Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/H5vkTQZNi2Bd0ExYzDgB6SvQgvw.roa
File: H5vkTQZNi2Bd0ExYzDgB6SvQgvw.roa (raw, json)
Hash identifier: IxFIlg2FYeuXJjAlimpeA14i06d0dEIvBqIsRuzdBeM=
Subject key identifier: 1F:9B:E4:4D:06:4D:8B:60:5D:D0:4C:58:CC:38:01:E9:2B:D0:82:FC
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01981C2F1B2E0A517A52BC8DD5CC4DCA0B8F
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/H5vkTQZNi2Bd0ExYzDgB6SvQgvw.roa
Signing time: Fri 18 Jul 2025 06:18:25 +0000
ROA not before: Fri 18 Jul 2025 06:18:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39150
IP address blocks: 91.196.136.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
93.179.120.0/24 maxlen: 24
95.85.83.128/25 maxlen: 25
95.181.213.0/24 maxlen: 24
109.196.133.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
2a04:8680::/32 maxlen: 32
2a04:8681::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:2f:1b:2e:0a:51:7a:52:bc:8d:d5:cc:4d:ca:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jul 18 06:18:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9be44d064d8b605dd04c58cc3801e92bd082fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:58:8f:91:34:21:a2:68:07:97:67:d6:2f:
a8:de:ba:ac:6d:37:72:93:fb:5b:02:14:e9:a3:12:
92:c1:b2:f5:2b:1c:93:ea:87:0b:ed:14:47:38:93:
51:a4:15:71:d6:b3:0f:91:3d:f7:26:77:e2:f1:90:
cd:87:66:44:eb:f2:22:34:42:e0:f9:8d:6e:d9:ab:
37:84:34:64:fa:45:77:17:7d:c3:78:92:37:a9:fe:
1f:ef:30:55:65:22:a2:4d:e7:62:19:aa:8e:78:ac:
55:f6:2b:00:bc:6f:24:8e:e5:52:ea:52:04:b5:12:
a8:41:e9:39:6f:44:9b:73:54:e5:f6:21:3b:98:70:
78:d7:36:01:53:38:5c:1d:bb:30:e1:78:2d:4f:63:
76:d8:75:b4:24:8a:9f:83:25:e0:f0:60:38:6a:a5:
d3:59:09:a6:27:99:25:74:94:c0:99:4d:05:35:ab:
d2:24:5e:21:d4:1e:ff:ac:8c:1d:cf:90:87:1e:c2:
cd:a3:37:e0:4b:ec:b0:7d:b0:59:3b:91:53:29:57:
f5:2a:98:45:49:99:f8:1c:10:4d:f0:51:be:fd:ed:
95:36:11:34:7d:84:1e:ae:04:41:a9:a0:f5:70:fb:
e9:0b:30:f6:65:9b:b5:39:a0:96:38:f4:23:ea:f4:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9B:E4:4D:06:4D:8B:60:5D:D0:4C:58:CC:38:01:E9:2B:D0:82:FC
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/H5vkTQZNi2Bd0ExYzDgB6SvQgvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0-91.196.138.255
93.179.120.0/24
95.85.83.128/25
95.181.213.0/24
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/31
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:14:04:a7:f0:1d:30:79:c4:b7:b4:fe:e9:44:b2:f8:21:34:
de:88:16:86:9c:54:7f:3d:17:18:c2:eb:0b:8f:e6:c3:f2:78:
54:78:2c:f5:7c:86:84:5b:78:ff:f2:8b:ed:f0:00:32:d5:71:
93:bd:74:0c:68:dc:60:2a:e3:f1:f0:80:0b:7b:71:68:e8:7e:
13:18:5a:84:16:a6:43:41:e3:cd:d1:54:f9:28:fb:d1:0f:14:
5a:d0:53:72:e4:23:12:d0:ba:ae:dc:18:1e:9d:f4:66:40:74:
a0:d9:7a:f9:14:9a:7b:81:08:7a:a0:0c:b8:e6:3f:67:3c:7b:
af:ac:ef:df:9d:9e:ee:88:53:c2:3a:db:c3:30:97:a1:be:92:
07:cb:9a:0d:39:4d:0d:98:86:65:c3:30:16:9f:79:ae:74:cc:
7c:85:34:5e:35:69:6b:25:93:3c:25:02:58:32:92:1a:a6:8d:
43:63:a0:8d:3f:60:67:42:4b:ad:22:cf:b3:1d:7e:e4:fb:0d:
97:fe:85:09:27:b1:a4:11:91:4d:c7:5f:da:b9:e7:2c:6a:5a:
28:88:58:18:a3:61:26:26:ae:26:d8:56:36:4d:aa:d7:4d:51:
28:c3:63:7a:bc:d2:65:30:60:14:48:0a:2e:35:2c:e9:d1:0b:
b8:cd:30:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:59:37 2025 by rpki-client