Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gBiBTv9RihctDeYeV9M3E2fgclU.roa
File: gBiBTv9RihctDeYeV9M3E2fgclU.roa (raw, json)
Hash identifier: 2pT/9qDREnaYwUrn0DH1TlqRPDYzVbdsTWU2sKTPkfY=
Subject key identifier: 80:18:81:4E:FF:51:8A:17:2D:0D:E6:1E:57:D3:37:13:67:E0:72:55
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197151609F8EFE24AA18ACB1D7CE18E9E2F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gBiBTv9RihctDeYeV9M3E2fgclU.roa
Signing time: Wed 28 May 2025 04:10:55 +0000
ROA not before: Wed 28 May 2025 04:10:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:16:09:f8:ef:e2:4a:a1:8a:cb:1d:7c:e1:8e:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 28 04:10:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8018814eff518a172d0de61e57d3371367e07255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:d6:d7:ce:d2:5c:02:bc:99:39:78:a1:2f:
c7:95:50:58:22:22:6a:f7:9f:aa:c0:ab:56:3e:66:
45:24:d7:05:77:9e:6d:d7:ff:bb:ea:d8:2b:ae:9e:
27:06:67:fb:10:f9:38:5d:02:e5:51:ca:71:e0:62:
a2:b7:04:4d:2c:f2:ae:95:ed:af:d5:da:00:fb:a6:
3d:14:bb:13:8c:77:d6:32:0d:4b:c4:23:62:26:8f:
c9:9f:52:3b:fb:e6:2c:9b:a1:f2:db:1e:4a:05:b5:
f2:7e:f9:31:07:e1:44:fe:f6:fe:4c:6b:b5:ce:3f:
66:e0:1f:1c:61:3f:8b:b7:91:aa:2c:38:b5:e4:df:
90:fe:5d:4c:10:fd:d8:59:ad:2c:6c:08:36:87:84:
83:93:b7:d4:ce:aa:9f:75:0f:b6:1b:a5:e2:ad:bc:
7d:15:37:5a:5b:80:ed:24:c6:c9:ee:1f:2a:63:ca:
95:bf:72:a7:bd:87:6d:d6:a7:d0:17:f7:37:6e:e8:
80:58:1b:31:46:f2:42:2d:b9:8a:cb:97:8c:47:80:
48:dc:f8:06:6f:57:17:c8:9b:a2:80:ac:f8:de:c4:
32:3e:cd:7c:0a:50:96:bd:46:af:de:53:7e:d4:13:
74:c8:6a:bc:08:62:5d:c3:c7:bb:ea:9f:ed:03:12:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:81:4E:FF:51:8A:17:2D:0D:E6:1E:57:D3:37:13:67:E0:72:55
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gBiBTv9RihctDeYeV9M3E2fgclU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.237.0/24
5.175.239.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
94.103.167.0/24
94.249.150.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b6:ec:43:40:aa:6f:4d:d5:57:a0:29:15:ea:d7:18:d4:74:
c3:15:e8:47:2b:d8:5f:8f:5b:a0:65:93:61:f9:47:2a:e1:e7:
5e:c0:c3:c1:6f:eb:6b:58:5a:fa:1b:2c:7c:88:9f:66:91:fa:
dc:30:bc:5e:83:60:7e:96:64:57:b1:83:d8:7a:db:40:9b:8a:
da:c8:e3:fe:62:16:e2:c8:2c:8f:15:d8:f0:c9:a7:dc:d0:b2:
ed:e6:d5:9b:03:82:67:e3:b6:c4:6c:91:df:d5:06:b7:16:db:
1c:2f:a2:61:1a:b7:31:ea:40:c2:e9:43:53:88:ff:33:9b:2d:
8c:3b:79:be:5a:ad:e7:e3:89:69:ca:20:2e:3f:13:58:5a:e3:
67:58:42:07:ca:f7:b5:af:75:00:31:f7:c4:26:ba:6a:46:b9:
ac:c5:26:90:94:a3:da:6d:05:74:b6:22:0b:69:c8:1e:12:d8:
7e:59:18:a7:ed:34:7e:f8:8e:8e:f6:0a:45:a4:cb:79:26:f1:
45:b8:74:f5:ec:d8:d3:8a:eb:a2:fe:00:78:a2:49:be:15:d9:
15:ab:4c:be:e0:f1:ab:a5:5b:72:7e:95:29:ba:83:6b:27:71:
4c:fe:1f:44:26:8f:b5:0f:6a:a2:e1:0b:f4:b8:c1:99:0b:0f:
85:a6:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:21:24 2025 by rpki-client