Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-b7cCABKVGdJn9FmjK3bpetmS1U.roa
File: 1-b7cCABKVGdJn9FmjK3bpetmS1U.roa (raw, json)
Hash identifier: 6ej8lh3rs7PzsAl7IQPswsLubvBkqNorrnDgsjRVHdM=
Subject key identifier: F9:BE:DC:08:00:4A:54:67:49:9F:D1:66:8C:AD:DB:A5:EB:66:4B:55
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A25E20F2FBA67DE0C6E843809DC8034B4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-b7cCABKVGdJn9FmjK3bpetmS1U.roa
Signing time: Mon 27 Oct 2025 13:36:03 +0000
ROA not before: Mon 27 Oct 2025 13:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.175.213.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.117.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.252.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:e2:0f:2f:ba:67:de:0c:6e:84:38:09:dc:80:34:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 27 13:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9bedc08004a5467499fd1668caddba5eb664b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:cf:67:5b:4b:6c:a0:74:ab:76:42:6f:a0:
42:5f:e4:c0:a2:98:04:af:10:30:e3:85:77:21:86:
01:8f:16:bb:e0:86:50:b7:f2:a2:aa:9c:b4:99:2a:
e7:b5:aa:1c:dd:4e:ef:95:79:c2:50:b1:dc:07:6d:
e0:f1:74:a9:e6:b2:ae:18:30:23:0f:6a:ef:ea:53:
79:bc:aa:c7:e6:4b:7d:04:de:f3:15:36:9e:7a:08:
50:14:6d:fb:71:6b:83:d9:1c:38:7d:92:3f:38:5e:
b5:9f:ca:bb:2b:72:04:8d:3e:ea:6e:da:b5:12:8e:
36:1f:00:7c:bc:29:71:44:87:86:c9:fc:76:0a:8c:
17:b6:f9:4b:d9:1d:3f:20:2d:b7:95:8b:f3:97:29:
7c:0f:cf:8c:73:b2:0e:9e:05:34:02:1e:9f:0e:e6:
07:54:3c:bd:46:77:97:dd:d4:09:1e:60:29:be:84:
ff:16:d6:22:fa:4e:f9:57:b1:9c:a5:7c:6a:e7:cf:
ef:f5:38:c5:62:4c:a0:48:76:ec:a1:ec:22:4d:72:
f1:77:84:40:85:ce:89:36:30:88:00:c5:43:32:8b:
ba:80:27:80:74:b1:39:73:73:21:79:5f:dd:0d:36:
de:05:3b:42:66:99:cf:18:6e:7c:50:ec:4c:52:2a:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:DC:08:00:4A:54:67:49:9F:D1:66:8C:AD:DB:A5:EB:66:4B:55
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-b7cCABKVGdJn9FmjK3bpetmS1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.213.0/24
5.175.220.0/23
5.175.223.0-5.175.224.255
5.231.71.0/24
5.231.74.0/24
5.231.79.0/24
5.231.92.0/24
5.231.106.0-5.231.110.255
5.231.117.0/24
5.231.119.0-5.231.123.255
5.231.203.0/24
5.231.207.0/24
5.231.241.0/24
5.231.252.0/23
94.249.190.0/24
94.249.195.0/24
94.249.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:dd:11:f6:57:1f:8d:9b:28:1c:65:68:4e:a3:fe:b6:8b:e0:
fb:1e:0f:13:0c:75:dd:ea:8c:4c:39:f2:08:64:56:4b:34:73:
c2:6c:9a:6d:60:8c:4e:b4:11:19:f5:02:a5:09:8a:79:95:4d:
dd:5e:7f:97:c6:1e:f2:de:2a:4b:20:db:f6:4e:a6:02:9e:fd:
62:d0:a0:94:fb:4d:6a:d7:98:7b:b3:5c:9c:eb:81:7a:67:f2:
e3:0a:7b:c3:ec:9c:3c:dc:a2:3b:41:09:4b:cc:95:6f:19:3d:
61:35:55:36:c7:2d:98:15:b5:d3:82:92:1c:74:3b:2c:3b:f5:
3b:c0:7d:33:0e:4e:07:f8:a5:ee:62:0b:a0:0e:21:2b:2a:0d:
d0:70:2a:9f:4d:1d:bc:f1:31:76:89:3b:c5:19:9b:1a:f3:04:
c8:13:56:7b:6c:54:23:72:ec:45:1a:62:cb:1e:f7:68:64:38:
8f:28:be:86:9e:a9:1c:cb:1d:de:d7:21:35:7c:20:c0:cd:de:
38:d0:d2:8c:98:2a:4c:84:42:87:b5:20:cf:8a:9d:f3:2f:77:
c6:b2:69:ad:58:73:70:d8:16:2b:e2:79:a0:40:46:55:ce:ad:
2f:8f:9a:86:76:64:1e:c5:19:74:ed:8f:f0:fd:03:0d:e7:29:
33:5a:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:56 2025 by rpki-client