Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/EYYwK4mKUP0GuDf6GH_mTX5Kn8c.roa
File: EYYwK4mKUP0GuDf6GH_mTX5Kn8c.roa (raw, json)
Hash identifier: qVvJltb4ynTvSxdhHaCxpVzLqMiGdOqRfx5ig/CGpCU=
Subject key identifier: 11:86:30:2B:89:8A:50:FD:06:B8:37:FA:18:7F:E6:4D:7E:4A:9F:C7
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0198173EB4D3E892EA71690EEB03593147CF
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/EYYwK4mKUP0GuDf6GH_mTX5Kn8c.roa
Signing time: Thu 17 Jul 2025 07:17:22 +0000
ROA not before: Thu 17 Jul 2025 07:17:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:3e:b4:d3:e8:92:ea:71:69:0e:eb:03:59:31:47:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jul 17 07:17:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1186302b898a50fd06b837fa187fe64d7e4a9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:5f:49:6e:bb:07:c6:5b:74:ee:3c:c3:4c:
1c:48:7b:34:85:c6:c1:7e:18:2f:4f:cf:42:0a:6b:
90:dd:1b:3a:30:d6:80:ce:f4:fa:83:2d:b1:db:7d:
43:4b:24:e8:e6:73:56:5c:7c:45:1f:de:dd:a3:58:
f5:83:a6:a6:ad:b1:ba:d1:74:77:ef:4f:44:27:30:
8e:59:1b:15:36:cd:29:df:4f:a6:5a:4a:a7:4c:49:
ad:f8:e0:93:7c:b3:f2:52:61:42:7f:22:76:ac:2e:
97:88:cc:d8:75:a8:63:f2:b0:91:34:60:23:28:5a:
65:09:30:3b:96:81:31:b0:ba:c2:26:cf:4b:e3:07:
1e:b1:ba:45:0f:48:bd:80:9d:6b:a1:e9:9b:25:c7:
63:26:c2:07:4b:9a:e2:6a:17:bd:58:fe:95:ac:8d:
08:78:68:03:1d:19:cc:72:b4:e5:7b:7a:e5:98:4e:
98:f7:76:4a:8e:10:97:6f:d3:d9:45:76:f4:f4:16:
dc:ed:09:cd:7f:0f:f6:de:2d:b3:ff:82:cd:2b:24:
ae:89:8e:eb:eb:22:82:01:4f:0f:bf:8a:0e:32:f9:
1c:8d:8b:4c:b0:da:9d:7c:00:73:07:f6:f3:c3:cb:
ba:a0:ed:3c:f0:93:2d:2c:37:51:2f:49:ef:22:db:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:30:2B:89:8A:50:FD:06:B8:37:FA:18:7F:E6:4D:7E:4A:9F:C7
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/EYYwK4mKUP0GuDf6GH_mTX5Kn8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
185.198.152.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/24
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
66:dc:cb:06:ee:db:b8:8d:dd:e9:76:b5:4c:49:3e:8c:7c:35:
a4:1f:0e:c6:68:a6:4d:49:b1:58:2b:a1:c0:0a:40:c9:7c:8c:
3e:2d:00:f2:72:d8:fa:ff:d8:9b:cb:e4:ad:5b:67:e8:a9:3b:
21:13:a3:4f:78:9d:44:ba:c5:46:53:d3:50:94:cf:de:ad:61:
b6:5e:e8:79:85:59:4b:22:22:ed:56:11:a9:f4:38:5a:04:f4:
b6:9b:b0:1f:b9:d2:15:73:54:10:40:4a:e5:23:87:8b:0e:45:
2e:0f:7f:b2:aa:e9:b3:83:66:a4:b9:38:d9:17:b3:f4:59:bd:
a2:f5:38:3e:5a:ff:de:0e:60:1d:47:c5:42:7c:38:d9:f1:fb:
df:5e:29:50:f7:10:85:bf:61:47:ca:0e:c3:05:15:b7:59:4d:
c4:40:8a:ec:7f:2d:ad:8e:23:2f:33:6f:bf:fb:dc:8c:24:91:
40:45:62:eb:f6:b3:d2:e4:26:23:b6:ef:0a:b4:74:a1:35:d5:
e7:7d:d9:c9:f1:46:c3:83:14:15:45:a8:c1:57:ac:7b:a5:14:
87:dc:de:a9:f2:7a:7c:f0:34:69:b9:11:20:5d:8e:cb:ef:cd:
28:fd:93:c5:32:53:44:a1:12:c1:fc:f4:db:9a:2b:2d:23:89:
53:ab:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:35 2025 by rpki-client