Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pnO7_e9gQVd_8PazNwSS0_QmEPw.roa
File: pnO7_e9gQVd_8PazNwSS0_QmEPw.roa (raw, json)
Hash identifier: isAG3Wq+UVFKJMLWXmRFoCVmKnZqZIFLkmVZI5DUkg8=
Subject key identifier: A6:73:BB:FD:EF:60:41:57:7F:F0:F6:B3:37:04:92:D3:F4:26:10:FC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0199C3B1FD50578C5A0F7D76E6EE216C47F8
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pnO7_e9gQVd_8PazNwSS0_QmEPw.roa
Signing time: Wed 08 Oct 2025 12:00:45 +0000
ROA not before: Wed 08 Oct 2025 12:00:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:b1:fd:50:57:8c:5a:0f:7d:76:e6:ee:21:6c:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 8 12:00:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a673bbfdef6041577ff0f6b3370492d3f42610fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:f9:3a:36:80:d2:51:14:bd:7e:c3:9e:f9:
5b:f6:76:62:4c:47:de:75:73:0a:11:45:48:62:88:
13:9e:27:f6:92:99:75:1c:82:2d:48:78:63:51:82:
88:4b:03:71:1e:a6:a4:a1:3e:59:4c:49:ee:69:7d:
46:92:3a:03:76:4c:f9:25:54:bb:34:60:0f:0d:15:
3e:d4:10:ec:cd:77:96:08:4b:5b:42:16:c3:7d:d6:
98:67:05:da:aa:dd:10:af:36:49:f7:47:fd:5a:1f:
e3:5b:c0:db:31:18:26:ed:d9:29:cc:4e:54:fe:86:
a9:ca:68:29:73:c1:94:4b:9a:e1:42:bb:ee:52:ac:
7f:32:30:92:53:c5:7b:67:92:95:18:f8:cc:4c:55:
e4:f4:b9:60:19:63:6a:09:64:a8:0f:ab:23:f2:75:
e8:01:8e:22:d7:38:4e:67:14:27:e1:2c:07:0f:d2:
ff:32:6a:fd:5c:1b:cd:4b:29:41:7f:d6:85:c7:2d:
8f:52:b9:55:bd:00:c4:b3:5a:93:32:63:39:c5:62:
c7:00:76:39:b2:95:a1:0d:d8:0a:85:60:36:ca:1d:
79:d7:48:a3:9d:7d:b0:78:a3:c2:79:c4:8e:8a:51:
61:d3:24:f5:cc:e5:31:7d:06:81:8c:5c:3e:27:42:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:BB:FD:EF:60:41:57:7F:F0:F6:B3:37:04:92:D3:F4:26:10:FC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pnO7_e9gQVd_8PazNwSS0_QmEPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/24
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0/22
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
69:72:c2:66:3a:ae:cc:a7:71:85:c7:42:94:32:5a:2a:fd:cd:
e8:db:c0:aa:ef:22:15:b5:70:44:6b:3b:ed:a4:6e:a1:1b:13:
8e:00:cf:04:eb:2c:38:e8:1f:25:8b:26:b6:5b:8b:d9:d4:68:
1a:a4:55:d0:59:c1:63:6e:59:cc:10:e1:e3:8b:f2:e8:a3:26:
11:b6:3a:42:56:56:32:63:2c:84:2d:0d:93:bf:2c:c5:3d:8d:
b3:9c:9e:45:8a:3b:a9:58:11:cd:6a:59:0a:f2:3a:88:fe:c8:
d4:59:3b:34:9f:37:89:2c:48:78:58:41:2e:1d:5e:c9:dd:0b:
ba:3c:24:fd:be:5d:7d:ae:30:a9:41:c9:74:4e:f2:3b:cd:1f:
47:19:49:28:04:4e:d2:c3:26:e2:85:72:bd:96:f4:ba:df:af:
85:83:0a:58:5c:40:fd:af:11:3c:fa:e6:60:e7:5d:30:1d:fc:
b1:4c:86:cd:3f:f4:0e:ae:44:85:a3:c0:4a:96:9b:b4:52:37:
6d:b3:88:5b:e0:b3:9c:3a:ca:08:7f:fc:cf:8e:f9:0f:15:c0:
63:ca:23:49:7e:10:55:f6:27:42:30:80:77:2d:07:01:8a:67:
c6:92:c8:37:d9:fc:c2:89:6d:5e:41:40:81:f9:31:2e:4b:8c:
9d:f8:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:26 2025 by rpki-client