Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/MjFS6dB7OMbfF7YRvnb57-2T17g.roa
File: MjFS6dB7OMbfF7YRvnb57-2T17g.roa (raw, json)
Hash identifier: H5eKU5P15YBVQ9g0o2US0fKUyvY/W21Aot95Lw/6/co=
Subject key identifier: 32:31:52:E9:D0:7B:38:C6:DF:17:B6:11:BE:76:F9:EF:ED:93:D7:B8
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0197EE7FE607516B3E5715DED0E20AAFE0A4
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/MjFS6dB7OMbfF7YRvnb57-2T17g.roa
Signing time: Wed 09 Jul 2025 09:24:08 +0000
ROA not before: Wed 09 Jul 2025 09:24:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 5.255.57.0/24 maxlen: 24
5.255.61.0/24 maxlen: 24
5.255.62.0/23 maxlen: 23
23.252.66.0/23 maxlen: 23
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
91.92.112.0/23 maxlen: 23
107.150.162.0/23 maxlen: 23
107.150.164.0/24 maxlen: 24
107.150.171.0/24 maxlen: 24
107.150.175.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.11.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.165.47.0/24 maxlen: 24
185.252.210.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:7f:e6:07:51:6b:3e:57:15:de:d0:e2:0a:af:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 9 09:24:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323152e9d07b38c6df17b611be76f9efed93d7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:97:29:1e:d3:87:a3:98:43:46:5a:c7:df:
3a:0b:ab:ce:3a:07:1c:f1:c5:54:ac:a0:ac:f0:20:
e5:30:be:9e:75:58:bf:fc:e2:a7:05:46:0e:99:c3:
ab:48:68:06:11:20:12:78:d1:3b:2b:93:1b:cd:8d:
ce:ee:7f:c5:25:66:72:46:ea:48:46:b9:05:ba:fd:
c1:8c:fe:31:ed:a0:d1:ee:9c:a9:b7:11:f7:3f:a3:
1f:ca:ad:19:67:fd:cf:c9:94:91:a8:93:e2:c4:db:
a4:1b:40:c2:fb:4f:cf:01:03:46:5e:ab:91:f3:ab:
6a:9b:fd:c9:e2:f6:fa:03:1b:84:cb:15:d9:4c:c8:
1e:75:53:e6:12:64:f0:38:96:2a:b0:8e:7f:6b:4e:
c7:5b:dd:d4:6c:ae:15:1c:7e:70:01:5f:75:90:99:
12:35:f7:54:4a:1e:15:13:f7:cb:dc:ea:dc:c3:ca:
e1:e8:c2:3c:ba:22:69:1b:48:17:ae:cf:6d:ee:28:
00:72:0f:b1:33:5a:aa:14:83:d8:d7:30:66:b2:29:
9c:72:5c:93:21:f0:b8:14:90:51:a8:ad:97:ff:68:
9d:f1:50:0e:aa:da:57:4a:62:20:f8:e6:2a:b5:15:
a5:bb:20:13:99:32:58:dd:6f:ec:05:81:f3:cb:96:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:52:E9:D0:7B:38:C6:DF:17:B6:11:BE:76:F9:EF:ED:93:D7:B8
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/MjFS6dB7OMbfF7YRvnb57-2T17g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.57.0/24
5.255.61.0-5.255.63.255
23.252.66.0-23.252.68.255
23.252.71.0/24
23.252.75.0-23.252.76.255
23.252.79.0/24
91.92.112.0/23
107.150.162.0-107.150.164.255
107.150.171.0/24
