Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-kkETCu_SHyihaU4uePmi_Wi_sI.roa
File: 1-kkETCu_SHyihaU4uePmi_Wi_sI.roa (raw, json)
Hash identifier: ZE+XLiQxLqTSSHALC9e0tRBod9TsSBceLXcb2YZ0U68=
Subject key identifier: FA:49:04:4C:2B:BF:48:7C:A2:85:A5:38:B9:E3:E6:8B:F5:A2:FE:C2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019786BBCB1F75DBF5DF35F18903C8379B33
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-kkETCu_SHyihaU4uePmi_Wi_sI.roa
Signing time: Thu 19 Jun 2025 05:49:03 +0000
ROA not before: Thu 19 Jun 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
2a0e:d603::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:bb:cb:1f:75:db:f5:df:35:f1:89:03:c8:37:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 19 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa49044c2bbf487ca285a538b9e3e68bf5a2fec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:47:b9:ca:4e:9a:f7:26:b5:2b:0c:2f:ea:
ed:a2:19:d0:00:43:5e:13:d2:2e:c8:9a:2e:13:94:
d0:6b:bf:e6:cb:df:90:2a:fd:d6:27:3c:2a:24:15:
c4:1f:54:43:c0:6f:28:af:90:da:ae:ba:3a:59:51:
36:28:4b:23:b0:42:b5:02:84:98:4b:aa:80:8d:35:
55:63:95:09:09:e4:bc:41:36:af:85:03:1f:e1:8e:
f4:d3:70:a1:9c:24:b6:cc:25:1a:da:f1:af:4c:c7:
9a:63:64:eb:b2:d7:a5:1c:dc:bc:c5:96:3e:9a:0f:
a7:e1:d2:b5:5e:77:67:a7:33:a7:a2:c6:f2:98:14:
5c:2e:08:05:85:8d:7f:a9:77:cc:7a:dd:8f:ed:28:
4b:75:2f:92:2b:e9:5a:5c:22:69:4a:59:8d:86:e6:
a9:a7:03:ca:5e:ba:7a:83:01:3d:a5:c6:ef:8e:66:
5c:57:d9:c9:77:09:47:a2:67:05:7b:e6:88:c2:88:
d8:09:e8:86:b1:aa:ee:1c:f8:08:af:b5:1d:98:89:
56:32:1a:49:2e:87:f8:b6:e0:34:17:3c:84:e7:85:
8d:21:36:49:6f:73:eb:cd:34:78:da:6d:34:f4:6b:
0d:fb:10:c0:ac:2a:42:c6:31:65:56:d7:7c:c4:05:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:49:04:4C:2B:BF:48:7C:A2:85:A5:38:B9:E3:E6:8B:F5:A2:FE:C2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-kkETCu_SHyihaU4uePmi_Wi_sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
45.133.247.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.105.116.0/23
185.125.216.0/22
185.125.229.0/24
185.125.231.0/24
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
2a0e:d603::/32
Signature Algorithm: sha256WithRSAEncryption
5c:40:33:20:ce:30:24:e1:80:ba:27:f9:6e:27:d7:ba:fc:5e:
b4:75:16:6b:6b:f3:84:a6:48:41:cc:f7:0b:d8:11:05:fb:95:
de:89:d0:9d:9b:aa:ff:2c:c2:ed:b0:66:20:a0:ea:bb:85:87:
d4:56:f8:c1:b1:ae:0a:7b:21:0d:1a:cb:2e:33:5d:db:fe:01:
b3:67:35:f8:ba:03:a6:d1:fd:51:7c:60:a8:28:39:a2:7e:73:
13:46:96:d7:db:40:fd:a1:fd:68:15:3e:3a:4d:1d:04:b3:64:
2f:76:8d:c9:83:61:a5:e6:9e:57:07:b9:b0:56:9b:b7:bd:3c:
97:37:ed:ae:52:a2:42:f4:9f:c0:18:e5:d0:35:65:22:bd:01:
83:65:75:a2:84:90:cf:fc:96:46:f6:02:ce:5e:81:0b:a2:67:
be:74:08:fe:cf:35:03:13:37:a9:b5:e1:f5:79:df:a3:a9:f2:
ae:f5:5a:cc:19:58:a1:c4:c7:86:4e:84:8b:9d:22:59:07:a4:
4a:cc:3c:9d:0b:fc:c7:1b:56:99:31:95:6b:fc:3b:aa:b9:43:
5a:e2:25:af:af:18:27:7b:b4:03:44:ce:a0:1b:ab:72:61:49:
f9:85:61:53:f6:32:7f:09:15:65:ee:c0:a9:28:c9:62:7d:ee:
ae:c9:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:39:41 2025 by rpki-client