Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IH3MJKXVArukIwwCq6krDZNhqEI.roa
File: IH3MJKXVArukIwwCq6krDZNhqEI.roa (raw, json)
Hash identifier: ROuFGucB3+M8XyoyR7JgJ0jujko4fE4xKOa4jPg9Ovc=
Subject key identifier: 20:7D:CC:24:A5:D5:02:BB:A4:23:0C:02:AB:A9:2B:0D:93:61:A8:42
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198199DC340647C5DA146C9936188B5FDC3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IH3MJKXVArukIwwCq6krDZNhqEI.roa
Signing time: Thu 17 Jul 2025 18:20:26 +0000
ROA not before: Thu 17 Jul 2025 18:20:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.138.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
77.90.27.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:9d:c3:40:64:7c:5d:a1:46:c9:93:61:88:b5:fd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 17 18:20:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=207dcc24a5d502bba4230c02aba92b0d9361a842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:23:5c:f3:c2:40:2e:6e:ec:19:22:db:b5:
8c:b3:09:68:fb:10:c7:81:3c:ef:51:18:16:3a:b6:
fb:f4:02:25:75:aa:41:6d:9c:a8:4a:2e:28:d0:6e:
d9:41:41:2e:47:a4:8e:70:81:6d:21:5b:5d:dc:6c:
43:cf:4a:40:f5:99:70:94:c4:59:56:32:45:1b:5e:
da:82:fb:9c:05:94:14:46:0a:33:a6:fd:87:b1:ee:
a6:c5:6c:74:25:a3:11:04:4e:60:04:ec:a0:57:4f:
b6:bc:40:48:67:6e:c4:9f:53:c6:71:f1:45:07:01:
ab:d7:f8:5b:1a:f3:41:a5:c5:a5:58:93:26:de:61:
92:89:24:4f:fc:4f:f5:f6:90:35:4f:76:ad:04:2a:
29:cb:15:4c:a4:c9:f9:d2:91:ce:43:91:de:c4:cf:
f4:58:07:6d:69:92:bf:fb:05:53:5f:1a:cd:ff:eb:
04:01:50:ea:9d:80:1d:f2:e7:c2:53:59:81:0e:0f:
71:35:eb:aa:cb:5c:38:e1:5b:2a:0d:fe:49:bb:a9:
ae:22:c3:48:46:85:5b:97:7e:ba:85:64:eb:7b:5e:
63:04:02:be:d0:bf:00:68:1e:35:5a:b9:da:43:92:
f2:f2:c7:55:5f:6c:28:ad:3f:e0:bb:01:e5:63:cb:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:CC:24:A5:D5:02:BB:A4:23:0C:02:AB:A9:2B:0D:93:61:A8:42
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IH3MJKXVArukIwwCq6krDZNhqEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.138.0/24
5.175.140.0/24
5.175.192.0/24
5.175.224.0/24
5.231.72.0/24
5.231.79.0-5.231.80.255
5.231.94.0/24
5.231.240.0/24
77.90.27.0/24
83.243.86.0/24
89.106.91.0/24
89.144.22.0/24
89.144.31.0/24
94.103.163.0/24
94.249.153.0/24
94.249.175.0/24
94.249.183.0/24
94.249.189.0/24
95.215.33.0/24
178.18.144.0/24
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:52:7c:32:5a:30:11:56:f6:a0:a8:0d:d2:5e:d8:48:72:e0:
c4:9b:77:15:3b:90:2a:6c:d9:bc:47:25:e1:1e:d8:5d:db:88:
f3:03:40:d0:aa:90:d9:f9:dd:3a:9d:3a:18:53:3e:e1:c5:60:
e8:25:1a:7b:ab:6b:b0:10:b6:8d:7e:ec:39:76:1d:4e:ea:e4:
da:85:43:14:15:b4:e0:33:f5:34:69:30:d4:0a:de:05:53:04:
23:d4:07:70:92:1c:99:5f:12:d0:12:cd:06:02:63:e8:cf:78:
bc:d4:fc:4f:76:fb:45:60:76:aa:de:49:05:04:82:0f:10:5c:
5a:bb:5e:21:c7:34:d7:ba:15:b7:9f:04:6e:18:cd:2b:ed:d8:
93:57:f8:51:d9:3c:f3:7c:2f:02:24:be:11:36:68:ca:a1:05:
22:c1:63:92:d7:a5:1b:e5:ee:06:3f:ec:c0:03:ba:47:06:03:
96:e7:26:bb:1e:56:a9:05:32:02:74:14:74:d1:54:e6:3d:50:
9b:cb:00:a9:cc:6d:fe:a7:70:1a:20:5b:b8:9f:45:ef:09:41:
c2:f9:90:ec:7a:d5:a6:ee:8e:1b:cd:a5:87:a5:2d:29:c0:64:
90:72:67:26:53:73:51:af:e7:7e:3f:86:5e:ea:a1:9f:63:b9:
42:2c:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:20 2025 by rpki-client