Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/8GfQJwSm8WOL4eiiEZHqevjvttA.roa
File: 8GfQJwSm8WOL4eiiEZHqevjvttA.roa (raw, json)
Hash identifier: 3bVJWVWZRhXVWLoMKn0YWpgHV5qRAlMtfEADmaxXPBY=
Subject key identifier: F0:67:D0:27:04:A6:F1:63:8B:E1:E8:A2:11:91:EA:7A:F8:EF:B6:D0
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 0199BE9EBD58C8B32785D2531C80D5478033
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/8GfQJwSm8WOL4eiiEZHqevjvttA.roa
Signing time: Tue 07 Oct 2025 12:21:38 +0000
ROA not before: Tue 07 Oct 2025 12:21:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206375
IP address blocks: 45.135.204.0/24 maxlen: 32
45.135.205.0/24 maxlen: 32
45.135.206.0/24 maxlen: 32
45.135.207.0/24 maxlen: 32
139.28.104.0/24 maxlen: 32
139.28.105.0/24 maxlen: 32
139.28.106.0/24 maxlen: 32
139.28.107.0/24 maxlen: 32
185.188.128.0/24 maxlen: 32
185.188.129.0/24 maxlen: 32
185.188.130.0/24 maxlen: 32
185.188.131.0/24 maxlen: 32
185.219.176.0/24 maxlen: 32
185.219.177.0/24 maxlen: 32
185.219.178.0/24 maxlen: 32
185.219.179.0/24 maxlen: 32
2a0b:bf40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:9e:bd:58:c8:b3:27:85:d2:53:1c:80:d5:47:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Oct 7 12:21:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f067d02704a6f1638be1e8a21191ea7af8efb6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:0d:66:70:83:fa:87:e6:db:b4:0d:ae:50:
5e:ee:84:86:a6:02:0a:9b:47:d4:fa:b6:8d:bb:44:
33:47:23:ce:84:20:41:89:c4:95:a0:1c:32:a6:ef:
ff:89:3f:87:06:65:b5:41:a6:24:7b:63:90:19:f4:
de:76:d7:b7:40:92:9b:b9:39:e2:7c:a2:8d:16:ab:
08:7d:53:a3:6f:f6:d0:77:2d:08:65:24:94:ca:d7:
10:87:02:5d:e8:df:b3:09:19:12:e7:44:c0:6d:be:
e7:13:11:6a:7c:b5:56:be:90:03:7f:56:23:a1:a7:
38:f5:e9:a1:82:f9:0d:88:9a:bb:0d:cf:cc:3a:3b:
86:d9:b9:1e:e2:92:7e:d2:53:1c:3d:ec:8d:c6:c4:
65:0a:1e:cf:d8:df:5e:2e:72:7d:35:6c:01:97:8f:
0a:6a:d4:d0:bc:fc:33:fe:f0:dc:cb:02:f8:0f:d5:
23:0d:96:67:f3:6f:6d:be:d3:1b:63:26:31:bf:a3:
e9:bf:0c:28:55:13:0c:41:5a:16:63:b2:14:5c:f9:
3d:4b:da:35:2c:3b:a7:e4:39:3e:5d:9e:1f:96:28:
b9:7b:66:6e:37:93:c5:39:6a:cd:28:18:5f:87:04:
a2:ad:08:01:a1:7c:b6:d6:e4:2a:d3:c6:0f:a1:7e:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:67:D0:27:04:A6:F1:63:8B:E1:E8:A2:11:91:EA:7A:F8:EF:B6:D0
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/8GfQJwSm8WOL4eiiEZHqevjvttA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.204.0/22
139.28.104.0/22
185.188.128.0/22
185.219.176.0/22
IPv6:
2a0b:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
b7:c6:93:ec:5e:cb:5f:f6:4f:72:fa:fd:b6:21:5a:b1:be:1f:
6d:16:ae:ab:27:e1:44:c6:29:89:81:64:74:fb:f0:1c:9e:00:
37:67:b6:89:0e:09:c4:ce:56:cb:73:74:d9:05:12:0a:fc:14:
26:01:c8:03:25:ce:29:19:56:d6:21:0d:81:af:2a:95:e7:22:
dc:0f:bb:a0:94:93:d8:44:eb:f9:cf:fa:e6:80:0a:87:66:6c:
af:c1:58:d9:03:fd:40:b5:d5:52:fe:d0:f3:d1:cf:25:cd:f6:
8e:44:cb:95:54:37:d7:7c:cf:da:81:e2:ad:da:2e:10:01:93:
55:5a:1b:57:71:c5:ae:94:ee:f6:34:fd:e3:ae:5b:71:d6:83:
7e:69:6a:e3:51:2a:12:4c:f5:7e:a1:66:e4:1b:40:1d:22:c8:
75:ad:b3:38:7f:58:e9:55:ec:61:c2:a7:b8:7d:94:26:b7:02:
fd:77:bd:d5:31:57:19:d2:b1:15:cc:1b:59:16:a1:21:25:57:
cd:c8:80:72:79:93:9c:05:41:0b:4c:6c:46:b4:61:67:58:95:
0a:b9:b2:20:61:02:01:96:45:a5:97:d2:8d:7c:2c:36:81:e3:
db:76:80:a5:97:b8:75:6e:0f:ed:82:73:83:9e:aa:4a:3a:6a:
d6:e4:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:51 2025 by rpki-client