Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/ciH-ly2HETPUQCD4TRirLR18GQo.roa
File: ciH-ly2HETPUQCD4TRirLR18GQo.roa (raw, json)
Hash identifier: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=
Subject key identifier: 72:21:FE:97:2D:87:11:33:D4:40:20:F8:4D:18:AB:2D:1D:7C:19:0A
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0197F8FC38F4B1AF439A2C2924BE0DBFC032
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/ciH-ly2HETPUQCD4TRirLR18GQo.roa
Signing time: Fri 11 Jul 2025 10:16:08 +0000
ROA not before: Fri 11 Jul 2025 10:16:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199468
IP address blocks: 5.133.40.0/21 maxlen: 21
5.133.40.0/24 maxlen: 24
5.133.41.0/24 maxlen: 24
5.133.42.0/24 maxlen: 24
5.133.43.0/24 maxlen: 24
144.124.128.0/18 maxlen: 24
185.173.8.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
2a04:ed00::/29 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:fc:38:f4:b1:af:43:9a:2c:29:24:be:0d:bf:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jul 11 10:16:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7221fe972d871133d44020f84d18ab2d1d7c190a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:e4:26:92:46:25:cd:d2:ae:bf:f9:e5:01:
16:6a:4e:f7:c9:bf:ea:ac:38:05:37:d0:36:42:65:
d4:71:17:c3:4f:6a:2a:08:d6:ca:f1:c1:7e:cd:f0:
95:51:de:28:3f:5c:3f:aa:7f:e3:e0:d0:5b:5d:a6:
56:f1:b1:a0:b9:ee:86:41:30:44:2c:96:69:9a:a1:
67:82:e1:82:33:50:5e:f5:78:c7:f9:8f:ec:f3:a6:
65:d1:98:0d:aa:34:5a:0d:a8:ef:00:e0:2a:66:c0:
ed:32:b0:97:5a:05:2b:43:71:1e:09:74:3d:0e:8b:
e2:33:30:04:45:5e:fa:16:83:0b:62:cd:89:36:a5:
c1:0e:17:60:fc:02:48:49:33:8b:23:a3:bc:8e:03:
bb:9a:b8:e5:88:90:54:96:97:2b:e4:c5:c2:6b:4b:
92:47:db:e3:ef:7d:ae:cb:d9:e9:44:70:26:b6:80:
df:dc:d4:14:d6:52:9c:97:2a:18:2d:e2:45:85:bd:
55:32:f8:d6:3f:06:eb:79:97:8a:2d:58:c0:8a:4a:
28:99:8a:ff:bc:76:1b:31:9f:ea:ce:f4:2d:f6:2a:
c5:93:0b:43:d0:44:2f:29:24:b1:ba:62:17:37:54:
68:94:a0:55:ff:9b:50:bd:94:13:0f:c0:ae:d8:82:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:FE:97:2D:87:11:33:D4:40:20:F8:4D:18:AB:2D:1D:7C:19:0A
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/ciH-ly2HETPUQCD4TRirLR18GQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
144.124.128.0/18
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
30:d7:54:94:05:26:8d:c4:06:ec:ad:7b:ef:ec:4a:26:ef:56:
79:62:6a:7c:9f:8a:f4:72:1f:78:8c:90:fc:f4:03:29:84:0f:
00:3d:9a:c2:df:6c:90:0e:28:25:22:64:3e:c2:71:ed:e8:0e:
cd:71:be:47:35:26:a7:5a:9f:46:32:f8:83:3e:65:a4:aa:95:
5a:58:85:5c:03:08:c0:7e:57:a7:bd:0f:bb:05:a9:d4:d7:8c:
bf:60:e3:0a:74:ac:21:83:c8:8d:d4:a0:1d:b7:13:37:f6:90:
e1:2f:3b:09:8b:f5:e8:a9:96:97:e5:b4:72:a6:2d:fa:f9:8f:
7f:62:13:a3:53:d4:55:03:a8:34:cd:a9:9d:97:e1:ed:d5:7f:
a8:33:6b:ff:6d:58:6e:a8:3e:62:a5:e8:ac:67:7f:66:1a:a0:
16:a8:0f:f9:98:98:cf:de:aa:54:4b:c7:3e:e6:04:f0:df:a2:
42:1e:b4:88:96:aa:3e:9c:66:0d:f0:21:ed:bb:b6:e0:90:a9:
6e:cd:dc:de:01:d4:4d:70:bc:1b:d2:4b:a0:2e:fa:6b:f4:4c:
68:12:b4:7b:e5:7d:a5:3e:27:39:a8:37:4d:d4:b0:cf:c0:72:
f8:10:35:c8:fb:f7:2b:d2:56:50:cd:b9:47:87:b9:02:44:af:
08:20:63:0a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZf4/Dj0sa9DmiwpJL4Nv8AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUwNzExMTAxNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjIxZmU5NzJkODcxMTMzZDQ0MDIwZjg0ZDE4YWIyZDFkN2MxOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQPkJpJGJc3Srr/55QEWak73yb/q
rDgFN9A2QmXUcRfDT2oqCNbK8cF+zfCVUd4oP1w/qn/j4NBbXaZW8bGgue6GQTBE
LJZpmqFnguGCM1Be9XjH+Y/s86Zl0ZgNqjRaDajvAOAqZsDtMrCXWgUrQ3EeCXQ9
DoviMzAERV76FoMLYs2JNqXBDhdg/AJISTOLI6O8jgO7mrjliJBUlpcr5MXCa0uS
R9vj732uy9npRHAmtoDf3NQU1lKclyoYLeJFhb1VMvjWPwbreZeKLVjAikoomYr/
vHYbMZ/qzvQt9irFkwtD0EQvKSSxumIXN1RolKBV/5tQvZQTD8Cu2IIT3QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFHIh/pcthxEz1EAg+E0Yqy0dfBkKMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvY2lILWx5MkhFVFBVUUNENFRSaXJMUjE4R1FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBYUoAwQG
kHyAAwQCua0IAwQEwqPgMA0EAgACMAcDBQMqBO0AMA0GCSqGSIb3DQEBCwUAA4IB
AQAw11SUBSaNxAbsrXvv7Eom71Z5Ymp8n4r0ch94jJD89AMphA8APZrC32yQDigl
ImQ+wnHt6A7Ncb5HNSanWp9GMviDPmWkqpVaWIVcAwjAflenvQ+7BanU14y/YOMK
dKwhg8iN1KAdtxM39pDhLzsJi/XoqZaX5bRypi36+Y9/YhOjU9RVA6g0zamdl+Ht
1X+oM2v/bVhuqD5ipeisZ39mGqAWqA/5mJjP3qpUS8c+5gTw36JCHrSIlqo+nGYN
8CHtu7bgkKluzdzeAdRNcLwb0kugLvpr9ExoErR75X2lPic5qDdN1LDPwHL4EDXI
+/cr0lZQzblHh7kCRK8IIGMK
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:41:30 2025 by rpki-client