Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I7lEvg_kk3t1M9FRjAgqcnZcFEE.roa
File: I7lEvg_kk3t1M9FRjAgqcnZcFEE.roa (raw, json)
Hash identifier: yEAFBKVvw73ZsYvYWRAvsB50kieE1iQEhhVpUaRZN2s=
Subject key identifier: 23:B9:44:BE:0F:E4:93:7B:75:33:D1:51:8C:08:2A:72:76:5C:14:41
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199D9587A100AC1C39336D1C6097FBD78D2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I7lEvg_kk3t1M9FRjAgqcnZcFEE.roa
Signing time: Sun 12 Oct 2025 16:54:38 +0000
ROA not before: Sun 12 Oct 2025 16:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.130.255.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
192.153.171.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d9:58:7a:10:0a:c1:c3:93:36:d1:c6:09:7f:bd:78:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 12 16:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23b944be0fe4937b7533d1518c082a72765c1441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:26:f1:af:ae:ba:f0:0b:cc:48:00:12:48:
92:03:fe:da:53:35:1b:7f:0f:8a:26:d7:e1:d6:5c:
25:6d:c2:d6:35:5b:93:08:03:fd:e9:54:d0:3e:9f:
c0:e3:0d:ff:b5:a3:2c:77:51:e5:25:4a:92:bc:07:
5a:81:86:e8:8d:8c:e7:33:31:1c:24:40:74:83:23:
bf:91:a1:37:68:17:52:a6:1c:d7:55:fd:e2:c5:40:
57:9b:12:7f:2b:d9:96:bd:58:b2:31:65:3f:45:04:
4f:91:fc:4b:9c:a2:e2:68:ad:42:95:cd:e7:4e:3d:
b8:ca:70:24:f6:d2:7e:93:36:6a:d6:09:4f:9d:13:
85:7f:56:06:2f:59:84:63:02:ce:af:2b:ef:77:30:
22:2e:b4:0c:15:0e:11:f0:7a:8b:0f:3c:6f:d1:99:
75:54:16:ad:1e:af:44:ad:15:e7:8e:b1:04:b4:be:
50:a9:55:89:97:8a:2c:78:b8:29:46:14:af:81:15:
c0:52:d8:a7:e1:25:b1:11:e6:eb:97:a1:d9:82:b8:
2b:ca:49:be:e0:1c:45:9b:fd:ae:3a:92:12:fd:4f:
a7:16:38:b7:5f:a1:39:81:31:7c:f2:aa:03:08:d7:
7e:ed:bc:8e:14:da:21:7c:38:94:32:89:c8:ba:17:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:44:BE:0F:E4:93:7B:75:33:D1:51:8C:08:2A:72:76:5C:14:41
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I7lEvg_kk3t1M9FRjAgqcnZcFEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.130.255.0/24
45.131.212.0/24
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.146.131.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
45.158.185.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.242.245.0/24
192.153.171.0/24
193.8.215.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
33:57:f9:9f:81:fc:d7:56:e1:1f:4b:33:ee:d3:e8:22:3c:48:
51:a6:61:a0:15:ee:56:43:58:2a:bb:93:fb:d2:57:e9:9d:d5:
c5:14:d4:d6:c0:4c:a0:47:14:d5:68:94:86:c3:15:32:8a:c3:
e7:98:f7:04:03:95:ce:71:6f:06:9a:52:83:94:44:7c:d5:6a:
d0:40:22:ce:f3:88:bc:34:8c:9e:c0:15:f2:6f:d7:e7:6d:06:
0a:e9:99:65:23:bc:aa:ca:70:40:18:3f:88:20:fd:4b:0d:90:
c8:eb:01:c7:89:25:40:ea:67:0e:42:47:11:05:e2:a9:6c:71:
51:a4:38:5e:fb:b4:59:db:e2:97:e3:90:2a:46:6f:29:8a:1f:
4b:fa:8a:af:e2:e8:db:d9:f1:7b:f8:ec:4f:ba:9b:73:5c:d1:
34:d6:37:74:4a:d4:15:b3:ae:73:71:a4:b1:46:20:95:48:6f:
ca:16:39:db:25:4d:a9:d7:be:07:b5:13:6f:76:7c:8e:72:5c:
35:cc:cb:92:c8:57:27:6c:64:27:f2:11:a6:97:83:15:61:60:
17:a5:6e:54:81:b7:5b:62:db:f5:09:7f:ea:08:49:50:b8:10:
67:7d:3a:42:c3:7a:c5:c9:98:db:9e:8f:7f:f3:16:d4:1a:8c:
50:69:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:01 2025 by rpki-client