Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mXWok6BvZJibx4qSyuEvLpyIoSU.roa
File: mXWok6BvZJibx4qSyuEvLpyIoSU.roa (raw, json)
Hash identifier: 2W8BL+aiZM4viBcgb68rHnbIrwUwoKhrmdZP1QygTnY=
Subject key identifier: 99:75:A8:93:A0:6F:64:98:9B:C7:8A:92:CA:E1:2F:2E:9C:88:A1:25
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0196EE49B6BC84AC124013187162C5EF7DC9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mXWok6BvZJibx4qSyuEvLpyIoSU.roa
Signing time: Tue 20 May 2025 15:22:10 +0000
ROA not before: Tue 20 May 2025 15:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/21 maxlen: 21
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.73.0/24 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.40.105.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
195.138.124.0/24 maxlen: 24
195.216.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:49:b6:bc:84:ac:12:40:13:18:71:62:c5:ef:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 20 15:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9975a893a06f64989bc78a92cae12f2e9c88a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:b9:d6:10:89:89:53:29:85:47:65:e3:1a:
7f:33:37:6b:ee:95:a7:7f:b5:01:2a:d1:cb:d8:27:
ad:be:e8:65:81:1f:cc:0c:67:04:34:61:71:fb:e7:
5c:b8:20:a4:b4:f6:2c:50:fa:fb:84:a5:0e:9f:80:
ad:f7:5b:e1:fc:9a:7a:7a:00:c4:0c:bf:bd:70:99:
bd:22:4c:29:ed:72:00:94:91:01:a6:97:30:0c:80:
a1:c5:47:b2:79:c2:2a:cb:7b:dc:07:1e:12:36:0b:
25:88:bb:fe:fd:24:3b:85:bc:24:cb:df:5a:92:de:
62:5d:76:87:d3:82:74:a4:34:b3:3f:e5:ae:72:36:
5f:2c:38:7b:a5:fe:fd:b1:d9:71:95:3d:57:0c:29:
76:c6:47:f1:b1:16:44:ae:87:c4:c4:da:e8:a2:40:
69:fe:bf:57:e6:db:14:46:a7:66:7b:e0:5f:0b:a8:
db:d3:84:0f:b8:00:2c:b9:e9:ef:5c:d4:26:71:df:
26:89:3d:ff:78:70:91:2a:83:f1:f6:89:a3:b4:fa:
bd:ca:f4:f2:8e:c0:f8:89:4d:fd:94:d5:91:ea:bb:
7f:fe:64:aa:9a:66:56:f5:88:a1:0a:97:02:7f:f8:
47:4e:fb:61:9a:5d:69:a3:f0:9e:e4:4c:25:69:ad:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:A8:93:A0:6F:64:98:9B:C7:8A:92:CA:E1:2F:2E:9C:88:A1:25
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mXWok6BvZJibx4qSyuEvLpyIoSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/21
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
176.126.223.0/24
178.175.176.0/22
185.40.105.0/24
185.180.145.0/24
185.212.11.0/24
194.50.206.0/23
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.116.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:83:b4:53:2d:63:2e:fb:9a:75:82:11:b7:0d:4d:6b:e1:e7:
1d:a6:5f:d8:b6:4a:d4:e1:d6:ef:39:b4:d4:a8:08:28:31:69:
aa:2e:ad:74:09:54:a0:7c:2f:1a:50:a6:97:0e:2e:26:2e:c9:
61:63:6c:c2:8f:7c:88:dc:4a:53:40:a6:3a:d7:b0:96:fb:10:
e4:f9:b1:13:4b:4b:f4:17:b2:18:b2:fc:c9:1e:3e:84:b0:b1:
0d:32:39:a2:8b:7b:a9:c9:a3:81:bb:3f:e6:1f:d8:f9:74:41:
2e:ba:00:2b:1f:58:32:3f:5b:45:9c:a1:d6:d8:3c:9e:92:14:
a3:64:ff:14:d4:3b:d5:db:ad:02:4c:f4:f4:b8:59:e1:38:95:
a4:66:86:f6:40:54:9c:1b:65:66:50:68:78:11:73:b5:e1:b1:
e5:7f:b7:d1:69:de:bc:6c:90:66:d6:87:0c:54:2b:75:25:c7:
bf:8a:3b:69:58:6f:a6:8b:5e:c1:33:ba:fb:a6:83:c8:89:47:
27:ef:04:c9:d8:c7:5b:81:55:d2:53:84:ef:bc:6a:48:a4:87:
ca:46:49:08:cc:ef:35:fd:69:c5:6d:af:ba:d4:6f:38:af:8c:
27:c7:f2:1b:89:6d:92:31:68:55:23:4e:be:2f:cf:dc:ae:c1:
ac:ee:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:46:25 2025 by rpki-client