Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/p8XI18_G0w6VQzp-cFuSc-YU7KU.roa
File: p8XI18_G0w6VQzp-cFuSc-YU7KU.roa (raw, json)
Hash identifier: 5L36hI/Ib9EXnAz7w+VyYhvbv64/xZKpeIB+xqORWK4=
Subject key identifier: A7:C5:C8:D7:CF:C6:D3:0E:95:43:3A:7E:70:5B:92:73:E6:14:EC:A5
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 0199F1620DE61EE1E32F4772046B4FC88045
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/p8XI18_G0w6VQzp-cFuSc-YU7KU.roa
Signing time: Fri 17 Oct 2025 08:55:59 +0000
ROA not before: Fri 17 Oct 2025 08:55:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
62.112.200.0/22 maxlen: 22
89.222.64.0/20 maxlen: 20
185.122.44.0/22 maxlen: 22
185.122.44.0/24 maxlen: 24
185.122.45.0/24 maxlen: 24
185.122.46.0/24 maxlen: 24
185.122.47.0/24 maxlen: 24
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0:1::/48 maxlen: 48
2a01:57e0:200::/39 maxlen: 39
2a01:57e0:400::/39 maxlen: 39
2a01:57e0:600::/39 maxlen: 39
2a01:57e0:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:62:0d:e6:1e:e1:e3:2f:47:72:04:6b:4f:c8:80:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 17 08:55:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7c5c8d7cfc6d30e95433a7e705b9273e614eca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:77:cc:f8:a3:45:da:f5:64:a1:49:2d:34:4f:
93:6d:2b:0b:ae:ef:3a:ca:89:f2:a5:dc:49:af:d7:
83:6d:40:e4:61:fc:72:f0:82:da:99:39:6a:2a:b5:
c2:a2:80:c8:31:66:2f:07:53:c4:87:9d:7e:1e:51:
4a:1a:be:bf:da:3a:78:19:17:13:6b:36:97:ae:dd:
e6:fb:f0:53:d4:29:e5:63:ac:fa:0a:28:93:65:05:
73:7c:89:78:55:94:8a:01:b2:8f:1a:14:53:1e:ec:
31:ba:e8:94:b4:7a:91:72:ed:e2:4a:41:35:72:c5:
58:c3:47:9c:e3:f7:fa:a1:b4:1b:d8:06:79:82:af:
0c:3d:8c:2f:d4:80:73:48:35:35:28:a3:4e:f7:89:
b2:81:5e:27:bc:0a:23:21:b0:48:2c:7a:50:72:58:
61:d4:71:fe:98:e6:f3:97:ae:54:03:c5:42:7f:98:
03:a9:ba:b1:9a:bc:21:65:60:96:b0:8c:66:24:21:
b7:42:3d:3e:c7:92:fa:5c:79:8c:4f:4a:2e:06:d5:
54:d5:39:35:80:a9:6f:15:1f:3c:cf:2d:50:cf:5a:
3a:7b:e4:78:e6:52:fd:e9:5a:a9:8b:25:0a:da:23:
19:58:d4:4a:4d:19:d0:4d:a6:f4:58:d9:67:66:74:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:C8:D7:CF:C6:D3:0E:95:43:3A:7E:70:5B:92:73:E6:14:EC:A5
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/p8XI18_G0w6VQzp-cFuSc-YU7KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
62.112.200.0/22
89.222.64.0/20
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0:1::/48
2a01:57e0:200::-2a01:57e0:fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:22:d6:ee:82:d8:67:80:66:b3:00:63:38:bf:76:81:c6:ff:
72:34:df:84:d1:18:6d:85:be:34:4c:a3:ad:c4:43:6f:de:06:
95:11:f4:a9:9a:f3:6f:95:0d:3c:a2:4e:0c:35:4a:e5:65:e3:
5f:b7:83:77:32:45:3a:96:a9:05:3e:24:08:b0:68:c7:51:29:
b2:48:26:e5:58:df:be:37:22:f7:c8:55:f5:a7:69:6e:e1:5e:
a0:1c:6b:92:bf:da:2e:7c:95:37:c7:f5:34:a3:cf:40:b8:84:
1f:0c:44:2f:1b:43:f9:fe:a0:55:95:6f:06:d9:91:19:bb:4a:
02:df:2b:d4:25:d9:fd:e7:75:86:ce:64:72:5e:36:46:a5:05:
eb:be:c2:f9:62:6b:6f:af:83:47:87:41:68:4d:af:a2:e2:4d:
c4:c7:38:6a:7b:97:52:77:c0:61:84:f5:58:00:c9:1e:fb:fa:
77:c8:c5:f1:4f:29:7d:f1:de:5c:54:c1:b7:01:42:5d:d7:b5:
61:79:08:6e:ad:ae:61:1a:dd:bd:2e:e1:64:c0:81:7f:a5:9e:
5a:5a:ba:aa:d6:73:7f:80:22:34:85:a3:cf:ab:dd:13:bb:3d:
24:a1:cf:42:b4:50:3e:f7:63:56:78:15:d4:80:d3:1f:f3:0c:
f1:8a:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:25 2025 by rpki-client