Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/hNPDAxPQgOV-FkoiiR7QBRyC1JQ.roa
File: hNPDAxPQgOV-FkoiiR7QBRyC1JQ.roa (raw, json)
Hash identifier: DUd8QLUIQOfTOTHgY9OqcegAgzKksN9SuP4bC0vP4rY=
Subject key identifier: 84:D3:C3:03:13:D0:80:E5:7E:16:4A:22:89:1E:D0:05:1C:82:D4:94
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0197DF502B4539E8B3C58891836EDC62BE2F
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/hNPDAxPQgOV-FkoiiR7QBRyC1JQ.roa
Signing time: Sun 06 Jul 2025 10:37:42 +0000
ROA not before: Sun 06 Jul 2025 10:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41275
IP address blocks: 5.35.112.0/22 maxlen: 22
5.35.112.0/23 maxlen: 23
5.35.113.0/24 maxlen: 24
5.35.114.0/23 maxlen: 23
62.217.184.0/21 maxlen: 21
85.198.104.0/23 maxlen: 23
89.169.48.0/22 maxlen: 22
89.169.48.0/23 maxlen: 23
89.169.50.0/23 maxlen: 23
89.207.216.0/21 maxlen: 21
89.207.216.0/22 maxlen: 22
89.207.216.0/24 maxlen: 24
89.207.217.0/24 maxlen: 24
89.207.220.0/22 maxlen: 22
89.207.221.0/24 maxlen: 24
93.157.244.0/22 maxlen: 22
95.130.128.0/22 maxlen: 22
95.131.144.0/21 maxlen: 21
95.131.144.0/22 maxlen: 22
95.131.144.0/24 maxlen: 24
95.131.148.0/22 maxlen: 22
185.43.198.0/23 maxlen: 23
185.136.76.0/22 maxlen: 22
185.136.76.0/23 maxlen: 23
185.136.78.0/23 maxlen: 23
185.155.17.0/24 maxlen: 24
185.155.18.0/23 maxlen: 23
217.150.200.0/23 maxlen: 23
2a02:5fe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:50:2b:45:39:e8:b3:c5:88:91:83:6e:dc:62:be:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Jul 6 10:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84d3c30313d080e57e164a22891ed0051c82d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:d3:56:b8:df:fb:96:a4:32:8e:c6:9b:d4:
6f:e5:6d:69:6f:62:33:98:2a:03:0e:2f:b2:b6:58:
73:4f:95:d1:e1:a9:e2:87:cb:1d:1d:69:6a:88:59:
4d:15:48:b9:60:b9:bb:0a:6d:83:f0:9c:5b:06:21:
97:af:77:5c:91:e8:e2:b7:67:8f:dc:5d:45:12:c6:
b7:d7:94:db:3f:0d:39:b1:96:27:32:14:32:20:3f:
30:4a:cf:14:7c:62:6c:02:f6:88:77:31:f6:a4:ba:
f7:9c:13:30:16:28:ba:8f:b5:3b:46:0f:b1:b3:8c:
af:94:a1:ab:a8:2f:6e:a2:c2:1d:47:ed:5d:e2:44:
80:ff:66:50:42:9b:60:40:82:a5:4b:04:49:a4:22:
c0:c2:98:8c:ee:9d:a0:c2:f4:67:c5:38:88:74:11:
cb:11:e8:56:7c:f2:3f:8d:72:71:25:f5:03:b3:b7:
cb:66:28:58:1d:c4:a9:42:2e:ce:72:1f:ea:fd:68:
a8:24:80:2b:47:f5:c9:c2:b7:9c:02:0c:3d:88:25:
84:64:e1:4d:00:57:93:7c:91:a2:97:ba:8f:a4:75:
7b:b9:8e:1f:17:56:71:fc:51:26:d6:23:09:22:ba:
e8:b6:c4:02:6a:4c:d6:7a:de:e8:66:94:0b:1c:ca:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:C3:03:13:D0:80:E5:7E:16:4A:22:89:1E:D0:05:1C:82:D4:94
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/hNPDAxPQgOV-FkoiiR7QBRyC1JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.112.0/22
62.217.184.0/21
85.198.104.0/23
89.169.48.0/22
89.207.216.0/21
93.157.244.0/22
95.130.128.0/22
95.131.144.0/21
185.43.198.0/23
185.136.76.0/22
185.155.17.0-185.155.19.255
217.150.200.0/23
IPv6:
2a02:5fe0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:59:20:27:8e:c3:57:df:9e:ad:29:1f:63:03:26:7a:49:b4:
e8:22:89:b4:5f:fe:dc:75:c8:8b:22:71:65:02:32:e1:34:35:
3c:b0:db:e8:84:23:f3:a8:ef:86:3a:df:8e:14:ed:c7:f2:fa:
7e:18:2a:1a:1f:72:fc:50:d6:cc:04:a7:3c:9f:3e:dd:c7:b4:
04:ed:b8:d6:15:af:7f:a9:b8:3e:af:2f:01:19:cf:ac:05:f6:
c5:77:fc:57:b1:03:74:7a:79:b8:73:cb:27:4e:53:d7:be:76:
48:3c:65:6e:8f:ad:be:19:1e:8f:50:8c:a5:d6:63:f9:c4:15:
c9:c8:3b:53:92:8a:08:81:9c:a8:f9:be:87:9f:54:25:a0:83:
40:98:ce:c0:57:20:14:7a:72:3f:a9:bf:e0:27:81:1e:5b:5d:
6c:67:8f:e2:6f:a1:ed:0e:bc:63:7e:9f:6a:af:66:21:86:a5:
76:ff:81:81:52:47:77:da:56:f5:50:db:dd:e0:04:f4:49:57:
c0:cf:00:e7:8d:07:27:56:9b:d0:40:6f:fc:90:ca:4b:9a:96:
b4:53:00:08:d8:81:30:8d:3a:37:53:37:f8:d7:65:2f:7c:e6:
08:a3:ca:94:e1:f5:98:43:2c:0e:1e:09:2b:bf:ad:d2:5c:fa:
67:e4:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:17:03 2025 by rpki-client