M.roa
File: jSjfKvzyOnWZuydcXt3rIa9SA5M.roa (raw, json)
Hash identifier: vLtsL1YPKmn6qXZiRbrjcjOEo4/Oi9668rEJ8VN4zCs=
Subject key identifier: 8D:28:DF:2A:FC:F2:3A:75:99:BB:27:5C:5E:DD:EB:21:AF:52:03:93
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01994DAED8A546C8D672C71D9948C78E1CC2
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/jSjfKvzyOnWZuydcXt3rIa9SA5M.roa
Signing time: Mon 15 Sep 2025 14:02:08 +0000
ROA not before: Mon 15 Sep 2025 14:02:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
62.106.66.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
91.211.27.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
155.212.242.0/24 maxlen: 24
155.212.243.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.104.75.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
2a10:1fc0:13::/48 maxlen: 48
2a10:1fc0:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:ae:d8:a5:46:c8:d6:72:c7:1d:99:48:c7:8e:1c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Sep 15 14:02:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d28df2afcf23a7599bb275c5eddeb21af520393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:1c:51:e9:b3:94:a3:bc:23:14:7b:8f:66:
aa:17:0a:5b:73:e1:db:49:6c:55:25:77:c8:2c:e8:
73:dc:9f:9c:39:db:c7:20:0b:5b:b1:7a:6a:69:c1:
e0:d8:ba:52:83:74:91:c8:70:68:7b:8e:fa:42:85:
36:98:c3:e7:85:09:f5:20:7b:78:9d:6b:e5:e6:b8:
c8:27:b4:ab:6b:a3:0c:67:3f:d3:13:90:4a:a6:58:
5d:5a:c7:f0:43:00:5b:05:91:d1:78:d8:79:76:1d:
58:80:1d:c2:25:7e:f8:b2:79:28:3e:98:4c:82:c6:
0a:6b:ca:94:f7:46:38:e5:7e:26:73:7c:7d:01:3c:
c6:ac:85:02:ff:54:c7:a8:e5:07:94:0a:96:ee:f8:
74:8a:ac:f2:70:64:e0:3f:6d:a8:19:e8:70:f2:fa:
23:fb:2f:f9:72:cb:23:02:26:ee:d2:1a:65:3a:d9:
e6:80:44:e5:a6:93:33:4f:72:72:9f:b3:27:04:e4:
91:83:ef:36:1e:83:38:59:08:cc:1f:8c:d0:88:59:
17:ac:59:d9:46:af:50:02:69:21:80:bb:04:45:cf:
96:a8:80:53:2c:5e:6f:75:6f:ca:52:8a:2d:23:03:
fa:1a:2b:6d:5d:18:8e:d9:ef:d1:3d:4f:1d:91:75:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:DF:2A:FC:F2:3A:75:99:BB:27:5C:5E:DD:EB:21:AF:52:03:93
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/jSjfKvzyOnWZuydcXt3rIa9SA5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
62.106.66.0/24
77.72.85.0/24
91.211.27.0/24
91.235.234.0/24
91.242.241.0/24
146.19.143.0/24
146.19.254.0/24
155.212.242.0/23
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.104.75.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.61.120.0/23
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:b1:24:87:02:f8:a7:06:d8:ad:59:85:b9:ff:a6:20:3f:01:
a7:d8:95:64:d0:82:f2:67:b1:ce:3c:10:eb:1c:36:e3:e0:76:
c7:66:0e:3e:5b:66:99:20:5b:4e:2c:09:50:4d:f7:4f:17:09:
31:25:35:a8:14:e1:68:6b:de:54:b5:9e:22:86:f6:d5:01:a8:
14:15:5e:72:d4:68:3a:86:a2:5a:28:d5:f3:32:eb:01:c0:3c:
2c:6e:f6:61:97:08:86:3f:f9:d9:eb:b2:80:83:8b:62:b5:6a:
ad:6c:cd:59:3f:4d:42:67:aa:3f:53:3b:a0:39:16:b7:73:f7:
a1:1b:9d:ac:c8:c7:74:2b:1c:66:5a:59:06:7d:36:fd:94:ae:
9e:8e:51:5d:9e:a9:32:65:ab:f9:9c:ce:9b:a6:92:c7:57:15:
e2:98:2c:b1:85:1d:58:e6:88:87:0b:55:0c:46:68:9f:6f:43:
04:57:aa:3c:0c:62:fd:c3:8e:a1:39:71:ac:72:45:a6:1f:f8:
09:a4:8d:dd:29:11:3c:65:40:33:77:31:ac:f1:5a:71:89:d6:
fb:dd:84:3f:54:25:4c:7c:20:91:0b:c9:43:1c:78:46:1b:cf:
7b:e3:b7:75:40:cc:4f:6a:99:60:14:28:54:12:52:9e:35:38:
ae:e6:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:29 2025 by rpki-client