Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/X1ovf8kjwRhsNCVDBk-Tu9UlkLM.roa
File: X1ovf8kjwRhsNCVDBk-Tu9UlkLM.roa (raw, json)
Hash identifier: AK9WA952X9Tu3wSJK2JnzHQ3hSCjBY+Ws18Fwz2Ixns=
Subject key identifier: 5F:5A:2F:7F:C9:23:C1:18:6C:34:25:43:06:4F:93:BB:D5:25:90:B3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01970C6BB66B56EC73BAE6C6D3FD72244BD3
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/X1ovf8kjwRhsNCVDBk-Tu9UlkLM.roa
Signing time: Mon 26 May 2025 11:47:55 +0000
ROA not before: Mon 26 May 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.43.147.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
64.137.111.0/24 maxlen: 24
104.222.160.0/24 maxlen: 24
104.222.163.0/24 maxlen: 24
104.222.164.0/24 maxlen: 24
104.222.165.0/24 maxlen: 24
104.222.166.0/24 maxlen: 24
104.222.191.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:6b:b6:6b:56:ec:73:ba:e6:c6:d3:fd:72:24:4b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 26 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5a2f7fc923c1186c342543064f93bbd52590b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:fc:6c:99:97:7c:f0:9a:f0:8c:db:d8:98:
3a:52:f1:ca:b8:92:9c:af:6c:01:f9:be:2b:74:ac:
03:19:9a:56:b2:93:6c:f1:ae:3f:17:fd:9f:8c:61:
c8:34:87:30:7b:53:e5:3a:b2:9f:3a:1d:c7:e7:3c:
06:a5:96:d7:ae:a1:b9:ec:7a:7d:47:07:67:f5:a3:
96:8a:f9:d6:68:a8:46:4b:87:80:97:2b:4c:09:b2:
7d:a0:70:4d:c3:42:98:0d:aa:83:73:ca:44:73:d5:
a3:53:c7:0c:47:0c:95:cf:c6:c0:40:38:dc:6e:68:
fb:9d:a9:72:87:30:8c:d9:8c:74:07:d6:b0:fa:2e:
51:5e:c8:60:7b:04:aa:c0:29:3a:e1:1c:d7:6a:76:
59:26:e1:38:27:95:ad:c9:3d:70:96:d6:63:cb:ce:
49:93:a3:f1:82:19:18:5e:6f:62:f1:24:63:10:53:
06:53:c0:fd:a7:a5:e2:2f:16:5f:d5:63:32:5d:b6:
36:0a:6a:a5:b4:94:17:7d:f4:a6:36:68:09:45:f4:
3a:86:ba:10:dd:ba:e5:47:4b:bb:6e:9f:a3:25:08:
81:1c:46:f2:62:94:63:7a:2c:d4:d6:7b:7b:29:37:
bb:bd:21:32:17:d8:7e:6b:19:00:df:42:2b:fe:34:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:2F:7F:C9:23:C1:18:6C:34:25:43:06:4F:93:BB:D5:25:90:B3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/X1ovf8kjwRhsNCVDBk-Tu9UlkLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.147.0/24
45.43.152.0/24
64.137.111.0/24
104.222.160.0/24
104.222.163.0-104.222.166.255
104.222.191.0/24
104.233.56.0/24
104.233.58.0/24
104.239.66.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.89.0/24
104.239.100.0/24
104.239.102.0/24
104.239.109.0/24
104.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d0:dc:58:e6:f3:71:6f:c2:ee:ac:a4:e2:c8:ae:34:cc:4a:
7a:d7:15:97:5c:48:a4:35:84:5f:e0:e7:e0:fd:76:61:97:40:
2e:9d:67:5e:d6:42:1b:7a:fc:b5:8f:78:94:e2:02:b6:69:fc:
12:a4:dd:25:60:94:ab:0f:19:42:56:e8:33:3e:13:79:be:04:
11:6d:91:b5:7e:07:aa:4a:60:23:ac:0b:96:8e:e2:87:07:d8:
4a:49:9e:98:54:dc:c6:f2:57:1e:8d:af:ce:0b:f0:11:d4:6a:
df:3d:9f:ae:54:31:13:bb:81:5d:f0:9b:1d:01:fd:d4:03:fc:
ee:36:f4:6c:2a:e0:c3:18:2a:48:1d:51:d0:bc:7f:61:e7:8c:
19:48:76:4c:e0:77:4c:e7:95:ed:21:97:47:b4:33:18:8c:35:
19:6c:8b:ca:71:af:61:12:b0:29:c4:69:21:db:ab:0f:6c:b4:
30:fb:2f:90:6a:d6:94:f2:41:04:e7:d0:f9:05:f7:ef:81:e8:
a0:04:3a:20:39:cf:ad:51:7f:e3:c4:c0:96:b2:51:68:3c:0a:
a3:a6:97:9f:28:24:eb:07:3e:74:f9:9a:b4:98:9c:7a:54:f4:
51:d1:1d:a8:2c:da:cc:b2:9c:72:77:df:a5:32:05:88:43:7b:
d7:32:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:42:51 2025 by rpki-client