Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/8liaJL0g-7zotMbXe_sm2ys9BE8.roa
File: 8liaJL0g-7zotMbXe_sm2ys9BE8.roa (raw, json)
Hash identifier: 30a8wxGDwl2f7yhZhDFSqSXr3+9jtWYD0pYLCfzDZkQ=
Subject key identifier: F2:58:9A:24:BD:20:FB:BC:E8:B4:C6:D7:7B:FB:26:DB:2B:3D:04:4F
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 019971A0215CDD15AC7C191F1B4CA5EF1CEC
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/8liaJL0g-7zotMbXe_sm2ys9BE8.roa
Signing time: Mon 22 Sep 2025 13:32:23 +0000
ROA not before: Mon 22 Sep 2025 13:32:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 5.152.149.0/24 maxlen: 24
37.77.160.0/21 maxlen: 24
45.156.60.0/23 maxlen: 24
45.156.62.0/23 maxlen: 23
46.31.104.0/21 maxlen: 24
81.29.176.0/22 maxlen: 23
85.208.76.0/22 maxlen: 24
185.25.234.0/23 maxlen: 23
185.37.116.0/22 maxlen: 23
185.47.138.0/24 maxlen: 24
185.59.20.0/22 maxlen: 23
185.186.12.0/22 maxlen: 23
185.246.95.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
2a02:2420::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:a0:21:5c:dd:15:ac:7c:19:1f:1b:4c:a5:ef:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Sep 22 13:32:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2589a24bd20fbbce8b4c6d77bfb26db2b3d044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:de:b0:0d:d1:70:62:1a:08:5e:3b:33:c1:6b:
4d:75:9d:b2:5d:42:31:6d:8d:0a:02:cd:4b:17:34:
dd:4d:6b:54:01:5a:85:2a:72:b6:1d:40:26:b6:eb:
df:62:6d:4c:81:6f:49:7f:95:c8:ce:81:c8:51:f4:
71:8b:0a:3b:39:55:d1:d5:9f:96:9e:9f:4e:35:6b:
5f:33:cb:5e:bd:53:ed:6d:41:ec:7b:f2:a9:74:f5:
76:2a:41:e9:30:2d:c3:63:f0:d4:3b:d9:4a:31:0b:
c7:ee:aa:b0:61:68:76:43:68:04:c4:8d:04:0a:0a:
ee:05:6f:e8:98:2c:29:e4:d8:3f:c7:af:c1:3b:20:
1c:d4:27:09:84:85:ee:df:69:66:12:2b:06:b8:2a:
39:08:7c:f6:9f:54:b3:63:80:7f:36:fb:60:e6:da:
7c:89:d2:9e:3d:56:3c:99:45:a0:f9:59:9d:f0:76:
2d:f0:ba:50:c3:44:dd:13:4e:7e:6c:ac:4d:3b:d2:
15:69:a8:bb:a4:fc:6c:ff:8e:8e:8b:85:67:cc:df:
c5:aa:32:01:1d:63:fd:08:61:cc:e6:aa:37:4c:86:
24:28:4b:93:a3:9f:1e:2d:78:c8:80:ae:47:86:ad:
93:33:69:35:9e:b4:bf:1a:1c:46:e9:db:74:46:6e:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:9A:24:BD:20:FB:BC:E8:B4:C6:D7:7B:FB:26:DB:2B:3D:04:4F
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/8liaJL0g-7zotMbXe_sm2ys9BE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.149.0/24
37.77.160.0/21
45.156.60.0/22
46.31.104.0/21
81.29.176.0/22
85.208.76.0/22
185.25.234.0/23
185.37.116.0/22
185.47.138.0/24
185.59.20.0/22
185.186.12.0/22
185.246.95.0/24
195.177.114.0/24
IPv6:
2a02:2420::/32
Signature Algorithm: sha256WithRSAEncryption
4a:f8:83:b0:c7:b7:6c:a4:9e:26:95:d4:22:7e:a3:64:ed:13:
22:d2:e2:9d:57:e9:41:42:56:80:7c:47:50:8b:ad:4b:f6:07:
28:d8:7a:51:46:d5:76:22:eb:58:17:fe:90:1c:52:a9:9d:5a:
43:3d:da:2d:57:f3:9b:19:1f:d9:2e:84:e7:f4:a5:77:72:9a:
d2:c1:d7:c7:36:0b:d0:a2:fb:c9:09:62:1d:99:82:09:ba:97:
a2:3a:28:f7:6c:aa:8a:65:cc:a0:b0:4f:18:3c:89:c9:ae:ed:
9d:7c:ff:0d:9b:b5:ca:63:c5:cb:aa:a7:9d:ef:5e:9e:e0:ff:
87:f1:b0:82:0f:63:c1:39:53:cd:b3:35:8e:36:81:6f:7f:dd:
fe:f6:25:83:9e:27:f8:f4:f3:93:d7:3f:78:7a:0d:e2:e8:4b:
c1:69:fa:a1:58:90:b8:29:5a:d4:33:95:86:9b:f5:bf:ae:7f:
da:b1:b6:62:f5:7c:79:73:9a:2d:15:a5:45:08:bf:c6:34:23:
f9:b8:aa:30:19:6b:bf:b9:8b:05:97:b7:66:d8:bb:8a:af:d8:
05:59:e6:46:1d:87:40:f3:fe:b9:74:93:02:50:25:13:1d:b3:
d7:fc:da:c2:07:65:37:04:5b:c2:5e:e1:89:f0:e1:f5:b5:d9:
d2:fd:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:17:07 2025 by rpki-client