Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/P-yGIcgr3IfthLgzfM98T6lGbKU.roa
File: P-yGIcgr3IfthLgzfM98T6lGbKU.roa (raw, json)
Hash identifier: 7HVjYAoSUQuVeE2cpmTGfmBl3cuM7py9I5dDG8/Cz1U=
Subject key identifier: 3F:EC:86:21:C8:2B:DC:87:ED:84:B8:33:7C:CF:7C:4F:A9:46:6C:A5
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 0196E795192E285F90C7618C9861194415C6
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/P-yGIcgr3IfthLgzfM98T6lGbKU.roa
Signing time: Mon 19 May 2025 08:07:10 +0000
ROA not before: Mon 19 May 2025 08:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57653
IP address blocks: 45.149.241.0/24 maxlen: 24
94.156.96.0/24 maxlen: 24
94.156.186.0/24 maxlen: 24
109.69.232.0/21 maxlen: 21
109.69.232.0/24 maxlen: 24
109.69.233.0/24 maxlen: 24
109.69.234.0/24 maxlen: 24
109.69.235.0/24 maxlen: 24
109.69.236.0/24 maxlen: 24
109.69.237.0/24 maxlen: 24
109.69.238.0/24 maxlen: 24
109.69.239.0/24 maxlen: 24
185.191.84.0/22 maxlen: 22
185.191.84.0/24 maxlen: 24
185.191.85.0/24 maxlen: 24
185.191.86.0/24 maxlen: 24
185.191.87.0/24 maxlen: 24
2a00:1ba8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:95:19:2e:28:5f:90:c7:61:8c:98:61:19:44:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: May 19 08:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fec8621c82bdc87ed84b8337ccf7c4fa9466ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:ec:08:4c:8f:9f:ab:4a:51:b8:84:ef:84:
4b:d6:f0:79:8a:3b:32:8c:c3:b6:18:1e:6e:0c:7a:
41:ea:6a:8d:e8:95:f3:9a:d4:f0:89:90:36:1c:2b:
d6:48:04:1d:16:06:02:55:49:2e:51:da:43:06:aa:
7f:84:d9:3c:09:32:49:8e:e7:6b:b6:06:b3:f7:c2:
c0:93:5d:59:73:b5:84:5e:c7:bb:77:6c:3c:c1:f8:
ab:50:bc:e0:11:23:ab:9e:38:36:dc:c4:b3:19:b4:
40:19:99:9c:11:63:a5:04:d2:bc:55:73:22:ca:c6:
94:86:54:52:da:0b:1a:0b:d1:a1:fa:bf:22:0f:f0:
10:53:53:1a:ca:9b:64:20:9b:22:69:6e:81:66:ad:
c0:21:81:3c:67:04:0b:f8:4e:85:80:e4:47:2b:b7:
8a:69:79:96:f2:d9:28:29:98:9e:e6:fc:32:5b:a2:
98:cd:71:3c:0f:d9:e8:e3:75:9a:fc:e0:e7:e9:6a:
32:2c:3f:78:df:16:06:76:35:d2:4e:65:5e:14:e1:
d3:da:e9:b2:a7:6f:23:e7:16:f6:19:33:56:f2:d5:
cd:c2:1d:17:d6:1a:ef:7a:2d:8b:b4:04:ec:29:e3:
94:1a:cf:59:cd:cf:d8:d6:b6:37:78:f7:ec:bf:04:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:86:21:C8:2B:DC:87:ED:84:B8:33:7C:CF:7C:4F:A9:46:6C:A5
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/P-yGIcgr3IfthLgzfM98T6lGbKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.241.0/24
94.156.96.0/24
94.156.186.0/24
109.69.232.0/21
185.191.84.0/22
IPv6:
2a00:1ba8::/32
Signature Algorithm: sha256WithRSAEncryption
78:80:db:1c:c8:89:8a:55:e4:f5:1a:c8:f9:fb:20:9c:f8:3f:
24:59:3b:e1:5a:18:86:bb:ea:49:10:2e:55:e4:76:17:3a:80:
36:40:79:5a:a3:42:5b:39:b5:da:8b:a2:61:1e:34:28:99:a4:
7c:54:fd:d5:0f:ae:bf:a8:42:4c:a3:58:d6:37:49:0f:57:3f:
cc:b9:da:7b:d4:43:4e:f6:ed:b8:02:28:28:81:ed:dd:db:94:
30:df:d6:3f:48:6d:d8:d9:fe:2f:29:37:c2:14:1a:58:07:87:
46:99:91:e5:0b:bb:40:c9:f1:c7:83:5e:b1:c2:56:e8:fc:b9:
f7:92:be:26:4a:96:5b:e4:4f:6a:a7:35:ff:90:22:28:f1:b6:
02:9a:34:7e:29:17:b6:fe:02:a5:c9:e5:ec:f8:a6:f2:27:a2:
a8:b5:57:07:f1:2c:b7:6e:1f:8b:47:7f:a9:9a:c1:3d:69:90:
06:71:61:a9:7f:92:09:40:55:4f:f4:9d:5a:42:d6:c3:28:5c:
35:53:ae:ee:9c:fb:85:a3:06:18:31:90:51:18:0d:89:22:37:
3e:8f:c1:4d:7b:3f:bb:1a:cf:f9:18:69:87:6a:04:76:62:6d:
3d:19:d0:33:c6:97:cd:4a:ba:04:93:22:e5:e1:c5:8d:6e:f0:
e6:5f:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:10:15 2025 by rpki-client