Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/__CwI74yVuWDoGa4zVfDnF6zeeA.roa
File: __CwI74yVuWDoGa4zVfDnF6zeeA.roa (raw, json)
Hash identifier: AOmlwFg2EBY8Qi15h47tooT4etR47GwJ1OqYMCxcV7Q=
Subject key identifier: FF:F0:B0:23:BE:32:56:E5:83:A0:66:B8:CD:57:C3:9C:5E:B3:79:E0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197DA512DBCF63E856F851942982DBB06DD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/__CwI74yVuWDoGa4zVfDnF6zeeA.roa
Signing time: Sat 05 Jul 2025 11:20:42 +0000
ROA not before: Sat 05 Jul 2025 11:20:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44103
IP address blocks: 5.83.149.0/24 maxlen: 24
77.90.23.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
178.18.152.0/22 maxlen: 32
178.18.152.0/24 maxlen: 32
178.18.153.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
178.18.155.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 04:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:51:2d:bc:f6:3e:85:6f:85:19:42:98:2d:bb:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 5 11:20:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fff0b023be3256e583a066b8cd57c39c5eb379e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:f9:36:b6:c3:c9:70:eb:c7:12:fa:23:e7:
cd:e4:2b:48:c0:87:c6:03:7a:90:ec:22:c7:c0:b8:
3a:3a:a0:ed:bb:21:b5:43:5b:e8:8e:0c:9f:b5:71:
c0:d8:0e:f7:37:5e:3b:30:62:d7:ff:de:cc:63:b5:
69:00:24:26:b2:1c:c7:4e:88:91:fb:3e:8c:e3:32:
19:11:4f:82:8e:09:e4:0f:a4:ad:08:e3:9c:2e:b4:
4f:1b:da:14:bd:b7:4b:c0:f7:80:7a:84:1a:f9:12:
37:c2:1d:32:e7:21:f0:3d:17:95:92:40:51:e4:b0:
2f:98:07:25:68:ae:e5:2c:6a:a0:c7:36:d7:32:c5:
8f:e1:26:7a:26:23:60:f1:b1:30:b0:3f:75:a0:a6:
4f:0d:4a:d0:4f:62:1d:a5:86:66:17:6e:8f:ed:c8:
8c:8b:a0:de:88:ec:76:20:0c:fe:5a:f5:33:dd:56:
b2:10:1c:21:a9:96:2c:49:8d:ed:fc:42:ad:34:70:
d0:d5:1d:f9:0b:f0:8e:6e:6b:c8:ef:cc:31:6f:02:
21:ae:93:51:20:ba:d4:b7:1d:9c:ab:3d:24:b5:83:
93:27:4c:84:10:8b:54:cc:f0:ba:e4:29:02:94:30:
fd:0d:c6:63:1b:77:3a:70:27:0f:06:11:c0:80:86:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:B0:23:BE:32:56:E5:83:A0:66:B8:CD:57:C3:9C:5E:B3:79:E0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/__CwI74yVuWDoGa4zVfDnF6zeeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
77.90.23.0/24
89.144.40.0/24
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
10:5f:8b:d8:73:25:6d:93:5e:29:88:be:66:58:37:1c:cb:92:
1c:a8:43:cc:f5:af:dd:18:86:79:b8:0b:be:cb:3e:ae:a8:72:
c8:f9:c4:75:b4:0b:19:a4:02:b7:1d:33:01:ea:83:ba:45:e3:
ef:b4:96:5e:e1:52:13:98:d9:20:36:b8:53:f7:30:1b:97:54:
83:a2:45:c5:ba:f5:4e:12:cb:b1:3d:e1:cf:00:ef:f9:cf:a2:
62:b7:59:ec:aa:20:d0:cf:9e:24:68:fc:af:04:50:fa:68:2b:
b9:fc:19:04:7d:ee:4f:02:7a:2d:fe:64:b5:b7:de:3b:f4:18:
a5:9c:10:3d:3d:df:82:29:a3:68:dc:c3:2b:54:67:c8:94:31:
77:f8:8b:89:02:af:10:d9:c4:55:cd:d8:e8:30:d4:30:28:e1:
af:d2:e2:b6:40:54:13:c3:cd:a3:c7:ae:b2:da:a4:e2:09:1d:
2d:a9:3a:ca:fb:4b:af:21:db:68:06:6e:a7:3f:fd:69:80:1a:
6c:80:79:c1:65:ce:ec:00:fb:82:b8:43:dc:ef:5d:6f:b4:95:
4e:62:1c:15:5f:5f:23:4c:e7:79:39:36:0b:f9:74:14:de:f2:
21:35:47:79:66:c8:52:79:52:8c:51:3d:89:29:a9:b3:95:49:
28:c9:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:33:06 2025 by rpki-client