Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/28Sezgcoa2LHd5ZB_05SjVY5nHE.roa
File: 28Sezgcoa2LHd5ZB_05SjVY5nHE.roa (raw, json)
Hash identifier: qAn43PZVAMRN2gZhy25bbUb5CalcbJyPvYG0JWE0tlU=
Subject key identifier: DB:C4:9E:CE:07:28:6B:62:C7:77:96:41:FF:4E:52:8D:56:39:9C:71
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197A64282141714F71DAC75848011032651
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/28Sezgcoa2LHd5ZB_05SjVY5nHE.roa
Signing time: Wed 25 Jun 2025 08:44:25 +0000
ROA not before: Wed 25 Jun 2025 08:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.90.17.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.5.64.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:42:82:14:17:14:f7:1d:ac:75:84:80:11:03:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 25 08:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbc49ece07286b62c7779641ff4e528d56399c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:8e:7d:81:54:56:00:23:38:0f:1e:50:c3:
9f:87:97:c7:2a:70:5e:53:4d:58:67:be:bf:39:51:
bb:fd:6b:ef:dd:d2:5d:fd:bd:26:5a:71:b2:e8:13:
85:d5:f1:32:3c:fe:00:b8:c5:01:92:16:59:d2:23:
cc:1b:3a:2f:d8:51:63:ef:ff:95:9a:b7:13:bb:74:
80:31:9f:7e:1b:a6:48:d3:ee:75:7c:a4:69:eb:70:
a5:06:70:71:d4:ef:66:ba:33:8e:df:a3:a5:b3:aa:
00:0c:81:eb:53:08:f3:e8:6c:66:0e:32:c4:1a:8c:
21:58:3d:c4:88:28:3e:1a:43:7a:7d:69:43:1a:97:
7a:f8:f4:0b:0b:48:5c:70:57:71:d8:a9:48:03:9e:
58:20:f4:91:e6:1e:74:ad:b3:51:d0:09:d6:56:b0:
37:07:5a:5c:be:e6:c5:4e:15:15:bf:2e:0c:fd:54:
1a:bb:b4:c0:76:3b:b1:bc:7e:5f:54:5c:6f:cf:82:
72:1e:83:d8:f8:5c:19:54:87:9c:b5:18:15:70:92:
36:c1:9c:df:8b:40:a5:0b:04:89:45:30:d7:36:67:
49:aa:25:b8:ed:37:f1:74:d7:de:0d:69:b9:ec:96:
a4:4c:c1:29:4a:46:8a:af:5b:47:d9:bf:74:e0:05:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C4:9E:CE:07:28:6B:62:C7:77:96:41:FF:4E:52:8D:56:39:9C:71
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/28Sezgcoa2LHd5ZB_05SjVY5nHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
185.126.82.0/24
185.199.54.0/24
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.250.0/23
185.222.28.0/23
185.223.80.0/24
185.223.82.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.5.64.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a8:6a:98:ef:c3:e3:d9:b5:04:5e:6e:ec:8f:eb:63:8c:85:
08:92:73:5f:73:cd:e5:10:5a:dc:7e:7e:a1:85:c0:62:fa:af:
be:54:23:72:ce:84:37:ff:7a:e2:58:bb:ee:90:2a:f4:94:5c:
12:7a:c7:ae:e7:51:11:2a:21:4a:8b:48:6f:fa:53:0e:59:1b:
18:6c:39:ae:1b:e2:e2:a0:9c:a8:40:ad:38:68:78:cd:45:05:
32:8b:75:da:f2:7a:ae:75:33:f9:f1:65:05:e7:ff:88:b7:f7:
d9:13:17:cc:1b:66:e0:84:0c:50:e0:b8:21:ee:44:09:e9:26:
34:fd:1d:a9:43:11:ef:29:6b:92:4c:69:c7:aa:c7:2c:69:8e:
84:b9:b1:0d:1e:c3:bd:b3:e7:52:db:f6:21:6e:a7:30:08:2e:
03:65:a8:93:6e:21:52:ed:a1:52:2e:5d:9d:2a:ef:18:60:b8:
70:f8:33:7b:3e:e0:ea:f7:64:46:fd:aa:09:60:ac:42:2b:38:
e8:a1:45:6c:dc:53:12:0b:af:6b:9c:3e:aa:99:27:01:f2:ec:
e8:14:9e:dd:a1:5b:be:8c:21:34:18:07:e7:07:b3:2c:2d:2d:
e5:b0:47:0a:4b:3a:32:d4:d7:ab:35:e0:45:e6:4c:7d:e2:06:
3a:36:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:53:39 2025 by rpki-client