Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Z7b7uKwR8bPmo8SJY1gcJbAMpq4.roa
File: Z7b7uKwR8bPmo8SJY1gcJbAMpq4.roa (raw, json)
Hash identifier: N4Lh23d8CSQGm1hRdkPP6v0vDNOpG+hjxHjSP0HJB0M=
Subject key identifier: 67:B6:FB:B8:AC:11:F1:B3:E6:A3:C4:89:63:58:1C:25:B0:0C:A6:AE
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0196C92077A2EBDF48A766209F169875B239
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Z7b7uKwR8bPmo8SJY1gcJbAMpq4.roa
Signing time: Tue 13 May 2025 10:11:10 +0000
ROA not before: Tue 13 May 2025 10:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 5.144.179.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
103.136.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:20:77:a2:eb:df:48:a7:66:20:9f:16:98:75:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 13 10:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b6fbb8ac11f1b3e6a3c48963581c25b00ca6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:e3:a1:7c:30:8a:e5:5c:ac:51:ca:d3:e6:
27:e6:c2:16:85:d4:9f:6d:37:73:b0:f0:7e:e1:95:
8b:dc:d5:da:82:c2:6f:87:d7:a9:59:11:29:dd:ec:
98:7e:56:c2:c0:15:50:28:db:a1:a8:b2:5b:99:4a:
af:85:1f:12:90:b5:a7:5b:59:e0:ec:2b:00:be:e6:
50:97:32:ed:90:83:ae:72:82:87:16:47:a3:c7:03:
2b:c1:72:84:53:95:ce:77:9f:eb:de:c8:d0:dc:c0:
24:b0:b4:d2:16:c5:05:7a:7b:58:ea:98:f4:50:0e:
ab:ee:6a:a9:59:de:27:bd:3b:b3:61:32:50:43:77:
46:f0:48:5a:f5:58:d7:10:9f:d4:3c:5d:63:2f:5e:
69:42:fc:77:38:fd:7b:12:14:68:52:c0:ad:69:51:
c9:d7:7f:d7:4c:96:d4:32:07:c8:c5:13:5b:cc:3f:
4c:2d:31:90:9b:92:73:d3:36:45:63:82:d3:a2:bd:
6a:61:25:f9:05:e1:ae:9c:b0:78:ed:23:e4:14:5d:
44:bb:51:ea:bf:22:70:70:bd:6d:52:80:a3:c2:0f:
81:97:13:0e:e6:55:d3:ec:d4:81:2d:41:fa:81:33:
3e:5d:d7:23:c7:c4:ca:e6:8b:6e:24:74:2d:a8:0d:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:FB:B8:AC:11:F1:B3:E6:A3:C4:89:63:58:1C:25:B0:0C:A6:AE
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Z7b7uKwR8bPmo8SJY1gcJbAMpq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.179.0/24
5.178.96.0/24
5.178.109.0/24
45.12.219.0/24
103.136.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:b6:98:1d:60:00:f3:94:cf:59:50:e2:61:d6:bd:b2:35:cd:
df:62:99:81:76:e3:19:e5:7d:fa:52:41:30:4d:26:5c:19:13:
0a:cf:c0:7d:4e:7e:4b:04:a8:d7:99:97:60:30:22:71:69:48:
d8:86:98:23:4c:0e:81:0f:75:e0:f3:33:20:5f:c2:e5:db:84:
fc:b4:5b:b5:e8:a6:10:aa:be:c3:e2:f2:89:9b:f4:26:81:6b:
66:33:f7:b1:40:cc:87:a3:46:46:56:47:d6:10:ce:c0:b3:ba:
cb:09:b3:ef:73:b4:17:70:ca:fa:50:c7:a2:a0:23:70:20:1b:
03:b4:b6:92:e2:20:6c:69:de:ab:b1:e7:9c:df:42:ad:67:87:
d8:83:fe:4d:57:84:61:11:c5:38:21:05:2a:3e:8e:15:51:54:
7e:62:1e:a8:82:ea:91:e4:13:1d:31:e0:fc:95:ee:50:10:45:
bf:76:35:92:b6:78:c8:14:c7:68:96:78:61:76:64:a2:6d:52:
16:2b:f5:55:32:a8:76:9b:9f:d7:b5:8e:70:5c:1c:b0:ed:54:
b2:ea:80:f4:2b:c4:4b:ca:7f:c2:cb:0a:5b:80:ae:4a:dd:f4:
93:f8:57:43:a4:c7:2a:32:44:53:ef:fd:81:5c:e5:b2:cf:8a:
87:c1:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:39 2025 by rpki-client