Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa
File: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (raw, json)
Hash identifier: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=
Subject key identifier: 9B:91:8E:C0:FD:91:02:3A:FD:77:BB:53:0B:B9:7C:37:A3:D5:DC:9B
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 0195852939EF1165500B1E2B1A50D0906D5C
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa
Signing time: Tue 11 Mar 2025 12:23:46 +0000
ROA not before: Tue 11 Mar 2025 12:23:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60820
IP address blocks: 185.26.214.0/24 maxlen: 24
2a14:4000::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:29:39:ef:11:65:50:0b:1e:2b:1a:50:d0:90:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Mar 11 12:23:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b918ec0fd91023afd77bb530bb97c37a3d5dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:f2:1a:5b:58:ab:6d:ce:6c:a9:6e:a3:fb:
65:ce:37:d9:29:31:71:b0:e0:04:32:62:95:48:83:
ee:f1:ac:52:80:8d:75:68:c7:81:ca:fa:b5:7b:0e:
3c:d9:4f:25:9b:83:1f:8c:16:bb:a0:43:ac:0d:3a:
6c:0f:14:fe:78:72:81:d3:f6:4e:33:40:c4:d8:5c:
0a:d7:e2:63:78:43:01:0d:47:56:e7:76:5f:02:18:
93:27:23:36:40:85:32:6a:e2:6e:b3:a7:a6:dd:f2:
f8:50:c2:97:ad:94:6b:c5:48:96:a1:b9:2f:3f:e0:
aa:8d:d1:c4:21:ed:11:f1:f9:dd:1a:b2:34:ed:c2:
16:a8:16:fe:73:2c:4d:b2:2d:c2:bf:19:c3:16:d9:
07:85:59:3e:b8:05:0c:76:1b:92:7b:e3:b9:25:85:
d2:df:e6:52:67:1b:b4:2d:c4:52:4d:15:cd:1c:d9:
65:40:b2:c3:70:60:5c:75:9d:bd:8f:c9:d7:75:2e:
e4:8e:f3:6d:b1:b7:28:46:ca:95:04:15:d8:97:e1:
5e:dd:66:37:c2:cc:af:32:8e:9b:9b:8a:51:67:1b:
96:24:78:8d:a8:0d:58:14:a4:5e:28:5f:b8:26:90:
8e:a8:cb:01:21:77:ed:87:07:6a:9d:73:dc:96:ff:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:8E:C0:FD:91:02:3A:FD:77:BB:53:0B:B9:7C:37:A3:D5:DC:9B
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.214.0/24
IPv6:
2a14:4000::/29
Signature Algorithm: sha256WithRSAEncryption
54:6c:e1:b9:1b:a7:63:de:7d:8b:c7:30:ef:4a:fc:46:88:18:
ce:00:d9:f3:d9:2d:54:5c:0c:61:ef:3d:70:31:12:15:a9:c6:
b0:8f:c9:45:b3:8f:0f:b5:c1:13:f7:50:23:7c:d6:7a:f7:0b:
fe:c8:8b:3f:2e:46:55:50:96:95:08:63:6d:0a:48:76:ca:87:
8e:48:27:00:b7:07:e9:33:0b:34:60:67:a0:db:02:62:71:69:
56:89:a3:ee:f3:8d:a7:fb:36:84:af:37:6f:8a:5d:fe:06:12:
5b:91:5d:79:c2:a3:48:c4:9c:92:ae:7e:77:99:34:2b:6c:b9:
5c:96:70:77:c5:b5:97:52:b3:2f:98:52:9c:b9:f8:89:4d:97:
2d:4e:d8:b3:af:d2:49:08:8e:d8:71:49:05:0c:70:4a:61:0b:
1d:f2:c5:35:08:2b:9c:e5:12:1e:d7:c0:f2:5a:a2:02:ac:bd:
c2:0f:d5:bc:1f:09:e0:b9:8f:ed:af:e8:97:39:e5:c2:c3:09:
ee:8a:37:3f:5c:d7:98:0c:9d:21:84:7b:7e:20:93:85:a5:11:
70:6e:14:bf:ac:2b:ec:78:8a:ea:c5:e5:21:e4:0c:3b:59:43:
3d:0b:8c:82:aa:ea:ec:11:be:d4:f0:23:78:94:78:0d:33:72:
39:23:e6:f9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZWFKTnvEWVQCx4rGlDQkG1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWFkODg5OWQ1YmM4NTQ5ZWVkZDNlNTlmMmQwZDYyMTM1
Y2NmMTQwHhcNMjUwMzExMTIyMzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjkxOGVjMGZkOTEwMjNhZmQ3N2JiNTMwYmI5N2MzN2EzZDVkYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2fyGltYq23ObKluo/tlzjfZKTFx
sOAEMmKVSIPu8axSgI11aMeByvq1ew482U8lm4MfjBa7oEOsDTpsDxT+eHKB0/ZO
M0DE2FwK1+JjeEMBDUdW53ZfAhiTJyM2QIUyauJus6em3fL4UMKXrZRrxUiWobkv
P+CqjdHEIe0R8fndGrI07cIWqBb+cyxNsi3CvxnDFtkHhVk+uAUMdhuSe+O5JYXS
3+ZSZxu0LcRSTRXNHNllQLLDcGBcdZ29j8nXdS7kjvNtsbcoRsqVBBXYl+Fe3WY3
wsyvMo6bm4pRZxuWJHiNqA1YFKReKF+4JpCOqMsBIXfthwdqnXPclv8LmQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJuRjsD9kQI6/Xe7Uwu5fDej1dybMB8GA1UdIwQY
MBaAFF2a2ImdW8hUnu3T5Z8tDWITXM8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQt
MDkzMWZkM2U1YmVlLzEvbTVHT3dQMlJBanI5ZDd0VEM3bDhONlBWM0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQtMDkzMWZkM2U1YmVl
LzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRrWMA0E
AgACMAcDBQMqFEAAMA0GCSqGSIb3DQEBCwUAA4IBAQBUbOG5G6dj3n2LxzDvSvxG
iBjOANnz2S1UXAxh7z1wMRIVqcawj8lFs48PtcET91AjfNZ69wv+yIs/LkZVUJaV
CGNtCkh2yoeOSCcAtwfpMws0YGeg2wJicWlWiaPu842n+zaErzdvil3+BhJbkV15
wqNIxJySrn53mTQrbLlclnB3xbWXUrMvmFKcufiJTZctTtizr9JJCI7YcUkFDHBK
YQsd8sU1CCuc5RIe18DyWqICrL3CD9W8HwnguY/tr+iXOeXCwwnuijc/XNeYDJ0h
hHt+IJOFpRFwbhS/rCvseIrqxeUh5Aw7WUM9C4yCqursEb7U8CN4lHgNM3I5I+b5
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:10:00 2025 by rpki-client