Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NNy5Xg4HR2mU7Zq_ye9dZriX8uo.roa
File: NNy5Xg4HR2mU7Zq_ye9dZriX8uo.roa (raw, json)
Hash identifier: aQW5ZYOq08s5ReG+bfykABDsYGOY9dbTr0BhhFKXmrY=
Subject key identifier: 34:DC:B9:5E:0E:07:47:69:94:ED:9A:BF:C9:EF:5D:66:B8:97:F2:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F644060D27367291AB3E5700C2DF4969
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NNy5Xg4HR2mU7Zq_ye9dZriX8uo.roa
Signing time: Thu 22 May 2025 04:32:55 +0000
ROA not before: Thu 22 May 2025 04:32:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.175.194.0/24 maxlen: 24
5.175.215.0/24 maxlen: 24
5.175.216.0/24 maxlen: 24
5.175.217.0/24 maxlen: 24
5.175.218.0/24 maxlen: 24
5.175.219.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.175.221.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
5.175.223.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:44:06:0d:27:36:72:91:ab:3e:57:00:c2:df:49:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 22 04:32:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34dcb95e0e07476994ed9abfc9ef5d66b897f2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:2f:de:9a:e7:85:e8:c1:2c:79:fb:88:d6:
43:f2:b9:ac:e7:ea:9a:b4:37:f3:4c:40:39:f2:64:
82:78:03:8e:57:ac:4a:69:ec:de:97:72:7c:cd:49:
dc:f6:41:be:9c:56:a2:fe:a7:ad:7b:af:fc:26:9d:
0e:a8:e8:d7:0e:0b:06:81:5d:35:d6:6e:a7:ae:15:
fd:fa:6c:b3:8a:b6:8a:c3:6e:a2:b9:d0:3a:c4:b9:
4f:70:ac:cd:de:28:6f:f8:82:bb:eb:00:a4:71:5c:
76:45:e5:3e:48:92:ef:ef:5c:23:fc:c9:81:ca:58:
af:5f:27:74:75:6d:20:b9:e2:d0:73:35:6e:b0:92:
7e:9b:c8:68:ae:af:b6:18:23:41:bb:b1:06:2a:17:
3f:2f:44:ca:f5:c1:c7:38:f1:b1:5c:8b:c8:70:1d:
21:cb:63:5f:b7:da:5d:d9:a8:af:20:82:03:60:5d:
a1:4d:f8:82:31:d0:0c:0c:88:53:25:d1:e4:a2:87:
c3:47:b5:dc:4b:ee:c9:a8:a1:57:2c:70:c5:59:cc:
5e:d8:70:c4:50:03:d5:bd:60:7e:58:e3:ab:e8:a4:
bc:de:41:29:db:f0:0c:50:3c:99:8a:c7:88:64:bc:
57:72:2c:d8:59:d0:85:c9:82:92:29:1f:6f:a2:1a:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:B9:5E:0E:07:47:69:94:ED:9A:BF:C9:EF:5D:66:B8:97:F2:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NNy5Xg4HR2mU7Zq_ye9dZriX8uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.194.0/24
5.175.215.0-5.175.224.255
5.231.106.0-5.231.110.255
5.231.116.0-5.231.123.255
89.144.53.0-89.144.55.255
94.103.166.0/24
94.249.183.0-94.249.190.255
94.249.197.0-94.249.206.255
94.249.225.0-94.249.230.255
94.249.243.0-94.249.252.255
178.18.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e5:76:be:2b:59:7f:3e:6f:54:43:8b:20:80:d9:34:0f:cc:
e6:98:5f:b3:f2:96:c4:f2:2c:97:d9:ac:e0:0d:9c:60:4d:5b:
17:c0:71:64:ba:35:ae:c9:1d:e7:6b:f6:59:50:56:80:cc:a8:
be:27:46:9f:cc:5d:c1:85:e6:07:06:e0:4e:92:9d:ec:9c:29:
f3:7b:3b:2a:85:a5:c7:cb:88:0b:be:76:ff:d4:16:c2:12:e9:
71:94:b1:cf:da:ed:0f:1c:08:4e:8a:86:fb:c9:63:40:89:22:
66:08:0d:42:d9:2c:a0:dd:7b:65:2b:6b:aa:62:45:54:5c:a2:
c1:6f:fe:13:83:81:8f:ca:81:11:c9:65:db:60:50:bd:8d:f2:
78:38:b6:68:61:a4:38:f5:13:0c:01:35:1f:21:e6:a6:2a:b4:
3b:3e:c5:e1:26:5f:44:2b:e2:18:c0:ad:c5:d8:df:b7:7d:34:
36:05:83:ca:b7:48:d8:92:c3:e0:14:fe:4e:0d:cc:2a:4f:e8:
71:6d:09:0f:a6:d8:c7:2a:3f:52:e9:76:9f:36:ab:0e:ec:65:
28:d9:ff:d5:04:5f:dc:87:a9:dd:aa:b8:e0:31:2c:86:1f:24:
44:af:1c:fa:37:4f:a9:1e:87:0e:d3:a4:61:aa:a7:5f:86:5d:
cd:41:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:52:16 2025 by rpki-client