Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5PFxkj1RPNp3ui-jMmno32Cb4B8.roa
File: 5PFxkj1RPNp3ui-jMmno32Cb4B8.roa (raw, json)
Hash identifier: xXyatr8MFVIYbreKM3eacWB/8zEx8Tdlg7Hhvpp/paQ=
Subject key identifier: E4:F1:71:92:3D:51:3C:DA:77:BA:2F:A3:32:69:E8:DF:60:9B:E0:1F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019720E6EF5266EF96559A6CA113886C478C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5PFxkj1RPNp3ui-jMmno32Cb4B8.roa
Signing time: Fri 30 May 2025 11:14:54 +0000
ROA not before: Fri 30 May 2025 11:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 64.137.36.0/24 maxlen: 24
64.137.37.0/24 maxlen: 24
64.137.121.0/24 maxlen: 24
104.222.162.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.243.203.0/24 maxlen: 24
204.52.96.0/22 maxlen: 22
204.52.100.0/24 maxlen: 24
204.52.101.0/24 maxlen: 24
204.52.102.0/24 maxlen: 24
204.52.103.0/24 maxlen: 24
204.52.105.0/24 maxlen: 24
204.52.106.0/24 maxlen: 24
204.52.108.0/22 maxlen: 22
216.173.104.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:e6:ef:52:66:ef:96:55:9a:6c:a1:13:88:6c:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 30 11:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f171923d513cda77ba2fa33269e8df609be01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:1e:55:4c:c9:8a:04:18:91:fc:63:fe:8c:
19:05:f6:01:dd:a2:02:14:bc:78:d0:4a:3b:ec:2e:
88:58:ce:36:02:28:c3:3b:e6:c6:3c:dd:f0:75:60:
90:b0:f9:b0:8c:9e:c5:34:04:96:dd:e8:d0:03:e2:
3b:c4:be:a6:b3:a2:25:fe:ab:b3:ab:8c:79:ec:33:
03:86:77:62:9b:0a:25:47:da:34:67:89:1b:fb:5d:
eb:7f:db:b0:39:49:69:35:93:bb:45:2a:34:b8:0f:
e8:56:d2:ff:85:68:10:76:2f:58:2e:9a:dd:e3:89:
ca:8c:8d:ef:37:5d:ec:8d:0f:16:ec:04:6b:e7:cc:
8d:23:d9:8d:64:ae:25:15:3b:3d:31:f6:eb:6e:82:
22:e7:5e:97:4e:ba:ee:ea:21:99:35:06:67:b2:da:
44:37:ec:3e:93:67:55:50:66:4f:28:28:e8:84:ca:
91:02:51:08:e7:46:9a:9a:7c:1f:fe:2e:22:e5:63:
ed:ee:9b:f3:5d:61:a5:fe:be:93:3a:7d:7d:f7:2f:
85:d1:05:80:6e:de:d5:67:5b:28:81:78:36:27:23:
b6:8c:4e:79:f3:86:f2:8e:4a:5a:47:1f:64:36:f2:
34:f3:bf:53:c3:f4:50:e2:07:7d:61:f7:6a:c8:4c:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:71:92:3D:51:3C:DA:77:BA:2F:A3:32:69:E8:DF:60:9B:E0:1F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5PFxkj1RPNp3ui-jMmno32Cb4B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.36.0/23
64.137.121.0/24
104.222.162.0/24
104.238.7.0/24
104.239.28.0/24
104.239.44.0/24