107.150.175.0/24
107.150.177.0/24
162.222.88.0-162.222.90.255
167.160.11.0/24
167.160.27.0/24
176.126.101.0/24
185.4.224.0/23
185.165.47.0/24
185.252.210.0/24
212.52.14.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5a:02:4c:61:81:28:86:60:20:be:30:e8:e0:a4:41:08:70:
1c:60:60:a0:81:67:1f:bd:4b:5e:9c:88:a0:c1:c3:c7:95:14:
4c:fd:f2:6a:f6:02:f5:e8:07:de:ab:be:d4:8f:b1:4d:41:66:
54:cf:a4:b4:f8:26:71:7c:9a:5a:34:9d:93:2e:95:79:62:0c:
d2:84:74:4e:91:26:14:1e:32:4c:eb:c7:44:09:75:82:6b:57:
d8:7d:b2:cc:76:28:1b:8d:96:4e:88:68:c7:59:4f:d4:e3:86:
e6:c8:00:b0:0b:9a:e6:b9:27:76:03:c2:dc:97:a2:69:8c:40:
d5:6a:f1:58:2e:31:ea:53:a9:96:5d:38:60:e1:0f:b6:76:1e:
10:8e:eb:fd:30:40:ca:9e:ae:75:1f:b4:54:18:60:f4:0a:f8:
ce:ef:c9:8d:24:a1:12:9e:96:3a:c4:2d:10:d4:f8:5d:ed:08:
8a:44:72:e7:ed:3c:5a:e7:bd:8c:a1:19:f5:e2:fc:c7:25:c4:
f8:59:63:3b:ea:84:37:6d:0e:96:9b:7d:4c:3c:6b:da:72:1c:
50:4e:f4:c8:2c:93:03:b4:24:07:f6:34:a1:04:28:42:c2:35:
56:30:ff:58:d8:44:7b:03:67:71:c0:03:3b:80:ee:ce:39:e0:
13:e1:e1:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZfuf+YHUWs+VxXe0OIKr+CkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjUwNzA5MDkyNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjMxNTJlOWQwN2IzOGM2ZGYxN2I2MTFiZTc2ZjllZmVkOTNkN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K2XKR7Th6OYQ0Zax986C6vOOgcc
8cVUrKCs8CDlML6edVi//OKnBUYOmcOrSGgGESASeNE7K5MbzY3O7n/FJWZyRupI
RrkFuv3BjP4x7aDR7pyptxH3P6Mfyq0ZZ/3PyZSRqJPixNukG0DC+0/PAQNGXquR
86tqm/3J4vb6AxuEyxXZTMgedVPmEmTwOJYqsI5/a07HW93UbK4VHH5wAV91kJkS
NfdUSh4VE/fL3Orcw8rh6MI8uiJpG0gXrs9t7igAcg+xM1qqFIPY1zBmsimcclyT
IfC4FJBRqK2X/2id8VAOqtpXSmIg+OYqtRWluyATmTJY3W/sBYHzy5YPmwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFDIxUunQezjG3xe2Eb52+e/tk9e4MB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvTWpGUzZkQjdPTWJmRjdZUnZuYjU3LTJUMTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAAF
/zkwDAMEAAX/PQMEBgX/ADAMAwQBF/xCAwQAF/xEAwQAF/xHMAwDBAAX/EsDBAAX
/EwDBAAX/E8DBAFbXHAwDAMEAWuWogMEAGuWpAMEAGuWqwMEAGuWrwMEAGuWsTAM
AwQDot5YAwQAot5aAwQAp6ALAwQAp6AbAwQAsH5lAwQBuQTgAwQAuaUvAwQAufzS
AwQA1DQOMA0GCSqGSIb3DQEBCwUAA4IBAQAAWgJMYYEohmAgvjDo4KRBCHAcYGCg
gWcfvUtenIigwcPHlRRM/fJq9gL16Afeq77Uj7FNQWZUz6S0+CZxfJpaNJ2TLpV5
YgzShHROkSYUHjJM68dECXWCa1fYfbLMdigbjZZOiGjHWU/U44bmyACwC5rmuSd2
A8Lcl6JpjEDVavFYLjHqU6mWXThg4Q+2dh4Qjuv9MEDKnq51H7RUGGD0CvjO78mN
JKESnpY6xC0Q1Phd7QiKRHLn7Txa572MoRn14vzHJcT4WWM76oQ3bQ6Wm31MPGva
chxQTvTILJMDtCQH9jShBChCwjVWMP9Y2ER7A2dxwAM7gO7OOeAT4eHq
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:18:35 2025 by rpki-client