Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VIlbHbdmaxV_qa6WkrHn-MybMeg.roa
File: VIlbHbdmaxV_qa6WkrHn-MybMeg.roa (raw, json)
Hash identifier: qwSrZCiIEIlnJi1tVXpDai9Jkhq54f7PsHkc876EKU8=
Subject key identifier: 54:89:5B:1D:B7:66:6B:15:7F:A9:AE:96:92:B1:E7:F8:CC:9B:31:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019835760E8542A53E063917304AED94433A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VIlbHbdmaxV_qa6WkrHn-MybMeg.roa
Signing time: Wed 23 Jul 2025 04:06:26 +0000
ROA not before: Wed 23 Jul 2025 04:06:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:76:0e:85:42:a5:3e:06:39:17:30:4a:ed:94:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 04:06:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54895b1db7666b157fa9ae9692b1e7f8cc9b31e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:4a:e5:7e:39:31:9e:68:3c:92:7a:f6:bf:
68:37:76:97:7b:16:1a:5c:30:72:2e:ce:d0:43:0c:
0f:fa:77:49:7e:86:64:5f:89:84:54:e1:3b:93:08:
08:97:ca:49:b3:01:98:08:1d:85:b1:82:66:92:8d:
9e:6c:fc:59:e1:dd:d5:84:e9:4f:4d:25:73:f9:29:
cf:a3:83:c1:c6:b1:39:a7:60:53:cd:f9:ec:10:76:
34:43:59:13:57:37:a0:be:24:d3:23:b5:d4:52:c4:
0e:ad:e7:fc:87:94:3f:ee:fc:6f:d8:f8:da:43:48:
53:46:58:97:eb:33:41:97:c8:f1:b3:bb:74:2a:e5:
bc:bb:1f:13:40:92:8a:5c:3c:c2:31:ca:b7:38:af:
b0:c2:5d:35:2e:c9:08:4f:65:34:3c:44:dc:59:78:
2d:7f:ef:54:a8:d0:08:66:e8:cf:23:1e:6b:c6:fa:
9a:05:2d:cc:16:5f:ba:f1:29:98:de:59:66:9e:cf:
9b:0c:7d:fa:8d:bb:e3:a6:e1:73:88:5e:5f:43:cf:
e1:08:4d:04:c2:c4:75:c8:a6:ba:e0:02:a8:e7:8d:
2e:82:61:26:f5:58:26:97:94:45:0b:48:ad:0f:7f:
d6:d9:e9:f5:e7:18:17:25:c5:1d:39:27:d3:f4:87:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:5B:1D:B7:66:6B:15:7F:A9:AE:96:92:B1:E7:F8:CC:9B:31:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VIlbHbdmaxV_qa6WkrHn-MybMeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
94.103.167.0/24
94.249.150.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:6f:28:a5:96:ff:8e:74:fe:8e:79:31:db:fd:8a:18:7e:31:
a2:e8:f6:73:bc:02:a6:17:61:4b:49:bd:2b:58:30:a1:68:d0:
1f:ec:41:e7:49:9e:e3:0d:f8:37:17:76:f3:39:3c:07:6a:44:
26:07:61:1a:52:02:2a:00:b9:23:ec:36:73:f4:e5:3f:bb:b1:
3c:8e:e7:91:05:b8:36:e8:b9:0f:00:e0:3c:d7:b2:a6:cf:51:
ca:6c:49:4e:80:7f:a0:61:53:c7:f1:ba:81:39:24:5d:11:1e:
3a:a9:fb:89:0c:65:67:b0:21:51:50:8a:db:f7:e2:35:f0:2d:
e0:e3:bb:6b:e1:55:2b:e7:a2:6a:c0:28:15:a1:98:32:f5:12:
72:53:c2:0c:71:b2:7d:7b:f0:05:0f:d1:f8:0a:15:bb:c9:b4:
dd:7e:fa:39:1d:3f:77:d7:f6:06:81:1b:e4:3f:f9:85:68:a2:
d5:28:a8:86:a0:2e:e5:23:22:0d:1d:aa:02:da:7e:35:81:a8:
5e:e3:e9:fe:5b:5d:de:a4:44:36:c5:8c:2f:3a:e0:d3:a0:0c:
fc:b4:57:00:2f:71:1f:f5:70:5e:41:07:42:65:a7:40:ee:d6:
48:cf:b7:6e:1b:ce:c5:dd:d9:58:08:fe:5d:84:ec:3d:61:94:
5f:57:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:09:06 2025 by rpki-client