Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Il7zmHjI6jj-0rEtM_yBLvYuye4.roa
File: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (raw, json)
Hash identifier: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=
Subject key identifier: 22:5E:F3:98:78:C8:EA:38:FE:D2:B1:2D:33:FC:81:2E:F6:2E:C9:EE
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01990F448ACF583EABCE5239C29D4E0442E3
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Il7zmHjI6jj-0rEtM_yBLvYuye4.roa
Signing time: Wed 03 Sep 2025 11:09:34 +0000
ROA not before: Wed 03 Sep 2025 11:09:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60731
IP address blocks: 5.149.158.0/24 maxlen: 24
31.207.73.0/24 maxlen: 24
193.32.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:44:8a:cf:58:3e:ab:ce:52:39:c2:9d:4e:04:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Sep 3 11:09:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=225ef39878c8ea38fed2b12d33fc812ef62ec9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:42:ff:62:aa:0f:e5:cf:96:25:af:0f:c3:
bf:83:a5:5a:d1:0b:41:0c:02:96:75:35:64:68:16:
8f:2e:95:99:f9:55:47:67:3e:73:02:72:a0:b9:da:
99:58:34:51:93:6a:ca:b6:2b:92:8a:dd:c2:2e:d1:
ea:f5:18:da:58:05:5a:4a:d3:6a:ee:7e:b3:dd:68:
64:c9:58:70:17:54:cf:df:c7:0c:be:9d:65:be:87:
5e:9c:2b:14:be:68:9c:97:34:81:ac:0c:23:a1:e3:
1d:7e:a3:44:e7:47:02:80:21:3a:0f:87:5e:6e:88:
14:64:29:6b:78:e5:84:dd:26:e6:0c:9a:d0:49:45:
a5:dc:ef:d7:8a:eb:16:15:72:54:b5:98:2f:ca:97:
82:5f:c0:2d:e3:7a:59:8f:a7:e4:ad:2e:a3:28:91:
c0:44:86:15:0b:69:cc:8b:23:76:cd:fc:58:06:48:
4b:4a:5a:2d:1f:d2:69:b0:fc:8c:0a:e5:da:b2:1b:
5f:76:6c:45:40:20:2d:ae:6e:ce:39:c4:75:9b:16:
2e:86:e1:ce:6c:ac:f6:73:a3:a8:32:3d:1b:95:36:
25:12:ff:a7:bf:13:8c:18:37:16:29:43:30:dd:d3:
3c:08:03:78:9e:bc:fd:0e:62:2e:bd:b9:60:47:65:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5E:F3:98:78:C8:EA:38:FE:D2:B1:2D:33:FC:81:2E:F6:2E:C9:EE
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/Il7zmHjI6jj-0rEtM_yBLvYuye4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.158.0/24
31.207.73.0/24
193.32.202.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ca:ef:d4:81:d9:80:15:eb:85:b6:7a:4b:7f:91:6f:65:93:
f8:2c:1c:0b:0c:7a:e8:eb:52:4f:51:4d:cb:6f:85:79:f3:88:
c6:18:80:38:16:1e:b8:2a:81:65:85:0e:d5:4f:44:c4:87:8f:
c5:03:85:c9:b8:b9:f8:f8:b3:9c:12:2f:07:27:f5:80:53:f0:
c7:ee:15:bd:11:ae:6c:8b:9d:8a:75:00:c9:63:34:9a:e3:f5:
02:b2:f2:8f:81:d5:38:38:0a:3c:53:e1:0e:f4:2c:06:f1:7d:
47:b0:b2:ab:aa:b3:f4:f2:8e:46:1d:12:55:0b:6e:68:da:14:
93:88:95:b5:a2:73:41:8f:c9:37:4f:b8:0d:e9:10:bc:70:d6:
5c:1e:3f:bb:45:4a:c8:97:57:53:50:e1:1d:b6:db:87:88:79:
82:84:0d:9d:46:1d:e0:75:5e:89:97:ce:8f:42:15:94:28:79:
a0:7f:c1:48:76:89:9d:64:3c:db:e9:f8:12:5b:4f:91:ec:52:
4b:a7:c9:09:81:c7:a5:25:14:f8:22:97:56:dd:03:a8:63:74:
64:d0:82:49:89:06:ea:3c:80:80:55:4c:89:f6:30:43:98:d3:
d3:cc:54:b3:9f:7b:07:3a:86:7e:35:c2:9e:a4:c4:f5:21:62:
3f:67:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:10:57 2025 by rpki-client