Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/mREEeF225OSAkRfQQtiIq9LrI6o.roa
File: mREEeF225OSAkRfQQtiIq9LrI6o.roa (raw, json)
Hash identifier: 1IS5pv/sHGlKIqLjS6Tjvd/z25MjlvDjJaOIDNQv5zU=
Subject key identifier: 99:11:04:78:5D:B6:E4:E4:80:91:17:D0:42:D8:88:AB:D2:EB:23:AA
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0199A44DBF69E074732A95CDA672472A6F52
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/mREEeF225OSAkRfQQtiIq9LrI6o.roa
Signing time: Thu 02 Oct 2025 09:43:02 +0000
ROA not before: Thu 02 Oct 2025 09:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:4d:bf:69:e0:74:73:2a:95:cd:a6:72:47:2a:6f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Oct 2 09:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991104785db6e4e4809117d042d888abd2eb23aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:24:ed:47:f1:a7:b1:b3:e5:eb:30:37:05:
de:77:83:8c:6e:5a:94:da:14:a4:db:dc:3c:52:b8:
82:d2:96:d6:bf:c9:fe:f4:4a:67:08:6a:89:82:39:
d8:65:5b:f9:9e:a6:7a:52:9f:7b:7c:51:f3:dc:2c:
26:0e:f5:d2:aa:d0:d8:75:8e:d1:12:a4:7a:da:2b:
c3:0e:c0:63:82:83:89:41:7e:c9:23:c1:e4:11:da:
4a:9a:d7:60:b0:0d:bb:df:95:10:8a:e6:1e:1b:e6:
d1:83:61:2c:bb:4f:ce:6d:1e:d9:18:bf:fe:c9:22:
6f:dd:2e:98:72:f8:a9:37:70:ec:50:91:ff:0c:f7:
a6:b5:b5:cc:23:8d:b3:a7:0b:6b:51:a5:78:49:67:
d3:18:2f:b7:6f:c6:0e:54:21:a3:c9:a6:84:bf:5b:
8f:36:37:43:f6:a5:8e:fd:df:26:68:64:6c:2f:22:
e2:3d:05:c2:16:4d:41:df:c8:25:eb:c5:a7:3b:72:
9e:c2:a1:e2:5a:63:0d:68:a5:ee:8d:30:3b:08:87:
34:5c:9a:6c:69:11:ad:41:d4:c3:b2:76:bf:12:92:
bd:84:f8:03:2e:b1:29:4e:62:9f:fb:53:32:2c:9e:
df:7f:cb:2c:0a:44:27:54:c4:18:72:5d:c8:e3:f1:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:04:78:5D:B6:E4:E4:80:91:17:D0:42:D8:88:AB:D2:EB:23:AA
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/mREEeF225OSAkRfQQtiIq9LrI6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.212.0/22
46.102.106.0/24
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
89.187.77.0/24
92.63.224.0/24
148.222.186.0/24
176.98.40.0/24
185.109.48.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
3b:9a:ef:9e:df:bc:61:08:6b:cb:6c:20:25:84:2d:94:10:d9:
b4:3d:40:b6:e9:fe:48:ad:6f:66:8e:dc:f5:ca:e6:4c:3a:d6:
78:5f:51:5d:ca:f0:9f:94:95:7e:6b:a9:97:51:b3:fc:6c:59:
a6:12:69:7f:02:31:71:f7:98:e7:95:8b:1e:44:cc:99:6e:f7:
8f:fa:b6:58:22:9b:4f:fd:9f:da:50:44:83:dd:88:25:d8:1c:
2b:5e:63:05:c2:95:1d:f4:56:62:5a:c1:28:25:26:93:6b:25:
20:45:35:c1:93:e8:48:9e:ca:ac:b4:8a:1d:63:83:31:a8:9b:
26:02:35:e2:f7:35:53:fd:f9:5b:e1:bb:e0:64:52:9f:6a:4a:
fc:46:2f:7e:4c:7a:27:95:b3:2f:00:40:83:2d:e4:58:4b:bf:
03:cc:9d:af:71:57:b9:48:83:53:df:a5:45:27:c7:e4:b8:f2:
68:f4:45:f2:85:8a:0d:2d:c8:ae:28:fc:c4:59:61:c0:b9:36:
55:1e:c6:23:44:85:47:39:28:5e:80:e9:61:cf:ac:32:ca:db:
cb:0b:82:bd:c8:63:95:07:d0:d8:a3:9a:cf:40:53:2a:25:16:
1f:cb:e5:9b:b0:5c:2e:26:a2:aa:f5:c6:08:0a:18:3d:1e:88:
4d:b6:00:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:31 2025 by rpki-client