Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cce4qjBfaX0Qg1PU44TQMoxLIaI.roa
File: cce4qjBfaX0Qg1PU44TQMoxLIaI.roa (raw, json)
Hash identifier: HXZLZlNTBcVFi9xsEHp83UZZMACAog2/jc1rgWVjquU=
Subject key identifier: 71:C7:B8:AA:30:5F:69:7D:10:83:53:D4:E3:84:D0:32:8C:4B:21:A2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01973272E050643EC6260820780EBAC1926C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cce4qjBfaX0Qg1PU44TQMoxLIaI.roa
Signing time: Mon 02 Jun 2025 21:01:18 +0000
ROA not before: Mon 02 Jun 2025 21:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 5.175.233.0/24 maxlen: 24
77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.18.0/24 maxlen: 24
77.90.51.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
94.249.193.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:72:e0:50:64:3e:c6:26:08:20:78:0e:ba:c1:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 21:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71c7b8aa305f697d108353d4e384d0328c4b21a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:7c:23:07:a7:e4:e3:af:ef:54:67:43:44:
95:e0:c4:a4:0d:7d:d0:88:a7:a6:d6:36:5f:f9:7d:
d2:b9:9c:d8:51:d2:f5:ed:58:6f:68:76:55:11:0a:
a6:23:3a:83:86:d6:ec:29:8b:40:5a:45:4f:db:ec:
54:da:17:dc:8a:f3:09:49:47:11:04:d1:24:bd:fb:
91:1d:aa:5c:d5:ac:e4:92:43:2b:30:55:3b:11:a4:
7b:a6:31:37:84:7f:f4:ec:cd:8f:97:af:16:c7:60:
c1:0a:10:96:6e:79:0e:0f:1f:44:6b:a9:4b:ae:45:
df:8b:44:b1:c2:3d:bd:c1:bc:79:bc:4d:7d:51:9f:
33:11:f7:b5:1e:e5:d1:24:08:47:71:63:37:54:76:
8b:4b:76:bc:65:83:88:be:6d:d0:93:c4:3d:63:95:
98:99:f3:f3:66:92:bb:39:e5:b0:5b:33:13:aa:76:
cb:2c:6a:de:f1:d0:a8:3c:f8:9a:34:bd:7d:86:5a:
84:97:a4:de:da:ea:75:f6:c3:ab:a7:e2:cf:fd:0c:
99:c1:10:89:d6:f6:81:17:4d:39:58:70:e8:98:75:
b1:2f:9a:a1:3e:6c:99:2b:ed:36:df:a5:7e:9f:bb:
75:af:90:52:8d:90:5f:a3:05:b2:09:2b:39:b9:9c:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:B8:AA:30:5F:69:7D:10:83:53:D4:E3:84:D0:32:8C:4B:21:A2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cce4qjBfaX0Qg1PU44TQMoxLIaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.233.0/24
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.18.0/24
77.90.51.0/24
87.239.130.0/24
94.249.193.0/24
94.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4a:b9:77:fc:cc:23:3c:77:77:b4:fc:f4:03:85:a5:c4:8e:
e5:ed:c3:fd:76:63:13:bd:68:ce:01:98:e0:39:a0:46:98:9c:
74:be:9d:92:e6:e8:8d:a0:5f:df:84:9b:db:8e:44:dc:67:8c:
ce:12:97:d6:b6:8d:fd:fc:76:ea:48:21:b2:19:b5:4e:fa:30:
4a:0d:bd:5d:c6:69:78:7b:60:51:f1:e8:1b:6f:27:cb:ae:23:
c3:18:f4:c5:7c:56:22:f7:0c:61:d9:7e:76:da:3d:1e:a7:7d:
53:2a:86:98:30:66:d2:63:59:8a:7f:19:a6:a6:15:7e:24:87:
15:89:85:5d:27:fb:9a:59:ea:9c:5d:44:84:f6:c6:9e:12:bb:
3e:4b:3a:e1:97:90:e8:20:9e:b8:a8:7d:46:25:4d:18:e7:39:
77:68:d8:43:b5:a9:eb:32:00:85:56:e7:30:a2:9c:ce:25:d9:
9d:97:dd:7b:dd:60:cc:b2:02:90:a5:b1:41:fb:31:a0:97:50:
68:d3:8a:eb:16:3a:54:c6:f0:a9:db:70:7d:8d:5d:a8:cc:4a:
41:7c:bf:5a:63:73:4b:ff:a9:bc:6f:05:0a:a3:fa:d9:6b:05:
c5:43:93:48:51:c8:4b:9a:30:4a:c4:bf:79:91:68:38:25:03:
43:d9:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:08:58 2025 by rpki-client