104.239.73.0/24
104.239.88.0/24
104.243.203.0/24
204.52.96.0/21
204.52.105.0-204.52.106.255
204.52.108.0/22
216.173.104.0/23
Signature Algorithm: sha256WithRSAEncryption
58:7b:60:d2:32:40:58:c9:2e:0a:83:d3:71:6e:fd:d7:ee:d0:
ef:95:95:a3:a4:5d:56:72:ea:cc:27:8e:9b:ab:10:bc:72:fa:
ab:c9:8a:b0:4e:d6:76:d2:4b:bd:76:fd:19:ab:80:a6:5f:21:
8f:ef:8c:62:f0:43:eb:66:81:35:52:8d:7a:12:18:9d:30:8d:
6c:70:8c:0b:61:e2:58:56:19:f1:8f:87:a3:6b:26:33:a6:c6:
0d:a6:b7:bf:84:a2:02:02:34:ce:a1:a0:70:9f:a9:06:d3:f8:
7e:57:db:bc:6a:2c:7f:83:60:6a:03:d2:ed:9f:8f:e0:28:0d:
fa:52:59:ff:bb:0d:b4:31:07:7a:29:94:3d:78:9e:01:b7:f5:
2d:f6:0b:c3:0b:f1:e7:fc:eb:69:9c:c7:53:9a:e2:03:42:02:
c0:58:ca:3f:4e:d2:7f:22:cd:52:b3:3e:35:4e:3e:80:3d:3c:
ed:27:40:39:73:89:08:ae:5a:08:67:75:80:ee:d3:6f:dc:f2:
6c:f3:4a:4d:ba:6c:ba:a3:6c:ff:a0:05:23:7f:63:24:ea:b2:
79:41:46:22:e2:05:6f:58:97:bb:4f:80:c8:29:77:1d:bc:c3:
50:47:1e:33:f8:f5:96:df:21:b1:6f:5d:fa:61:3f:9a:92:7a:
fb:df:d5:41
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZcg5u9SZu+WVZpsoROIbEeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNTMwMTExNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGYxNzE5MjNkNTEzY2RhNzdiYTJmYTMzMjY5ZThkZjYwOWJlMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cIeVUzJigQYkfxj/owZBfYB3aIC
FLx40Eo77C6IWM42AijDO+bGPN3wdWCQsPmwjJ7FNASW3ejQA+I7xL6ms6Il/quz
q4x57DMDhndimwolR9o0Z4kb+13rf9uwOUlpNZO7RSo0uA/oVtL/hWgQdi9YLprd
44nKjI3vN13sjQ8W7ARr58yNI9mNZK4lFTs9MfbrboIi516XTrru6iGZNQZnstpE
N+w+k2dVUGZPKCjohMqRAlEI50aamnwf/i4i5WPt7pvzXWGl/r6TOn199y+F0QWA
bt7VZ1sogXg2JyO2jE5584byjkpaRx9kNvI0879Tw/RQ4gd9YfdqyEzQ+wIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFOTxcZI9UTzad7ovozJp6N9gm+AfMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvNVBGeGtqMVJQTnAzdWktak1tbm8zMkNiNEI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQBQIkkAwQA
QIl5AwQAaN6iAwQAaO4HAwQAaO8cAwQAaO8sAwQAaO9JAwQAaO9YAwQAaPPLAwQD
zDRgMAwDBADMNGkDBADMNGoDBALMNGwDBAHYrWgwDQYJKoZIhvcNAQELBQADggEB
AFh7YNIyQFjJLgqD03Fu/dfu0O+VlaOkXVZy6swnjpurELxy+qvJirBO1nbSS712
/RmrgKZfIY/vjGLwQ+tmgTVSjXoSGJ0wjWxwjAth4lhWGfGPh6NrJjOmxg2mt7+E
ogICNM6hoHCfqQbT+H5X27xqLH+DYGoD0u2fj+AoDfpSWf+7DbQxB3oplD14ngG3
9S32C8ML8ef862mcx1Oa4gNCAsBYyj9O0n8izVKzPjVOPoA9PO0nQDlziQiuWghn
dYDu02/c8mzzSk26bLqjbP+gBSN/YyTqsnlBRiLiBW9Yl7tPgMgpdx28w1BHHjP4
9ZbfIbFvXfphP5qSevvf1UE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:41:43 2025 by rpki-client