Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/XyMxVfTmZ9FOajmxjytII90XihY.roa
File: XyMxVfTmZ9FOajmxjytII90XihY.roa (raw, json)
Hash identifier: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=
Subject key identifier: 5F:23:31:55:F4:E6:67:D1:4E:6A:39:B1:8F:2B:48:23:DD:17:8A:16
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 0197EB5952844676373BF9BBC2F4F1C0C560
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/XyMxVfTmZ9FOajmxjytII90XihY.roa
Signing time: Tue 08 Jul 2025 18:43:08 +0000
ROA not before: Tue 08 Jul 2025 18:43:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60530
IP address blocks: 5.152.144.0/22 maxlen: 24
5.152.148.0/24 maxlen: 24
5.152.154.0/23 maxlen: 24
5.152.156.0/22 maxlen: 24
185.30.44.0/22 maxlen: 24
2a00:ab20::/29 maxlen: 32
2a11:cf40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:eb:59:52:84:46:76:37:3b:f9:bb:c2:f4:f1:c0:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Jul 8 18:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f233155f4e667d14e6a39b18f2b4823dd178a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:45:5d:8f:c3:5a:f0:10:30:9b:5c:82:5e:
7c:56:16:12:cd:2f:b2:8b:28:99:60:91:b8:ca:42:
8b:47:7e:b9:e8:a0:05:ac:ed:25:e4:47:36:20:3d:
5a:59:6b:e6:fd:54:fd:c6:56:c5:cc:24:f5:fa:ca:
75:6d:d9:2c:9f:6e:b9:40:5c:cd:f7:cc:42:e9:fd:
94:cd:47:10:29:ff:61:a8:4d:ea:49:a0:f2:2d:e9:
e1:c8:aa:a3:4f:d0:5d:19:c1:9c:e5:d0:8a:b7:21:
8d:81:21:37:f4:6d:e7:32:e1:69:87:b1:4b:a6:6a:
07:1a:6f:18:8a:c3:ae:a9:79:5a:3c:a6:55:a5:66:
5c:e9:2d:18:b8:1c:b1:dd:cf:a3:a2:d6:ae:b1:eb:
49:c0:68:69:78:36:11:6f:b7:cd:83:c5:ef:95:66:
80:a0:ab:62:3d:07:bb:dd:d1:6b:64:0a:f5:4c:ab:
ff:95:2b:f6:3f:47:90:2c:49:17:de:47:2e:dd:ff:
e5:45:d1:9b:cc:1f:de:ef:ff:f8:cb:ae:35:7f:4d:
92:48:92:ae:88:0f:22:5d:31:a6:c2:97:bd:c7:54:
7b:73:5f:ed:94:e5:49:04:cc:5f:1c:b2:a3:9e:81:
11:79:b1:59:15:b0:77:30:b0:17:6c:08:90:84:a8:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:31:55:F4:E6:67:D1:4E:6A:39:B1:8F:2B:48:23:DD:17:8A:16
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/XyMxVfTmZ9FOajmxjytII90XihY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.144.0-5.152.148.255
5.152.154.0-5.152.159.255
185.30.44.0/22
IPv6:
2a00:ab20::/29
2a11:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
55:5d:25:5e:9b:b3:6b:c9:b8:dd:72:d6:b2:bc:c8:b3:74:03:
62:60:58:6b:13:87:2f:14:ff:90:28:ee:49:a8:fb:ec:36:b1:
4e:93:3e:0c:ce:48:91:d9:1b:db:a5:11:30:87:b1:4e:3c:39:
fb:99:36:a9:0b:64:b3:d1:33:e1:58:81:5e:cf:30:09:c3:d9:
60:dd:18:b4:ac:76:f6:79:95:da:4c:6c:aa:b6:df:ed:9e:81:
cd:51:55:6a:33:f9:50:45:00:3d:36:63:9a:15:ae:8c:41:7e:
1d:ef:1b:6e:41:15:30:47:cd:0c:a7:0c:54:89:2c:87:36:2c:
55:1d:25:11:ae:40:f1:a0:c7:7f:59:9f:45:00:39:c0:c6:ab:
60:b1:ba:bc:41:c5:5e:24:3c:18:4e:14:6d:39:00:73:d6:b6:
03:b0:6c:b3:8c:02:ba:63:75:0f:bc:c7:e0:0b:e7:8a:ce:53:
e5:7c:60:18:6c:ca:1c:11:67:19:b1:b2:a8:f7:c1:58:f4:5d:
db:30:04:76:c6:b8:11:c5:d9:24:bd:e7:61:d9:c4:3b:f2:8c:
1e:f3:ff:1a:5e:cc:37:39:f6:b3:ef:38:d4:39:84:9f:f9:40:
11:72:b6:6f:66:b5:bd:f6:58:a4:c8:f8:85:0a:95:e0:79:b2:
e7:01:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:59 2025 by rpki-client