Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4lbnGfh3rDPakgXokwR0mrtiCtA.roa
File: 4lbnGfh3rDPakgXokwR0mrtiCtA.roa (raw, json)
Hash identifier: wRuK2L8YupiTFL3AakVZGzX9arV1en7cFCyzQmijVCk=
Subject key identifier: E2:56:E7:19:F8:77:AC:33:DA:92:05:E8:93:04:74:9A:BB:62:0A:D0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01982410EDCEF10395D78F2651C90C4EB68D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4lbnGfh3rDPakgXokwR0mrtiCtA.roa
Signing time: Sat 19 Jul 2025 19:02:25 +0000
ROA not before: Sat 19 Jul 2025 19:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:24:10:ed:ce:f1:03:95:d7:8f:26:51:c9:0c:4e:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 19 19:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e256e719f877ac33da9205e89304749abb620ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:ae:11:b7:c9:9c:f4:b5:56:0f:e0:2f:32:
8e:de:a4:48:78:2d:2a:e6:9f:9c:ca:3e:49:1f:d9:
2a:98:eb:db:c2:81:e4:9b:01:5f:19:89:4e:89:8d:
97:99:c5:07:04:af:77:3a:a7:d3:34:c2:8f:e1:cd:
4b:ef:0f:f0:1f:7b:53:d5:74:71:c1:8c:fb:96:eb:
89:73:9c:d9:8c:af:8a:72:fb:92:c9:c4:81:be:9f:
07:a8:6c:a4:a0:aa:35:7b:2a:33:09:d8:b8:5c:b6:
1b:43:66:41:4c:d2:75:86:14:2a:6f:3b:bb:72:f1:
39:48:ae:70:b2:1e:df:23:42:1e:5b:18:6e:fa:51:
7f:90:02:59:0b:8c:d4:57:8f:d5:90:92:84:09:c4:
6a:5f:85:1b:f3:90:4d:ea:5b:1f:0d:cf:cb:16:6a:
ca:d9:d0:75:d1:f9:af:59:62:43:1d:de:a6:e7:c6:
a6:8b:ab:27:e2:85:3c:cc:66:ad:e6:7d:60:f2:20:
1a:21:11:08:67:f0:ae:c4:67:a6:46:fc:07:9c:18:
f5:52:1f:20:5c:41:81:10:0f:57:3c:63:91:80:a2:
80:a1:49:e1:3c:69:cf:93:2f:5b:65:4e:7f:e1:fb:
f7:5e:e0:1b:b5:fb:fd:d8:f4:72:ac:50:f6:cd:4e:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:E7:19:F8:77:AC:33:DA:92:05:E8:93:04:74:9A:BB:62:0A:D0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4lbnGfh3rDPakgXokwR0mrtiCtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
89.144.25.0/24
94.103.167.0/24
94.249.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c3:81:07:59:1a:d0:8a:f1:4b:ae:8c:b7:cf:03:6f:52:8d:
58:dd:85:68:99:86:57:cc:64:37:31:7e:68:5a:10:b3:7e:e6:
18:2d:26:31:7b:57:8f:0a:2e:90:23:4c:cd:b9:31:d0:54:6c:
e9:d7:e1:26:14:a9:97:d7:da:44:9a:e3:20:f0:e8:b6:32:ac:
ac:41:d5:21:e5:e8:e7:dc:4f:b5:c6:1b:9b:b2:3f:fd:3f:6d:
ca:99:aa:7f:71:18:c5:23:90:e0:d2:44:fc:13:59:eb:68:1c:
dd:a7:1d:ab:d9:e2:dc:0f:7e:78:52:20:5f:d6:93:eb:8f:18:
00:fb:12:4e:f6:29:0d:b6:19:06:db:e8:29:55:f6:be:25:15:
48:e4:26:7b:c7:4d:d6:f9:a6:1e:13:51:35:81:97:c0:fc:e3:
c9:82:aa:76:59:e8:fd:37:6f:ef:f5:80:9a:ac:7e:20:1d:a6:
93:dc:9e:d8:24:5a:44:fd:08:53:f3:5c:8a:c3:c2:c4:ef:5b:
e5:1c:cb:4e:29:54:58:62:8b:c2:5b:f7:ec:ee:4d:8e:b3:1e:
f4:0c:68:2e:03:c4:ca:e9:24:5c:99:3e:52:92:fe:2b:97:86:
92:47:ef:a7:45:e3:ec:1b:67:ae:e8:e4:c2:58:45:8a:ef:96:
2d:f5:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:23:41 2025 by rpki-client