
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SLsz9zgpRRbY9h_SOLhHHlNO0fU.roa
File: SLsz9zgpRRbY9h_SOLhHHlNO0fU.roa (raw, json)
Hash identifier: L3AaGS0+FOHSG5g8WoJRXNLN5UAxyyJUuegzrmp0FKw=
Subject key identifier: 48:BB:33:F7:38:29:45:16:D8:F6:1F:D2:38:B8:47:1E:53:4E:D1:F5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01998C56CE31A0647BBA821955771DABBFBE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SLsz9zgpRRbY9h_SOLhHHlNO0fU.roa
Signing time: Sat 27 Sep 2025 18:02:03 +0000
ROA not before: Sat 27 Sep 2025 18:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.100.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.144.102.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8c:56:ce:31:a0:64:7b:ba:82:19:55:77:1d:ab:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Sep 27 18:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48bb33f738294516d8f61fd238b8471e534ed1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:83:f0:e8:ef:f1:9f:ae:1b:a0:78:f6:c6:
d1:3f:bb:ef:73:56:70:12:ac:e6:0b:dc:bf:1c:2d:
46:70:7e:26:64:14:64:98:01:53:b8:c7:a4:d4:9c:
e9:2e:e6:2b:ba:c2:42:0a:b1:60:7a:34:1a:03:1c:
28:0f:11:a1:e8:17:ba:a1:5a:95:96:c9:19:0a:6d:
3b:3d:97:f5:82:6c:40:f7:5d:63:92:fc:68:30:87:
f1:ae:be:3f:c5:a7:46:e1:91:0b:32:d1:3e:71:15:
82:5a:3c:e2:ef:97:72:d6:15:e3:8c:d4:6b:29:3c:
e8:fb:c2:f7:fa:5d:1e:44:6d:25:dc:a8:bc:95:6e:
5d:0a:d5:8a:96:df:e5:fd:f9:57:be:07:35:ff:b5:
3e:dc:cb:35:8c:bc:7d:be:ef:d7:af:42:77:9f:60:
0f:cc:7a:eb:7e:73:9d:02:b9:70:de:1a:d1:30:1f:
60:d0:e9:09:c8:05:cc:e3:08:48:42:ca:44:4c:21:
b8:56:89:9d:aa:6f:00:d4:52:1c:a6:3c:95:fd:b9:
46:c2:2c:e0:24:31:69:54:ff:ed:7b:a1:a1:82:72:
e8:2d:d1:e9:3b:03:03:54:cd:d0:43:5b:17:3e:6a:
7a:80:d8:44:d0:dc:7d:08:e7:a6:27:65:e2:09:b7:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:33:F7:38:29:45:16:D8:F6:1F:D2:38:B8:47:1E:53:4E:D1:F5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SLsz9zgpRRbY9h_SOLhHHlNO0fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
45.136.2.0/23
128.0.119.0/24
185.117.21.0/24
185.117.23.0/24
185.144.100.0-185.144.102.255
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.208.0/22
194.36.102.0/23
194.124.64.0/22
195.85.68.0-195.85.70.255
Signature Algorithm: sha256WithRSAEncryption
92:09:8e:64:6c:ce:e8:c8:d2:a3:e8:9d:ce:7a:0c:3b:cd:c5:
46:68:d2:f2:3f:7f:df:e7:ce:bc:25:48:8e:0e:6c:dd:02:86:
31:49:75:ac:4e:39:92:ff:2c:41:52:b0:16:08:84:6b:b3:16:
15:24:b3:93:5d:dc:d5:96:3f:28:3d:e4:2d:f3:ef:4c:84:1e:
67:f2:b5:7e:fa:a8:29:90:e2:cc:39:da:7d:f5:62:bd:2d:0b:
26:3c:0a:b2:97:7b:4f:7f:dd:34:5d:22:e1:03:42:18:bc:f5:
1d:13:d9:8f:d6:97:fd:2b:41:7f:e7:2b:aa:62:66:12:00:b4:
e2:39:9f:65:e3:78:55:7e:37:b1:73:6a:4d:d0:6d:e4:f1:5f:
8f:34:11:c5:2c:36:ba:0a:b4:21:f6:a5:83:40:23:8e:53:b8:
d6:bf:59:ae:41:0c:07:e5:23:65:f9:bf:38:b4:73:b5:e1:31:
f8:e5:ca:03:b1:5f:0a:30:52:fc:14:03:90:37:ee:c8:df:ae:
18:3e:58:0b:40:58:eb:34:df:71:ac:6a:eb:13:ee:52:ad:fc:
37:06:4f:ac:58:55:8c:20:a6:87:25:7c:16:0d:05:8d:99:b2:
2b:ea:0b:bb:08:73:1e:c8:34:c0:fb:dd:29:c8:56:ad:a3:95:
df:e5:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:44 2025 by rpki-client