Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa
File: Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa (raw, json)
Hash identifier: JisZbeQ0AocuRS7stDTFoBU3g27nQeSIpJz1KNUOxPE=
Subject key identifier: 46:1A:AE:D0:78:67:E2:39:54:59:AA:81:95:09:1C:82:85:97:8C:C2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197C08633A7122532878FEF1642AAB2688F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa
Signing time: Mon 30 Jun 2025 11:08:29 +0000
ROA not before: Mon 30 Jun 2025 11:08:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 5.182.112.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.205.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:86:33:a7:12:25:32:87:8f:ef:16:42:aa:b2:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 30 11:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=461aaed07867e2395459aa8195091c8285978cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:4c:a4:61:91:b3:9e:4e:fc:0e:e2:df:8a:
13:1c:ca:7c:ee:81:e7:f1:c8:42:0f:f4:4d:91:c0:
a0:4d:d8:92:1b:11:91:82:38:85:e4:92:c4:08:7f:
63:70:98:d6:a3:8e:7e:29:1c:1d:9f:cc:42:1f:ae:
ee:75:a7:86:12:bf:5c:a8:05:bd:7e:71:89:91:44:
cd:ba:87:27:96:ae:31:28:fc:7e:55:5b:13:2e:39:
d6:34:c0:9e:8f:70:8a:b9:43:82:1a:0f:03:e1:07:
8e:5c:c4:78:c7:5a:67:19:db:ca:35:e1:42:3e:ed:
8b:63:e6:58:6a:5c:5b:98:cc:be:1f:d9:95:96:25:
0f:f8:8f:90:fa:6a:b3:f7:64:4a:2b:9d:c3:4c:b4:
ba:b4:28:c8:4c:95:68:eb:b9:a3:46:ce:14:bf:1c:
71:bc:b3:34:52:4c:3a:c7:d7:a6:47:e6:32:56:ff:
ea:ac:02:97:ff:00:46:05:54:60:1f:d5:47:d3:09:
04:34:ef:7d:42:96:08:17:37:87:e9:d2:f4:1f:c2:
86:96:5b:6f:27:09:35:07:3a:0f:53:da:9c:b3:e2:
91:05:1c:e7:b6:f2:23:7b:c9:a9:0f:b8:d7:ac:1c:
c0:3b:2d:f6:bd:fe:84:e7:d5:d3:3a:a3:08:66:b4:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:AE:D0:78:67:E2:39:54:59:AA:81:95:09:1C:82:85:97:8C:C2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
77.242.154.0/24
83.137.157.0/24
88.209.193.0/24
88.209.196.0/24
88.209.205.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
88.209.228.0/24
88.209.247.0/24
92.52.208.0/21
92.52.217.0-92.52.218.255
178.248.200.0/21
193.138.125.0/24
194.41.47.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:01:44:50:c4:74:4f:fe:76:47:5b:df:67:75:d7:51:89:b5:
00:0d:ab:0e:54:51:e5:7e:f1:8a:4a:86:a6:df:5a:92:8e:e0:
3a:9a:e5:c1:66:70:c4:96:43:07:44:e3:11:ad:c9:a0:41:40:
3f:e9:c7:07:5e:81:ec:a0:56:13:85:f0:d0:f2:6b:91:12:31:
0f:2a:d7:1f:0e:06:e4:30:6c:4b:a8:ec:91:a8:19:c1:fa:13:
1c:85:c5:98:84:1f:f7:d0:b3:82:53:9d:95:d0:4f:ff:35:52:
b0:a8:1c:11:c6:3a:92:36:08:3f:10:b4:9a:5a:1c:5f:1c:08:
91:b7:e6:66:86:2a:43:a9:41:0f:89:76:8b:02:0b:1e:e5:49:
60:bd:57:f7:fd:d4:cc:a5:06:06:1c:98:7f:76:6e:a9:7c:1f:
1e:11:5e:45:52:0b:9a:ab:62:5a:25:c5:f7:13:ce:84:41:91:
f4:da:a3:fd:78:bc:89:26:e1:79:b2:b5:2b:32:87:1f:3f:83:
4d:6c:32:57:56:98:ce:b5:96:d9:1a:db:7f:a6:b0:07:85:57:
0f:04:57:44:5c:98:ef:e2:15:00:2a:f2:98:7c:0d:fd:64:c2:
79:94:eb:8b:49:ae:f0:c9:a6:41:42:49:57:91:67:82:f8:66:
04:b8:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:14:37 2025 by rpki-client