Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/l88A-U1C1HpDcKZFwV0rx4ROPL8.roa
File: l88A-U1C1HpDcKZFwV0rx4ROPL8.roa (raw, json)
Hash identifier: LE624BUeBJG4T5usIVVU9iI5D8HLeXS6HrWctI5mJ3g=
Subject key identifier: 97:CF:00:F9:4D:42:D4:7A:43:70:A6:45:C1:5D:2B:C7:84:4E:3C:BF
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0197AD11EC8F24A7DB5590CBD6A0B0153870
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/l88A-U1C1HpDcKZFwV0rx4ROPL8.roa
Signing time: Thu 26 Jun 2025 16:28:42 +0000
ROA not before: Thu 26 Jun 2025 16:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.66.132.0/24 maxlen: 24
45.66.135.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.90.140.0/24 maxlen: 24
45.128.152.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
89.31.124.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
152.89.210.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.224.0/24 maxlen: 24
185.167.117.0/24 maxlen: 24
185.167.118.0/24 maxlen: 24
185.167.119.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.171.123.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
185.187.236.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
192.54.59.0/24 maxlen: 24
193.37.56.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
193.38.136.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
194.156.229.0/24 maxlen: 24
2a0c:8a40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:11:ec:8f:24:a7:db:55:90:cb:d6:a0:b0:15:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jun 26 16:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97cf00f94d42d47a4370a645c15d2bc7844e3cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:43:84:a6:99:9c:36:72:fe:77:23:14:bf:
a2:39:c0:e8:dc:86:8d:77:61:d6:e3:0b:dc:94:d6:
ae:6f:d0:89:19:54:da:70:5b:51:e3:15:bf:b7:3c:
6a:27:40:86:be:9d:54:9c:90:ec:fc:42:9d:39:bf:
a6:da:2d:61:ea:2b:83:70:6c:54:ac:b9:fb:af:9f:
5a:52:b1:9a:be:ef:e7:9e:5e:46:dd:5b:aa:8a:99:
5e:b6:39:f0:b4:b0:1b:59:14:8d:7e:ec:96:29:27:
09:13:98:3a:52:a8:7d:07:4f:8f:1b:80:4b:9c:16:
d6:64:a9:6b:2f:74:ec:2b:1d:7e:53:a8:37:92:fb:
65:1f:3b:50:4e:0d:5a:fa:1a:5b:bc:18:3c:b3:b6:
26:13:a0:00:08:67:9c:59:ed:3c:72:9d:2f:ea:32:
7c:d2:cc:60:10:2d:5e:1b:85:fd:41:1f:5b:60:cd:
6e:88:95:1c:60:31:8d:1e:b2:ec:e5:43:60:8e:2e:
2a:93:40:8c:28:f1:b0:3c:7c:47:c2:11:ed:cc:f1:
71:db:11:dd:ef:e2:ca:b5:1e:0a:21:66:36:65:3d:
08:d7:d2:dc:39:00:58:11:96:de:9e:3b:e7:72:9f:
42:5a:14:2e:53:da:bd:f2:72:40:85:01:26:4c:4f:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:00:F9:4D:42:D4:7A:43:70:A6:45:C1:5D:2B:C7:84:4E:3C:BF
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/l88A-U1C1HpDcKZFwV0rx4ROPL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.132.0/24
45.66.135.0/24
45.82.165.0/24
45.85.2.0/24
45.90.140.0/24
45.128.152.0/24
45.134.18.0/24
45.144.242.0/23
89.31.124.0/24
91.220.202.0/23
147.78.14.0/24
152.89.210.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.224.0/24
185.167.117.0-185.167.119.255
185.171.122.0/23
185.172.114.0/24
185.175.142.0/23
185.187.236.0/24
188.119.102.0/24
192.54.58.0/23
193.37.56.0/23
193.38.136.0/24
194.124.32.0/24
194.156.229.0/24
IPv6:
2a0c:8a40:2::/48
Signature Algorithm: sha256WithRSAEncryption
4a:2f:2f:66:24:e0:6a:fd:d6:d6:ed:95:43:c3:ba:57:38:b4:
64:cf:04:83:cc:c1:83:7a:28:b7:f6:f1:cf:a9:81:d6:e0:46:
0a:b9:12:c2:5e:5a:18:b0:9e:5a:7e:b5:eb:1d:fe:86:74:f9:
1a:79:e7:36:8b:f5:6b:8e:1d:f7:21:bd:a2:fe:6c:9f:b8:84:
ed:d2:41:91:5e:27:e9:42:30:ba:ff:eb:f7:02:a2:30:10:13:
52:21:31:bd:51:1d:08:4d:0d:f1:75:8d:01:f1:dc:26:56:ba:
e1:26:58:46:d7:72:4f:a1:08:04:5a:fa:95:7e:02:3a:87:0e:
a2:e8:59:de:be:4a:47:0b:95:5f:9f:98:64:fe:c6:e3:4f:ce:
09:1c:ac:ab:99:c8:5b:91:23:0e:d1:3c:25:7b:08:ba:d2:54:
a6:df:34:96:97:45:f7:8f:e0:ce:a4:bc:78:74:ec:a2:7b:e4:
ce:ac:96:be:65:70:a1:49:b2:4d:7d:23:f6:0b:78:1c:8c:8a:
6d:e5:fb:2e:6f:fb:87:ab:3d:81:92:a5:c3:07:58:bb:99:e5:
f0:11:32:58:a9:e0:d9:39:12:7b:a5:8b:45:01:a8:d9:8b:e8:
9c:87:57:99:c7:f2:6e:7f:ba:59:08:cf:34:e1:61:47:72:5a:
7c:99:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:50:25 2025 by rpki-client