Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa
File: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (raw, json)
Hash identifier: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=
Subject key identifier: 03:91:33:9D:45:44:3F:84:A2:D1:30:A6:EC:93:F4:83:E7:C9:DB:30
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 0197CAF5E6B994EFB9F4757ACAEA9EE243A8
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa
Signing time: Wed 02 Jul 2025 11:46:42 +0000
ROA not before: Wed 02 Jul 2025 11:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62205
IP address blocks: 79.174.184.0/22 maxlen: 24
79.174.184.0/23 maxlen: 24
79.174.186.0/23 maxlen: 24
79.174.188.0/23 maxlen: 24
79.174.190.0/24 maxlen: 24
91.209.128.0/23 maxlen: 23
91.209.130.0/24 maxlen: 24
139.28.180.0/22 maxlen: 22
139.28.180.0/23 maxlen: 23
139.28.182.0/23 maxlen: 23
178.213.80.0/21 maxlen: 21
178.213.80.0/22 maxlen: 24
178.213.84.0/23 maxlen: 24
178.213.86.0/24 maxlen: 24
185.44.164.0/23 maxlen: 24
185.44.166.0/24 maxlen: 24
185.77.228.0/23 maxlen: 24
185.77.230.0/24 maxlen: 24
185.77.240.0/22 maxlen: 24
185.77.240.0/23 maxlen: 24
185.77.242.0/23 maxlen: 24
2a01:72a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:f5:e6:b9:94:ef:b9:f4:75:7a:ca:ea:9e:e2:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Jul 2 11:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0391339d45443f84a2d130a6ec93f483e7c9db30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:b6:63:6d:f0:28:2d:aa:14:24:1e:54:f5:
c4:59:82:1b:3c:ee:d1:74:0e:bc:71:97:e5:8f:76:
9d:d6:77:d7:f7:c4:1e:6d:69:cd:20:e1:86:7d:df:
69:a2:e3:49:ec:db:a2:ad:f3:53:0c:75:a2:9a:dd:
6c:91:e7:ba:52:f6:79:33:1a:5f:cb:9f:3d:59:c8:
8d:64:24:98:88:46:da:e5:5b:10:7d:0b:56:0b:6b:
68:f4:c2:af:ba:f1:cd:e8:8d:b4:48:02:d9:06:49:
f5:ca:63:f0:e2:5a:48:9d:e9:ea:2a:21:40:de:5d:
71:46:34:47:7f:3a:24:ce:71:1a:71:dc:5b:84:fa:
ee:5e:4a:57:28:e2:54:0b:09:52:95:08:47:94:6a:
18:02:b4:2b:18:be:df:0b:49:4f:8d:40:d4:e1:2a:
e3:b3:68:ab:57:40:c3:fc:9f:36:9a:71:9a:91:f5:
ce:60:ed:b3:a9:92:38:d4:02:6a:3d:58:29:14:18:
ac:1e:24:63:3c:da:48:dc:51:6b:6b:11:72:1e:48:
d9:80:f8:fe:d1:8a:b6:c9:3c:42:1d:50:d8:12:f3:
b9:4c:b3:61:e6:f1:21:5a:0b:a0:e4:89:2d:13:43:
e8:de:83:44:09:26:f4:f0:5f:c2:ec:f9:11:07:24:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:91:33:9D:45:44:3F:84:A2:D1:30:A6:EC:93:F4:83:E7:C9:DB:30
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.184.0-79.174.190.255
91.209.128.0-91.209.130.255
139.28.180.0/22
178.213.80.0/21
185.44.164.0-185.44.166.255
185.77.228.0-185.77.230.255
185.77.240.0/22
IPv6:
2a01:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
32:5a:1a:0a:ec:a0:23:af:25:28:2e:0d:97:7f:c2:29:23:57:
9b:f4:a5:b1:83:7c:b6:34:78:b1:18:1b:51:04:b4:8a:d7:31:
8e:fe:25:f7:e9:86:a7:40:a1:da:aa:23:a2:cd:61:d5:ec:0b:
66:f0:a8:e1:27:30:23:a1:ec:76:8d:82:e7:86:ce:42:bd:45:
ff:fc:15:16:51:f8:9e:d0:6b:3a:8e:d1:76:90:d2:70:7e:c2:
55:4f:96:d8:82:36:b1:b9:77:d9:2d:da:99:73:22:00:30:ce:
09:27:71:3e:6a:0b:10:01:ae:7b:60:e0:d4:a4:cd:0a:4e:c2:
04:b4:ec:a3:78:ce:19:de:a4:31:3f:a9:98:c1:49:ba:18:18:
7d:66:88:91:f1:3c:a7:9b:c7:14:8b:8d:eb:34:39:10:48:42:
b8:b1:06:97:ce:bf:59:74:02:b1:d5:d7:50:79:d9:1b:c4:67:
a9:da:f6:f7:77:5d:7d:23:a7:e6:02:50:ab:8c:bc:e7:f2:93:
89:2c:02:99:3a:5d:c2:e0:b7:f8:18:df:47:00:79:9e:4a:b3:
e5:71:e7:38:be:22:fa:82:f5:90:20:35:b4:40:1e:c2:49:74:
a1:4c:67:04:6e:c3:81:d0:93:7d:96:63:d2:3d:7f:d3:37:8c:
93:0e:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:56 2025 by rpki-client