Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5Wz-KIKEFDWZ2u5QFWZyRLeyNz0.roa
File: 5Wz-KIKEFDWZ2u5QFWZyRLeyNz0.roa (raw, json)
Hash identifier: fxfIeFOMZGGvNvF+AcZS0oVzt+aVG8h5j2EOuekHmHE=
Subject key identifier: E5:6C:FE:28:82:84:14:35:99:DA:EE:50:15:66:72:44:B7:B2:37:3D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0197354C8A5CCDBA22FB9BCF53B483EB08E8
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5Wz-KIKEFDWZ2u5QFWZyRLeyNz0.roa
Signing time: Tue 03 Jun 2025 10:18:17 +0000
ROA not before: Tue 03 Jun 2025 10:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 80.81.39.0/24 maxlen: 24
80.81.48.0/24 maxlen: 24
80.81.53.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
80.255.224.0/20 maxlen: 20
83.223.128.0/24 maxlen: 24
83.223.129.0/24 maxlen: 24
83.223.130.0/24 maxlen: 24
83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.137.0/24 maxlen: 24
83.223.142.0/24 maxlen: 24
83.223.144.0/24 maxlen: 24
83.223.148.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
85.254.52.0/24 maxlen: 24
85.254.53.0/24 maxlen: 24
85.254.54.0/24 maxlen: 24
85.254.55.0/24 maxlen: 24
85.254.66.0/24 maxlen: 24
85.254.67.0/24 maxlen: 24
85.254.133.0/24 maxlen: 24
85.254.135.0/24 maxlen: 24
85.254.136.0/24 maxlen: 24
85.254.165.0/24 maxlen: 24
85.254.166.0/24 maxlen: 24
85.254.167.0/24 maxlen: 24
85.254.171.0/24 maxlen: 24
85.254.190.0/24 maxlen: 24
91.190.38.0/24 maxlen: 24
91.190.39.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
94.101.237.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:4c:8a:5c:cd:ba:22:fb:9b:cf:53:b4:83:eb:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 3 10:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56cfe288284143599daee5015667244b7b2373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:9d:8b:a9:de:50:09:e3:9e:63:c9:12:30:
a7:7f:0c:20:5c:1e:ec:03:ab:50:8b:83:7e:8f:f5:
29:07:05:d1:b4:30:d0:c9:7c:18:0c:a8:7a:1d:f8:
dd:a6:bc:4a:a0:55:50:c4:0f:5b:fe:24:25:29:92:
13:89:14:ad:e8:c0:26:14:00:ac:30:09:1e:fa:fb:
c9:77:be:eb:6a:15:19:06:d0:23:f1:8d:c6:6e:de:
b5:df:cd:cb:7a:8c:69:77:c5:e6:0c:e8:75:3a:f8:
71:9e:18:63:2b:86:97:29:0b:72:bb:47:d0:2f:1f:
8a:3e:d3:04:7a:4f:52:9a:60:c8:fa:ae:89:a9:13:
c5:d9:46:dd:5d:59:14:94:30:2d:49:b1:d5:f1:37:
49:23:a9:9f:88:97:a9:4e:2e:b4:97:4c:70:c2:ee:
3c:31:48:d7:f0:c9:4c:4c:1f:f6:df:f6:9a:70:73:
72:e2:0f:01:9e:ea:88:a4:ea:1f:73:98:98:03:ed:
b7:e2:f0:71:34:fe:d8:ff:73:92:d5:5a:2b:58:a4:
06:86:d0:26:f0:52:54:c6:28:b4:40:20:4a:a8:3b:
7c:f7:19:3f:71:8a:95:cd:d8:b9:9f:ee:d8:10:10:
af:35:99:c5:38:8e:28:c8:33:bb:07:07:1f:ba:89:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:FE:28:82:84:14:35:99:DA:EE:50:15:66:72:44:B7:B2:37:3D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5Wz-KIKEFDWZ2u5QFWZyRLeyNz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0/24
80.81.48.0/24
80.81.53.0/24
80.81.58.0/24
80.255.224.0/20
83.223.128.0-83.223.130.255
83.223.134.0/23
83.223.137.0/24
83.223.142.0/24
83.223.144.0/24
83.223.148.0/24
83.223.153.0-83.223.154.255
83.223.157.0/24
85.254.52.0/22
85.254.66.0/23
85.254.133.0/24
85.254.135.0-85.254.136.255
85.254.165.0-85.254.167.255
85.254.171.0/24
85.254.190.0/24
91.190.38.0/23
91.190.47.0/24
91.190.61.0/24
94.101.226.0/24
94.101.237.0/24
159.148.148.0/23
159.148.181.0/24
159.148.240.0/24
185.7.237.0-185.7.239.255
Signature Algorithm: sha256WithRSAEncryption
66:b0:d8:65:e8:04:d4:0e:af:ea:5c:05:5b:90:bc:ca:d8:1c:
56:9e:2d:1c:d4:22:2a:5f:cf:f8:5a:ff:35:6e:50:fa:be:a3:
9c:8a:2c:f8:5b:b6:44:d6:d8:23:e4:36:77:96:d5:48:73:04:
31:48:76:df:48:da:87:47:3d:bb:9c:5c:8b:a4:77:86:ac:92:
84:71:9e:a3:04:78:d5:80:48:2a:8a:e8:dc:93:ee:a6:86:da:
c6:c3:11:f4:fa:30:5a:48:9a:eb:fd:4d:34:b3:58:31:65:97:
a7:c7:5c:fc:3f:53:af:36:81:ad:9e:81:e2:63:d0:66:98:91:
fa:dd:5e:6c:b8:93:cc:08:06:73:c7:c0:05:20:d5:73:4b:7a:
42:f1:4e:cc:e2:d2:18:aa:9c:c9:87:7b:0a:4e:e6:49:1e:7f:
ad:bd:4d:ca:e0:61:04:77:51:09:8a:ee:50:c0:ca:e9:85:0e:
19:2c:81:7f:1d:4e:57:1a:e6:17:9c:07:66:c6:0a:d1:f7:37:
1a:3b:a9:f6:58:27:f4:a5:34:b4:29:38:35:49:d4:58:7b:00:
50:8a:8c:b8:bb:f7:95:2f:37:b1:04:a9:76:a3:a1:f5:74:1a:
89:51:6c:6d:6e:1a:e4:f3:77:c7:2a:01:bd:4a:d5:a2:69:1a:
01:f1:b1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:49 2025 by rpki-client