Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-_o4GEjEVCvFXaxtDyclNKi8Jws.roa
File: 1-_o4GEjEVCvFXaxtDyclNKi8Jws.roa (raw, json)
Hash identifier: /07PXabR/v5tZFZf8EZSnkDEsceqQXbgeJdfpkGud0E=
Subject key identifier: FB:FA:38:18:48:C4:54:2B:C5:5D:AC:6D:0F:27:25:34:A8:BC:27:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019732BC1D2B6504D05A68EEF5D82FD6B905
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-_o4GEjEVCvFXaxtDyclNKi8Jws.roa
Signing time: Mon 02 Jun 2025 22:21:18 +0000
ROA not before: Mon 02 Jun 2025 22:21:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 5.175.132.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.175.250.0/24 maxlen: 24
5.230.5.0/24 maxlen: 24
5.230.9.0/24 maxlen: 24
5.231.23.0/24 maxlen: 24
5.231.36.0/24 maxlen: 24
5.231.41.0/24 maxlen: 24
5.231.44.0/24 maxlen: 24
5.231.63.0/24 maxlen: 24
5.231.69.0/24 maxlen: 24
5.231.76.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:bc:1d:2b:65:04:d0:5a:68:ee:f5:d8:2f:d6:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 22:21:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbfa381848c4542bc55dac6d0f272534a8bc270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:b7:f0:19:dd:2f:39:a4:2c:ca:09:58:a3:
7b:d4:4c:1a:3e:9e:13:7f:83:f7:96:05:80:55:fe:
d1:3c:ee:61:35:a0:25:bf:56:7b:5e:63:ad:4a:e9:
19:fa:08:32:9c:92:cb:df:e2:ea:39:71:28:69:a6:
3e:20:0a:a2:89:3b:43:37:08:3c:3e:f8:da:e1:b3:
3e:a9:1d:92:d5:ba:4d:b0:1e:a1:33:3c:79:94:b2:
e0:29:5a:82:df:3e:6c:bf:e9:3e:cc:ca:60:69:13:
48:63:6d:03:b3:a3:ec:26:e6:cc:88:92:50:62:bd:
fa:f1:a8:17:2b:7c:f5:7b:1e:04:a7:89:37:cc:05:
a0:2e:37:5a:86:e9:6d:ca:c8:f8:e7:68:d7:8c:3c:
c3:df:9e:de:8c:7b:73:58:45:5d:01:15:69:59:9b:
e7:ff:ed:ee:a3:f8:00:85:94:a0:38:34:ef:4e:90:
c7:89:64:e5:5a:25:74:b2:ad:df:dd:34:54:83:35:
ff:20:0f:80:ca:3e:cb:0b:36:5b:ac:9e:4b:44:c9:
36:de:16:2b:d5:b1:f9:38:ef:53:13:10:b3:e6:e0:
6c:2c:14:ca:72:09:b4:57:5b:82:cb:b9:5c:af:f5:
10:e7:d8:db:a1:31:eb:7a:4f:60:1f:8c:83:99:24:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FA:38:18:48:C4:54:2B:C5:5D:AC:6D:0F:27:25:34:A8:BC:27:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-_o4GEjEVCvFXaxtDyclNKi8Jws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.132.0/24
5.175.137.0/24
5.175.250.0/24
5.230.5.0/24
5.230.9.0/24
5.231.23.0/24
5.231.36.0/24
5.231.41.0/24
5.231.44.0/24
5.231.63.0/24
5.231.69.0/24
5.231.76.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ee:44:39:1f:53:2f:2e:8b:71:92:f4:3e:fa:5c:24:f7:fa:
62:4a:e9:1e:55:07:48:91:ea:ff:dc:3f:97:61:2f:d9:72:c6:
91:62:97:4d:2a:e3:7d:57:0b:3a:88:ca:73:14:b7:a6:b4:cc:
31:02:cc:b3:98:85:df:6f:ca:0f:a8:08:bb:c4:0d:c7:52:53:
c2:51:93:79:27:f8:f1:93:4b:84:c7:68:e9:38:30:0a:a7:7c:
98:6d:67:ba:b1:30:39:ad:e7:f9:81:fe:f3:c4:e1:40:11:e2:
d0:2d:ea:de:fa:ff:c6:94:37:15:14:8b:e4:2a:18:b5:8a:ad:
2b:4e:b0:64:35:e9:ca:d8:d7:af:e5:d4:93:67:94:77:30:61:
91:d6:21:24:a7:44:a9:f9:a3:e1:e2:01:7c:97:60:59:64:8f:
ad:c4:2d:16:48:11:b8:95:8a:89:1f:23:e3:2f:37:46:0f:1a:
c4:2b:34:5b:ef:52:b7:dc:02:18:77:1d:3d:6e:68:b1:58:b4:
8f:4b:99:9b:b5:a5:01:10:fd:d6:02:8c:11:31:36:ee:d8:83:
06:c7:ab:ed:3f:9a:3e:9b:a6:b3:3e:b2:e6:ce:76:ae:83:0d:
cc:ec:e4:f3:c4:06:c9:35:03:35:1d:70:24:0e:08:39:97:80:
5b:01:dd:ee
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZcyvB0rZQTQWmju9dgv1rkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjAyMjIyMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmZhMzgxODQ4YzQ1NDJiYzU1ZGFjNmQwZjI3MjUzNGE4YmMyNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fq38BndLzmkLMoJWKN71EwaPp4T
f4P3lgWAVf7RPO5hNaAlv1Z7XmOtSukZ+ggynJLL3+LqOXEoaaY+IAqiiTtDNwg8
Pvja4bM+qR2S1bpNsB6hMzx5lLLgKVqC3z5sv+k+zMpgaRNIY20Ds6PsJubMiJJQ
Yr368agXK3z1ex4Ep4k3zAWgLjdahultysj452jXjDzD357ejHtzWEVdARVpWZvn
/+3uo/gAhZSgODTvTpDHiWTlWiV0sq3f3TRUgzX/IA+Ayj7LCzZbrJ5LRMk23hYr
1bH5OO9TExCz5uBsLBTKcgm0V1uCy7lcr/UQ59jboTHrek9gH4yDmSRCFQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFPv6OBhIxFQrxV2sbQ8nJTSovCcLMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMS1fbzRHRWpFVkN2RlhheHREeWNsTktpOEp3cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw
Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBnBggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEAAWvhAME
AAWviQMEAAWv+gMEAAXmBQMEAAXmCQMEAAXnFwMEAAXnJAMEAAXnKQMEAAXnLAME
AAXnPwMEAAXnRQMEAAXnTAMEALISkjANBgkqhkiG9w0BAQsFAAOCAQEAT+5EOR9T
Ly6LcZL0PvpcJPf6YkrpHlUHSJHq/9w/l2Ev2XLGkWKXTSrjfVcLOojKcxS3prTM
MQLMs5iF32/KD6gIu8QNx1JTwlGTeSf48ZNLhMdo6TgwCqd8mG1nurEwOa3n+YH+
88ThQBHi0C3q3vr/xpQ3FRSL5CoYtYqtK06wZDXpytjXr+XUk2eUdzBhkdYhJKdE
qfmj4eIBfJdgWWSPrcQtFkgRuJWKiR8j4y83Rg8axCs0W+9St9wCGHcdPW5osVi0
j0uZm7WlARD91gKMETE27tiDBser7T+aPpumsz6y5s52roMNzOzk88QGyTUDNR1w
JA4IOZeAWwHd7g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:43 2025 by rpki-client