Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j8wqF4lOgSUgQftXZFF4rFiKcks.roa
File: j8wqF4lOgSUgQftXZFF4rFiKcks.roa (raw, json)
Hash identifier: jZuMgBDy0ZjaLNkCJCc7H5IMUW6UpS+z875EYHAF70A=
Subject key identifier: 8F:CC:2A:17:89:4E:81:25:20:41:FB:57:64:51:78:AC:58:8A:72:4B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0198B4046975C85659AE1C86A3BB51BB0C8D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j8wqF4lOgSUgQftXZFF4rFiKcks.roa
Signing time: Sat 16 Aug 2025 17:54:04 +0000
ROA not before: Sat 16 Aug 2025 17:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.100.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.144.102.0/24 maxlen: 32
185.144.103.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:04:69:75:c8:56:59:ae:1c:86:a3:bb:51:bb:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Aug 16 17:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fcc2a17894e81252041fb57645178ac588a724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:91:6b:b2:cd:cd:5e:65:58:cd:34:45:be:
9e:ff:f1:00:0d:9e:b2:cd:72:d5:80:6e:75:11:55:
1a:e8:2a:12:43:35:cf:12:d9:f0:34:a5:57:7c:02:
b3:13:e5:94:ed:eb:b0:51:b8:b0:39:56:11:08:72:
a8:4c:87:fa:17:ce:ac:a7:4b:71:50:aa:7b:af:66:
6b:db:bf:84:56:3d:bd:80:2d:69:c0:d4:c5:92:b7:
a4:8d:46:a2:6d:32:42:70:fc:5a:c5:13:42:56:32:
21:d1:03:bc:2a:b8:d6:7b:44:c6:bb:8c:b4:58:89:
69:6f:cc:c2:f7:30:8f:ed:4b:ee:57:9a:60:75:ab:
ca:1a:9a:56:57:14:d8:70:54:ef:81:bd:4d:e6:33:
a1:0a:64:13:a4:5b:66:f9:11:32:64:b9:a9:77:28:
5b:7c:20:68:f0:f4:fc:dd:f8:03:35:4e:84:9f:fb:
09:e3:37:92:2b:4a:97:7a:42:5f:b5:7b:71:66:d0:
0a:5b:7b:21:01:32:6b:82:4a:0f:b6:17:92:5f:73:
8a:b3:32:8c:cd:4d:48:3e:65:ef:e2:b6:1a:1a:a8:
e1:3d:cf:df:b1:60:bb:9c:39:cd:16:4f:31:ac:5a:
d8:1d:e3:76:bd:0f:80:fd:d7:dc:2e:b9:f0:ec:08:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:2A:17:89:4E:81:25:20:41:FB:57:64:51:78:AC:58:8A:72:4B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j8wqF4lOgSUgQftXZFF4rFiKcks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
45.136.2.0/23
128.0.119.0/24
185.117.20.0/23
185.117.23.0/24
185.144.100.0/22
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.208.0/22
194.36.102.0/23
194.124.64.0/22
195.85.68.0-195.85.70.255
Signature Algorithm: sha256WithRSAEncryption
a7:9a:13:28:07:d2:c2:b8:36:55:91:f5:2a:94:4e:24:94:b8:
b0:d9:ea:6e:d4:87:22:9b:6f:8b:d3:d0:a3:eb:a1:2f:91:de:
66:38:d2:9c:ed:d3:90:81:70:73:0e:01:fe:35:bf:f7:d9:99:
64:6e:f5:fb:17:6d:0b:c5:e9:11:d2:80:2c:38:15:1d:5b:63:
05:9a:08:97:5c:33:7c:43:40:db:a7:ba:aa:ee:c6:6c:55:e2:
32:dc:75:b9:8d:0e:36:88:af:3d:98:b2:00:7b:14:55:ac:96:
cc:76:01:25:d9:94:74:68:c2:24:54:e8:da:04:51:06:93:99:
5e:b0:a6:af:b4:21:fa:98:b1:ac:c3:aa:ae:4c:8d:0b:92:0f:
08:c0:c0:95:c3:39:08:75:5c:6c:66:33:f5:19:39:c3:a8:50:
9f:47:86:6c:cb:94:ce:40:e9:09:ae:ac:c2:23:6a:d8:64:96:
b1:88:89:f6:64:31:42:de:2f:0d:a3:bb:01:1a:db:1d:1d:3b:
dd:59:38:15:fd:a5:29:25:87:ae:fb:43:82:7e:6d:23:1e:99:
7b:4f:8e:9f:50:88:e2:13:bb:0c:c7:d8:d8:34:8d:5a:54:bd:
13:98:c3:39:1b:95:b6:cf:7a:01:fa:1a:24:b4:9a:72:bd:76:
52:1b:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:28 2025 by rpki-client