Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa
File: LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa (raw, json)
Hash identifier: gidlYB2yA995VC/sjZRH4fK+Z2xDnArATR8jcQsRBeo=
Subject key identifier: 2C:29:B9:1E:38:C1:22:01:38:91:CE:77:63:5C:7D:57:78:C4:2B:91
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 01981399084E03C77EE09671B612E0561EE5
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa
Signing time: Wed 16 Jul 2025 14:17:32 +0000
ROA not before: Wed 16 Jul 2025 14:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 5.61.113.0/24 maxlen: 24
5.61.115.0/24 maxlen: 24
5.61.117.0/24 maxlen: 24
5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:99:08:4e:03:c7:7e:e0:96:71:b6:12:e0:56:1e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jul 16 14:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c29b91e38c122013891ce77635c7d5778c42b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:98:0b:22:04:d1:87:62:86:ba:e1:49:46:
02:3a:0c:a6:8e:4a:e2:24:7f:ca:a4:b1:d2:20:4d:
b1:de:8c:71:5e:f3:dd:b4:ab:a9:81:9b:d1:ac:58:
3f:9f:e2:76:58:07:ca:32:8b:da:e8:9d:ba:3d:04:
4f:17:f9:fa:ef:3e:d6:d6:44:c5:42:dd:d7:72:89:
21:72:c5:cd:48:e7:a5:01:a4:d8:8e:f8:8f:55:f8:
c9:d7:98:da:c4:d2:dc:d3:2c:27:de:0d:07:ca:14:
13:3e:ad:37:9f:dd:da:3f:b9:ba:7a:ba:88:ad:00:
c7:e0:29:58:55:e4:93:c8:da:9a:a1:fe:c7:09:a8:
33:74:d1:68:cc:ad:69:20:cd:0d:78:26:fd:44:8f:
17:ae:b0:cc:55:c1:6e:8e:49:88:72:a0:a2:b4:ac:
95:20:7c:fb:51:7a:89:95:10:f7:d3:45:b5:1f:26:
e3:d5:3b:3b:1f:3d:94:84:a9:37:e7:d5:c2:d6:98:
e1:43:87:ae:87:71:f7:ea:b4:8d:ac:83:bb:b0:b9:
ca:f8:5a:a6:cf:d4:9a:e8:b6:22:28:a6:68:24:2e:
7b:e7:93:7f:f1:34:26:cf:92:ba:e8:3c:8e:4c:7c:
7c:13:10:ce:70:7d:87:4e:11:76:77:cd:a7:cd:20:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:B9:1E:38:C1:22:01:38:91:CE:77:63:5C:7D:57:78:C4:2B:91
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.113.0/24
5.61.115.0/24
5.61.117.0/24
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
81:17:08:08:05:17:b1:c6:fd:b0:99:1b:c1:36:6d:d7:6a:2f:
5d:f3:10:06:ff:b5:a7:94:6c:91:a9:5a:d9:4b:b6:36:17:7d:
ff:6e:44:e0:f4:bb:d6:aa:bb:ab:c4:92:82:9b:19:61:84:1b:
7b:bb:b7:82:0c:31:84:01:13:11:21:aa:5e:40:ce:01:99:3a:
e1:95:48:43:1b:e5:14:99:02:fe:e7:67:5b:bf:b4:10:97:b3:
d8:a7:78:0f:9a:a4:e3:e1:b7:65:10:88:12:58:cc:a2:2a:74:
8b:a9:d6:8c:47:92:e7:a9:7e:dd:b3:04:31:58:6d:af:e0:2b:
87:04:34:67:c2:6b:b7:68:63:cc:15:2f:cc:6c:cc:eb:52:69:
b2:d8:eb:9b:ab:29:15:04:87:a4:2d:ef:1e:39:95:07:48:5f:
ca:a3:3e:14:50:fe:6a:ce:01:5a:d1:f2:82:5c:23:c4:a1:ce:
90:e5:89:11:da:8c:5b:8e:4a:b0:28:2c:dc:31:32:cc:06:4e:
65:5b:9f:57:23:c2:c0:66:3e:13:ef:d8:a3:4d:b5:44:1f:5f:
4d:1d:3e:12:ab:06:30:aa:a2:48:75:74:9f:28:d1:1d:f1:df:
26:13:ec:9d:c1:97:21:df:f2:eb:2e:ea:93:14:a2:fe:08:0d:
cc:f3:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:47 2025 by rpki-client