Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5NUXGL-eY7ypHoLLhV5ZwJCjpbs.roa
File: 5NUXGL-eY7ypHoLLhV5ZwJCjpbs.roa (raw, json)
Hash identifier: i3QQlLVq48NfAAUhTKgBwX/TfFUhhGwTPH12Dzv8N9A=
Subject key identifier: E4:D5:17:18:BF:9E:63:BC:A9:1E:82:CB:85:5E:59:C0:90:A3:A5:BB
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0198F58D057705E9739D04308F0D43000DA3
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5NUXGL-eY7ypHoLLhV5ZwJCjpbs.roa
Signing time: Fri 29 Aug 2025 11:18:36 +0000
ROA not before: Fri 29 Aug 2025 11:18:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
89.106.202.0/24 maxlen: 24
185.11.63.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:8d:05:77:05:e9:73:9d:04:30:8f:0d:43:00:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 29 11:18:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4d51718bf9e63bca91e82cb855e59c090a3a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:ae:df:22:e5:35:fb:4c:97:c1:11:98:5f:
6d:c7:cb:11:39:18:56:1d:ad:33:32:cf:c2:04:50:
f9:63:57:cd:79:65:b0:67:88:ca:1d:73:28:fa:81:
60:83:f8:23:ac:6d:a0:f1:5d:54:76:de:83:2b:ee:
3d:1b:24:aa:f5:00:b0:0a:1f:11:db:32:b0:32:0e:
73:3f:df:dd:7a:cc:00:a7:0f:2c:c6:34:ad:6b:2c:
95:47:56:00:30:76:0f:24:ef:99:86:c8:e9:5b:c3:
03:dd:0c:65:bf:f0:50:f5:ba:09:ee:4e:7e:f3:83:
78:96:ee:cc:ed:1e:2b:6e:5e:44:84:d7:0d:e6:ea:
11:05:25:44:a8:dd:f4:21:57:ff:1c:d8:1b:e8:5a:
d9:9b:73:a4:1f:ac:6c:5b:3f:80:55:76:70:1a:00:
7a:6d:38:cf:79:f8:44:a8:5c:ff:87:d6:87:7f:d4:
f8:25:d0:98:4a:aa:4d:bb:7c:d0:50:88:89:1e:68:
93:d7:e6:9f:24:63:39:57:72:11:c6:db:c6:b2:b0:
d1:4f:7c:84:ca:1d:7e:b9:bc:4f:93:c7:ae:79:ab:
49:ee:60:a9:5a:02:50:ce:d7:1f:bc:04:7e:44:98:
9b:66:c9:71:29:98:d9:04:ab:86:97:2f:eb:3b:a8:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:17:18:BF:9E:63:BC:A9:1E:82:CB:85:5E:59:C0:90:A3:A5:BB
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5NUXGL-eY7ypHoLLhV5ZwJCjpbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
62.233.44.0/24
89.106.202.0/24
185.11.63.0/24
193.109.213.0/24
194.26.134.0/24
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:85:59:89:4e:2e:8d:40:72:87:f2:85:c4:72:0a:b3:5a:db:
c1:90:34:f0:4a:f7:72:24:68:14:62:08:bc:ac:79:07:9b:a9:
d2:58:c5:82:58:7c:3b:f4:45:d8:1f:50:d3:10:72:d3:ea:f8:
d1:b4:52:e5:9d:98:9d:61:59:9d:22:b1:c8:74:71:11:76:f9:
df:db:76:fa:b0:48:61:56:75:8e:5b:58:6b:2f:9a:81:ef:f7:
e5:3e:89:30:af:35:30:85:0c:62:ca:88:76:99:41:35:de:f8:
21:19:e7:31:6f:d4:47:9a:90:e7:b8:91:46:1d:52:f1:41:59:
e5:86:84:1c:bb:0d:6a:6f:cf:2d:83:25:b4:f9:52:99:79:0b:
27:23:a1:6f:88:d3:31:80:5f:64:c0:d0:38:2b:22:63:6e:aa:
fc:47:1d:93:61:77:45:f4:85:5e:32:e9:81:1b:b4:85:d8:38:
46:27:32:f1:71:d2:09:79:f7:8a:19:63:eb:f0:48:c1:b3:8d:
64:10:08:89:5a:22:11:f4:c3:56:04:ad:88:43:13:ab:99:b6:
05:24:e0:90:41:68:96:e7:31:57:7c:8e:92:88:cd:4c:a2:00:
bd:88:47:0f:20:e9:48:63:35:39:46:87:05:6f:80:be:1b:d1:
63:2e:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:54:40 2025 by rpki-client