Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5_Pa1TbdV6miBjA2wjerXAuuB3c.roa
File: 5_Pa1TbdV6miBjA2wjerXAuuB3c.roa (raw, json)
Hash identifier: 9kCxxYnPw5b0vthAFo+NVMI9x8bK+zJx46j9dv5l3C8=
Subject key identifier: E7:F3:DA:D5:36:DD:57:A9:A2:06:30:36:C2:37:AB:5C:0B:AE:07:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01971A3B7A3A6794053C8BAF41C823326FB2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5_Pa1TbdV6miBjA2wjerXAuuB3c.roa
Signing time: Thu 29 May 2025 04:09:54 +0000
ROA not before: Thu 29 May 2025 04:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.200.0/24 maxlen: 24
5.175.201.0/24 maxlen: 24
5.175.204.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.209.0/24 maxlen: 24
5.175.210.0/24 maxlen: 24
5.175.211.0/24 maxlen: 24
5.175.212.0/24 maxlen: 24
5.175.213.0/24 maxlen: 24
5.175.214.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:3b:7a:3a:67:94:05:3c:8b:af:41:c8:23:32:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 29 04:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f3dad536dd57a9a2063036c237ab5c0bae0777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:5c:02:ce:61:a3:cf:bf:8a:ae:7e:dd:49:
f8:6d:52:79:44:f1:86:cc:d3:99:03:3b:40:cf:02:
b9:69:53:e9:e4:a1:39:d7:03:d0:7c:47:bd:d4:4f:
ad:1a:e0:07:fe:80:54:28:ba:51:f2:15:e3:81:37:
7a:e0:79:23:ce:34:91:17:25:13:ae:1d:3e:16:7d:
3d:ce:d6:7a:9e:da:a3:01:cd:50:ee:90:8a:3f:16:
08:e2:25:02:84:10:73:17:25:e8:9e:2e:e2:53:c6:
e5:22:37:9d:c8:34:b2:a1:1d:a0:5d:70:68:83:a7:
d4:41:34:5b:52:d1:7a:e7:25:40:07:4e:cb:27:a7:
7e:07:92:2a:78:76:f0:c2:24:3a:36:52:f1:69:4e:
1f:ec:40:ea:5a:dd:6a:a9:a2:6d:93:83:05:c8:7d:
54:85:d8:a9:76:2c:aa:a1:1f:33:05:47:f5:80:4c:
34:2d:bf:fd:25:8c:13:37:e4:37:e2:26:db:f1:dc:
2c:d1:a2:a1:65:36:2d:f8:00:b5:fe:1f:f7:61:f5:
24:62:c6:f3:8e:ac:b1:b3:92:2c:ac:f5:aa:ec:0f:
6c:17:92:0b:5c:fc:96:ae:ae:9c:7f:a6:39:88:9c:
40:c8:1d:4b:39:6b:91:09:f6:53:42:11:b1:39:20:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:DA:D5:36:DD:57:A9:A2:06:30:36:C2:37:AB:5C:0B:AE:07:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5_Pa1TbdV6miBjA2wjerXAuuB3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.200.0/23
5.175.204.0/23
5.175.209.0-5.175.214.255
5.175.238.0/24
5.230.164.0/24
5.231.61.0/24
5.231.71.0-5.231.75.255
5.231.79.0/24
5.231.92.0/24
85.93.5.0/24
85.93.21.0/24
85.93.31.0/24
89.106.70.0/24
89.144.5.0/24
89.144.34.0/24
89.144.39.0/24
94.249.168.0/23
94.249.180.0/23
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:85:6d:e4:3d:4e:b3:86:9c:14:3b:d4:6b:4f:b4:9e:e3:6b:
bb:69:b8:15:af:21:03:ee:05:1c:c1:24:e0:23:00:a3:f3:74:
5e:f1:32:1f:1f:76:51:25:5c:f7:18:a4:ab:20:ab:a4:af:f5:
9f:d8:6d:6d:9a:be:f4:1b:e2:6e:09:5b:c0:24:4f:42:f2:8a:
1f:7d:3d:55:48:a2:75:a8:86:26:41:79:30:e4:63:09:0a:b1:
a7:03:1b:37:11:e2:65:05:8d:3b:e9:7c:d6:74:d8:79:db:0d:
ed:af:6c:2f:3b:50:b0:7e:00:5c:1f:ac:e5:05:5d:e7:c2:dc:
8d:30:20:46:23:56:a6:a8:a5:ed:34:b9:69:f1:b5:47:33:e1:
5e:ff:a4:c7:99:42:5b:23:35:a3:6f:4a:1a:99:c6:20:b4:3e:
05:4d:25:a0:2c:ab:16:fb:04:f1:d4:bf:73:09:ce:3f:b3:9a:
c0:b7:ea:ba:47:cc:42:54:df:86:c8:af:26:30:48:4c:9a:52:
5d:ec:57:fc:43:51:a9:b1:f8:97:33:0a:74:5a:e5:70:73:9a:
e9:64:8f:cb:cb:74:32:c2:90:c4:9e:35:20:bf:02:59:36:e6:
36:0b:1c:cb:8f:f1:88:a1:da:8a:0f:ad:86:2e:96:e1:1c:e7:
0e:9e:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:10:17 2025 by rpki-client