Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5gj8yHQYRaDcVlYPMlkKlw0zl1Q.roa
File: 5gj8yHQYRaDcVlYPMlkKlw0zl1Q.roa (raw, json)
Hash identifier: mryZ947lIU5+uxb8ChQCoqBHS9Xq9nPTzBf0cY1OopU=
Subject key identifier: E6:08:FC:C8:74:18:45:A0:DC:56:56:0F:32:59:0A:97:0D:33:97:54
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01983FD4C5034F5568D15F03DD304DF9FE87
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5gj8yHQYRaDcVlYPMlkKlw0zl1Q.roa
Signing time: Fri 25 Jul 2025 04:26:05 +0000
ROA not before: Fri 25 Jul 2025 04:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 80.97.128.0/20 maxlen: 20
85.120.81.0/24 maxlen: 24
85.121.149.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:d4:c5:03:4f:55:68:d1:5f:03:dd:30:4d:f9:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 25 04:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e608fcc8741845a0dc56560f32590a970d339754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:29:64:40:49:76:41:07:5b:d6:17:39:09:
c2:35:f4:ad:5b:34:df:a9:4f:cd:85:37:b0:55:3d:
fe:56:7c:70:15:25:0b:92:ba:16:20:30:21:1c:3b:
10:54:02:86:64:c0:79:3a:8f:9d:d5:b8:77:c3:65:
0e:fc:54:69:e6:88:aa:ed:f3:ca:91:c5:32:9b:0f:
a9:87:ac:0d:18:d0:b5:75:85:54:84:a7:1b:63:2d:
16:e8:b9:e3:50:47:6c:3c:eb:42:e6:e1:80:12:b4:
ac:c8:da:8b:74:c0:a4:13:81:37:15:2a:28:73:f6:
ee:54:ba:8d:bf:75:9d:ff:c2:06:b7:86:ff:af:4f:
7f:67:c0:8c:9c:f5:a0:dd:61:f5:63:47:c8:3c:0b:
1b:70:66:73:0a:87:78:99:bb:b1:78:75:f5:bd:4a:
d0:63:da:84:62:fa:2a:6b:62:aa:a1:c7:2c:23:f3:
a0:0e:fb:73:48:c2:37:d6:68:c6:ec:65:ad:ae:b4:
36:08:4f:81:49:82:f4:77:f0:c4:11:c6:f6:c0:11:
7d:0c:c7:9d:29:10:d2:31:46:83:27:fe:6a:5e:e5:
cb:d2:5e:db:f0:05:52:e9:a0:a6:ad:bf:28:cf:99:
52:a6:31:ef:17:8b:24:47:03:89:82:67:6c:45:01:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:FC:C8:74:18:45:A0:DC:56:56:0F:32:59:0A:97:0D:33:97:54
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5gj8yHQYRaDcVlYPMlkKlw0zl1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.128.0/20
85.120.81.0/24
85.121.149.0/24
194.102.105.0/24
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1b:89:8a:41:84:57:e4:cc:ac:b3:8c:92:9a:0e:8d:c6:1e:
a2:17:80:fb:a1:03:eb:3e:e9:fa:b6:d6:b0:78:26:e6:a3:6b:
e2:87:fe:42:b1:cd:21:5e:cc:4e:a6:10:66:80:cb:75:81:16:
88:49:6f:80:25:bd:df:cb:ac:26:5d:54:05:57:43:b8:71:e7:
df:9d:cc:21:1c:6e:f2:2b:2f:bc:c8:96:2c:1c:4e:90:ec:be:
68:a6:1a:30:81:de:2d:64:27:66:15:98:fc:89:20:0b:6b:bb:
e9:00:49:99:4e:65:b9:03:dd:64:27:8b:8a:c8:3a:db:9f:81:
58:70:4a:2a:20:0c:39:2a:da:a2:2e:18:ee:cb:77:1e:0d:8e:
9b:9c:46:d7:1d:cd:0d:7b:1b:30:b6:9b:86:61:a0:7d:64:a9:
29:34:24:94:c6:d9:57:9e:f9:cb:dc:4f:e8:2f:0b:84:75:c4:
79:5e:30:c0:9d:d1:5c:74:86:6e:26:b0:60:e9:45:4e:0a:2d:
4d:32:30:18:94:73:ca:74:b6:70:82:5c:e8:32:46:86:2d:7d:
d1:b3:ba:8d:17:fe:11:99:4c:ae:3d:21:e7:e3:54:d2:1d:67:
46:0a:02:47:78:73:76:b7:ec:c5:74:c9:dd:b3:6e:3e:24:b6:
26:8c:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:56 2025 by rpki-client