Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/5GAvl6a2LhO40IHXb3FEQRL43dI.roa
File: 5GAvl6a2LhO40IHXb3FEQRL43dI.roa (raw, json)
Hash identifier: /6XSNGfrUMapG8xHohOBC097pXOO/8yE7oieep3PnkA=
Subject key identifier: E4:60:2F:97:A6:B6:2E:13:B8:D0:81:D7:6F:71:44:41:12:F8:DD:D2
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 01980F0035C245236C5262055A5CCDD57CBC
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/5GAvl6a2LhO40IHXb3FEQRL43dI.roa
Signing time: Tue 15 Jul 2025 16:52:08 +0000
ROA not before: Tue 15 Jul 2025 16:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216456
IP address blocks: 89.35.53.0/24 maxlen: 24
117.55.199.0/24 maxlen: 24
194.54.146.0/24 maxlen: 24
194.164.87.0/24 maxlen: 24
202.181.153.0/24 maxlen: 24
203.28.15.0/24 maxlen: 24
212.6.53.0/24 maxlen: 24
2a10:2080::/29 maxlen: 29
2a10:2080::/48 maxlen: 48
2a10:2080:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0f:00:35:c2:45:23:6c:52:62:05:5a:5c:cd:d5:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Jul 15 16:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4602f97a6b62e13b8d081d76f71444112f8ddd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:16:a6:9f:3f:aa:60:f3:61:1c:94:ad:b0:f4:
14:b8:09:65:e8:66:43:9b:b6:c7:a9:7d:c7:ae:53:
47:9f:8c:b3:a9:de:2a:cb:32:8e:72:41:e5:f5:f1:
78:a4:1c:f0:69:36:6b:3e:f8:fd:4f:85:d6:17:66:
3a:ca:63:ab:3a:7b:01:0f:e1:29:f2:99:85:93:06:
63:6c:e8:ca:f7:eb:ab:63:2a:6d:e7:23:ce:88:ba:
c2:22:03:29:f5:f3:e0:6c:8f:c5:48:7e:94:c6:d9:
c8:fc:71:b9:c1:d0:05:cf:d0:77:66:0d:59:33:88:
fa:5d:8d:ab:87:76:7e:42:41:3e:52:84:e7:62:36:
c8:9e:91:24:b4:f6:a1:0b:58:d6:2d:50:50:73:2f:
8a:1f:d9:56:eb:d7:16:e1:a3:fe:e6:65:72:8f:8d:
60:5f:89:d5:a6:69:c0:ed:b4:09:12:6d:ed:de:be:
2e:b2:48:c3:fe:f8:21:23:b6:ff:fe:01:c0:64:f8:
3b:73:d9:85:e6:ea:75:48:74:7a:ba:34:d8:05:df:
39:09:f8:19:fd:68:b0:92:5d:59:5e:79:85:2d:30:
b4:e6:a2:ca:04:ac:05:8d:91:a0:97:09:b9:26:a4:
45:87:b0:6a:8d:c8:d5:51:eb:aa:b8:b3:64:c2:c6:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:2F:97:A6:B6:2E:13:B8:D0:81:D7:6F:71:44:41:12:F8:DD:D2
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/5GAvl6a2LhO40IHXb3FEQRL43dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.53.0/24
117.55.199.0/24
194.54.146.0/24
194.164.87.0/24
202.181.153.0/24
203.28.15.0/24
212.6.53.0/24
IPv6:
2a10:2080::/29
Signature Algorithm: sha256WithRSAEncryption
33:4d:24:4d:78:a4:ca:3f:cd:7b:6e:a4:72:f0:0c:b6:7d:6b:
73:4a:c2:69:fa:6e:42:22:73:f6:e0:61:c8:d4:6f:e0:6c:18:
32:fa:79:1b:fa:f4:a9:4e:51:64:1a:ad:40:a3:26:e5:e8:cf:
1a:2f:2e:a0:f4:23:a1:49:3a:1e:c3:ad:9d:6d:8c:6b:5a:0e:
37:49:48:f2:35:c5:4b:bf:0f:a6:0d:e7:1e:15:cd:07:64:61:
f3:92:c8:fe:62:93:20:63:55:6c:12:81:08:36:2c:c5:8a:2b:
0d:dc:40:c3:47:5e:6d:53:76:59:7a:9a:e1:f1:19:52:89:0f:
ca:ec:ec:e0:6c:14:5e:6c:0f:a1:8a:99:06:5c:26:66:9a:7e:
8e:dc:2a:1b:52:0f:c1:4c:37:4e:3a:64:0a:e4:a7:1a:3b:60:
e5:92:86:8c:54:54:3a:e4:64:97:ea:c9:de:f4:c4:e4:f2:0b:
6a:39:25:05:97:01:97:1e:19:c2:21:fa:b7:12:73:60:1f:92:
10:07:a9:7a:59:62:3f:10:8e:ad:60:b3:06:07:f6:50:a0:20:
16:3f:2f:d7:05:df:dc:02:50:81:34:ec:af:c9:00:cf:34:67:
c7:2f:26:5c:80:57:3a:8d:5d:b3:bc:c5:a9:24:6c:91:02:9a:
ba:2e:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:48:23 2025 by rpki-client