Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa
File: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (raw, json)
Hash identifier: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=
Subject key identifier: 76:5E:DF:05:FF:D0:F6:25:91:D9:14:DB:83:37:6E:08:61:2C:9E:ED
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 0197A6282E14F757FE51F0904533E0A10E3A
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa
Signing time: Wed 25 Jun 2025 08:15:40 +0000
ROA not before: Wed 25 Jun 2025 08:15:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 45.159.188.0/24 maxlen: 24
45.159.189.0/24 maxlen: 24
45.159.190.0/24 maxlen: 24
45.159.191.0/24 maxlen: 24
185.130.104.0/24 maxlen: 24
185.130.105.0/24 maxlen: 24
185.130.106.0/24 maxlen: 24
185.130.107.0/24 maxlen: 24
185.159.80.0/24 maxlen: 24
185.159.81.0/24 maxlen: 24
185.159.82.0/24 maxlen: 24
185.159.83.0/24 maxlen: 24
185.162.128.0/24 maxlen: 24
185.162.129.0/24 maxlen: 24
185.162.130.0/24 maxlen: 24
185.162.131.0/24 maxlen: 24
185.180.196.0/24 maxlen: 24
185.180.197.0/24 maxlen: 24
185.180.198.0/24 maxlen: 24
185.180.199.0/24 maxlen: 24
185.209.160.0/24 maxlen: 24
185.209.161.0/24 maxlen: 24
185.209.162.0/24 maxlen: 24
185.209.163.0/24 maxlen: 24
185.223.93.0/24 maxlen: 24
185.223.94.0/24 maxlen: 24
185.223.95.0/24 maxlen: 24
212.23.202.0/24 maxlen: 24
2a07:4dc0::/29 maxlen: 29
2a07:b400::/29 maxlen: 29
2a0b:2000::/29 maxlen: 29
2a0d:6800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:28:2e:14:f7:57:fe:51:f0:90:45:33:e0:a1:0e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Jun 25 08:15:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=765edf05ffd0f62591d914db83376e08612c9eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:15:df:f7:88:0e:62:00:8d:97:0b:fa:12:
a4:04:99:66:8e:55:3f:f7:65:e5:53:05:5a:f9:c2:
00:f3:1d:35:79:5b:83:c7:e1:d6:15:8e:a2:f1:b5:
cf:e6:3b:eb:ab:86:5d:ad:57:30:01:58:a7:83:43:
4b:a2:1e:b2:4f:fc:23:c2:e3:fa:6e:f5:a1:e6:59:
02:24:c8:6e:9b:ae:11:07:cb:89:79:19:1d:8b:92:
82:2f:33:1c:40:dc:96:a3:1c:dd:15:60:5b:ab:fd:
7e:72:24:bd:d7:ad:8b:65:79:1c:b8:a5:20:83:89:
36:43:36:89:01:a0:fa:b1:46:e3:15:29:44:23:12:
ed:59:a8:65:f2:d0:ee:3c:cc:dc:03:04:b9:8f:50:
04:7d:ad:59:54:83:02:3c:28:9c:a1:84:86:c1:d7:
52:eb:c9:a6:fd:1c:05:73:aa:28:5d:a1:58:0d:63:
aa:50:6f:24:25:f8:6b:5e:d3:20:c1:ef:7a:34:f1:
93:54:64:9f:17:ce:db:1f:e8:2d:23:48:1a:de:fb:
f4:f1:53:4c:5d:4a:81:24:93:26:32:b1:72:8f:b3:
b9:e2:14:ca:18:86:87:e0:e0:58:d5:84:ce:63:6f:
0b:02:d5:7f:65:53:f7:e6:eb:cc:1c:e3:ad:49:a6:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:DF:05:FF:D0:F6:25:91:D9:14:DB:83:37:6E:08:61:2C:9E:ED
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.188.0/22
185.130.104.0/22
185.159.80.0/22
185.162.128.0/22
185.180.196.0/22
185.209.160.0/22
185.223.93.0-185.223.95.255
212.23.202.0/24
IPv6:
2a07:4dc0::/29
2a07:b400::/29
2a0b:2000::/29
2a0d:6800::/29
Signature Algorithm: sha256WithRSAEncryption
36:ed:0f:90:27:1d:b7:cd:9f:73:19:62:39:5c:4a:ee:cd:b1:
57:56:3b:93:2b:4a:09:57:6d:61:04:13:be:57:ad:8b:a7:84:
31:2f:b4:22:2b:b7:f0:a7:8a:d0:8f:c5:61:62:f3:a0:95:fb:
6e:eb:ba:74:1b:12:db:3e:e6:e4:d9:3e:5b:8c:5e:5a:f9:93:
af:50:f8:ab:30:a1:55:13:8c:a2:e3:37:c2:4e:7b:af:3b:e4:
ae:ca:00:69:b2:b1:0b:8f:4a:a8:1a:80:af:92:d4:51:ae:da:
58:44:be:cb:c4:4b:a1:bd:80:fa:ee:0e:74:2c:00:20:d4:a2:
e0:60:d3:33:a9:aa:3c:d4:d7:63:97:45:53:b9:a7:d7:b2:9c:
3e:78:a5:08:c2:e6:ca:32:03:de:3a:ab:4a:a4:fa:8c:4d:22:
26:53:18:84:df:0b:c0:a7:fb:38:c7:43:c5:d5:cd:f1:7b:22:
08:83:c5:07:31:5e:a8:ea:db:c4:f7:16:e8:e3:c7:04:d7:7d:
c1:df:22:3b:cb:b8:03:ea:63:5d:8d:b5:ba:10:8f:cd:49:ee:
4b:19:56:3f:45:47:0d:af:d6:2e:48:23:bc:6b:23:ee:56:75:
8a:d6:43:5f:d8:5e:a6:e9:66:59:d2:f0:a8:74:f9:36:dc:dd:
5e:3e:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:58:15 2025 by rpki-client