Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/C5GjN1ofY6F7Zgq3HymXMFZ18bA.roa
File: C5GjN1ofY6F7Zgq3HymXMFZ18bA.roa (raw, json)
Hash identifier: JkWYZ3NbkPg1+GlwbZJqo0rvmF6tQ1NwbXzHz+bPIDk=
Subject key identifier: 0B:91:A3:37:5A:1F:63:A1:7B:66:0A:B7:1F:29:97:30:56:75:F1:B0
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 01973CD0F95659BD90AD46905D401EB0CB73
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/C5GjN1ofY6F7Zgq3HymXMFZ18bA.roa
Signing time: Wed 04 Jun 2025 21:20:17 +0000
ROA not before: Wed 04 Jun 2025 21:20:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 86.109.2.0/23 maxlen: 23
93.187.218.0/23 maxlen: 23
136.144.62.0/23 maxlen: 23
145.40.74.0/23 maxlen: 23
145.40.101.0/24 maxlen: 24
145.40.108.0/22 maxlen: 22
145.40.120.0/22 maxlen: 22
147.28.138.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.189.0/24 maxlen: 24
147.28.204.0/23 maxlen: 23
147.28.210.0/23 maxlen: 23
147.28.214.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.241.0/24 maxlen: 24
147.75.40.0/23 maxlen: 23
147.75.48.0/24 maxlen: 24
147.75.59.0/24 maxlen: 24
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:d0:f9:56:59:bd:90:ad:46:90:5d:40:1e:b0:cb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jun 4 21:20:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b91a3375a1f63a17b660ab71f2997305675f1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:6a:2a:fa:6c:90:85:ee:c6:05:a6:b9:e2:
fc:6c:54:9b:d3:bd:56:3b:d6:a1:a4:84:c0:6a:dd:
d8:93:fb:d7:b5:60:49:ad:c7:59:4b:e8:0d:86:cd:
fb:f4:f8:45:01:d3:31:56:e9:5f:db:13:67:80:8a:
79:0f:e4:47:81:39:5a:a7:9c:b7:26:64:85:b2:e6:
f5:21:21:4a:00:16:3d:7a:46:33:ad:3e:f7:47:24:
7b:9c:b1:07:b8:1c:2d:0c:b3:fc:97:50:2b:5a:9d:
7e:29:77:8f:a6:4b:7f:bf:a6:26:90:b7:7c:e2:7c:
77:db:93:67:a1:c3:5e:f0:df:24:41:85:66:2d:55:
44:b9:2d:c6:30:10:06:f2:93:82:d4:e4:b7:f4:12:
f6:fc:42:13:88:3d:af:07:d1:49:5c:57:4b:ec:36:
ed:fc:dc:d9:fc:42:fa:f1:56:df:c5:4e:14:cb:96:
3c:a4:89:be:16:33:34:3d:97:fe:67:66:af:2c:58:
f4:e7:45:7f:89:1c:23:03:21:52:63:f2:09:b2:fc:
90:2a:e4:42:9e:3f:fc:95:89:17:20:1a:48:b5:ea:
fb:4a:79:a9:c3:70:e8:72:95:89:69:0d:42:93:90:
39:35:11:85:0e:df:ef:be:78:1d:9a:7c:f4:cf:fc:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:A3:37:5A:1F:63:A1:7B:66:0A:B7:1F:29:97:30:56:75:F1:B0
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/C5GjN1ofY6F7Zgq3HymXMFZ18bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.2.0/23
93.187.218.0/23
136.144.62.0/23
145.40.74.0/23
145.40.101.0/24
145.40.108.0/22
145.40.120.0/22
147.28.138.0/23
147.28.164.0/22
147.28.176.0/23
147.28.189.0/24
147.28.204.0/23
147.28.210.0/23
147.28.214.0/23
147.28.222.0/23
147.28.241.0/24
147.75.40.0/23
147.75.48.0/24
147.75.59.0/24
147.75.206.0/23
Signature Algorithm: sha256WithRSAEncryption
21:c8:73:48:cd:7d:22:d1:b8:5f:6e:9e:f9:af:01:5e:15:1e:
58:2d:e6:23:61:1a:ca:ff:32:75:8d:27:9c:45:b3:6a:2b:13:
4a:2e:46:93:30:8b:4e:d1:36:cd:58:bd:4d:15:c9:d9:e8:6c:
65:ef:d6:53:e9:09:f8:90:73:62:51:3f:b3:0d:6f:7d:fe:e9:
47:19:a5:78:1c:8f:7c:b4:8e:e6:86:75:67:3e:51:21:2d:0d:
d4:71:55:b2:62:2c:ab:a3:17:35:30:3a:78:67:6a:54:9a:74:
40:d7:75:30:14:c3:3e:a5:20:d4:52:b9:02:08:ef:56:8e:2a:
26:a8:99:3b:63:3b:dd:da:ef:6c:c5:fb:7d:77:d8:6a:a3:ac:
c7:0f:da:e2:b4:1f:e6:1a:fe:66:fe:e2:c8:e5:e4:b7:e7:17:
49:e7:3b:d0:fc:55:cb:ab:9f:e5:ce:72:81:11:f4:2d:0e:ad:
51:3d:e6:5e:4f:7c:07:ee:d2:e2:8e:ed:10:55:b2:89:1f:f5:
81:ec:e7:a3:e5:a5:85:f4:0e:5d:c7:02:61:6a:fc:02:3b:ca:
1c:58:c4:db:fd:be:ec:a8:eb:d6:12:c4:67:0a:fc:c2:a9:3d:
08:b7:36:e5:c1:cc:34:0e:90:67:3f:f9:aa:df:c5:ec:61:a4:
f2:5c:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:46:55 2025 by rpki-client