Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/G35MJdhjxLRyaoPfEqO2_r8b1yY.roa
File: G35MJdhjxLRyaoPfEqO2_r8b1yY.roa (raw, json)
Hash identifier: 2qRJsKQVJ+1vwVlyUjIjsK8LCwNWc7Q0uzHtVkJWW+w=
Subject key identifier: 1B:7E:4C:25:D8:63:C4:B4:72:6A:83:DF:12:A3:B6:FE:BF:1B:D7:26
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0196F1CD117337AECE5EAA39C0BDADA7D67F
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/G35MJdhjxLRyaoPfEqO2_r8b1yY.roa
Signing time: Wed 21 May 2025 07:44:30 +0000
ROA not before: Wed 21 May 2025 07:44:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215272
IP address blocks: 5.44.44.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:cd:11:73:37:ae:ce:5e:aa:39:c0:bd:ad:a7:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: May 21 07:44:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b7e4c25d863c4b4726a83df12a3b6febf1bd726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:85:f1:3c:14:6a:e3:c2:7a:13:c4:c1:65:
4a:22:2f:71:86:1e:97:19:c4:e9:be:da:df:a8:c7:
85:62:87:3c:0d:c6:1a:16:4a:e1:25:72:bf:dd:ac:
7b:f9:72:79:47:10:48:48:ca:2a:08:c2:79:3b:c9:
c0:4a:e8:c2:b6:79:cb:5b:ba:30:b5:22:21:b4:a0:
3b:89:6a:09:3a:b1:87:6b:c3:08:ee:fe:f6:f1:a7:
29:41:fd:43:9a:9a:1a:68:26:42:b9:47:17:aa:83:
7e:06:60:6f:b2:99:70:e3:b4:14:ae:d8:b0:8b:9c:
4d:2f:5a:40:33:53:36:1a:ce:c1:6e:fe:28:31:ea:
c5:20:c5:e2:cc:12:f0:85:c9:67:47:99:64:7a:de:
ea:b0:5a:12:e6:68:f1:9b:27:8b:b0:bf:4b:0f:52:
09:cb:3b:99:29:57:64:20:8d:e6:6f:1b:69:49:89:
10:5c:8f:35:91:ec:2d:a2:ba:46:98:f4:b6:0e:27:
04:bf:90:a2:38:56:65:bc:99:9c:41:78:49:c2:30:
66:25:3b:85:86:29:5d:c4:a1:c1:dd:a1:33:45:e3:
bd:13:7a:e6:41:d3:ad:96:0e:df:48:0b:9f:9f:50:
9d:1e:15:aa:a4:30:97:ab:1c:44:f1:0f:a3:67:3b:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:4C:25:D8:63:C4:B4:72:6A:83:DF:12:A3:B6:FE:BF:1B:D7:26
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/G35MJdhjxLRyaoPfEqO2_r8b1yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.129.186.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8c:b0:cd:02:7f:6c:d4:ca:c4:f6:fb:7e:29:d7:7d:a6:0c:
d4:51:2e:f0:7d:25:5e:ba:81:07:04:94:db:dd:3b:8f:a2:0a:
70:7a:d5:1f:a8:ab:0a:12:af:ed:d4:4a:a6:c9:73:c7:90:6e:
1c:64:c1:96:70:66:42:d6:b3:c8:31:67:3f:38:67:36:2d:bb:
c7:05:0c:46:4b:9a:57:1c:63:2b:ad:b6:36:86:bf:52:09:f9:
67:b6:9d:90:df:1a:72:6c:6d:0a:da:31:d5:26:8e:76:cb:39:
62:c1:24:3d:de:f4:48:71:d4:5e:35:68:78:8c:97:c0:68:6d:
12:19:7e:8b:2c:1d:0d:d3:85:5f:8a:6b:6e:28:00:c6:cb:3f:
8a:70:90:1a:87:a9:d4:73:7c:15:52:c5:5e:bf:f1:36:df:fe:
1f:a2:97:ca:41:bb:8d:d7:42:35:b8:ce:8e:49:88:83:01:ff:
07:cd:4f:0f:62:7a:ad:b9:4e:3d:0a:41:dd:b3:91:4b:1f:b6:
8d:82:ff:c1:79:4a:e3:ef:2f:a7:13:7a:48:f6:8c:62:52:15:
e8:0f:e5:82:88:bb:70:b6:52:97:b4:fc:ad:d6:c4:40:04:6a:
b5:e6:7b:e6:7d:07:27:66:d3:02:75:2d:90:35:95:c5:d6:e9:
74:f0:f7:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbxzRFzN67OXqo5wL2tp9Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjUwNTIxMDc0NDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjdlNGMyNWQ4NjNjNGI0NzI2YTgzZGYxMmEzYjZmZWJmMWJkNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwmF8TwUauPCehPEwWVKIi9xhh6X
GcTpvtrfqMeFYoc8DcYaFkrhJXK/3ax7+XJ5RxBISMoqCMJ5O8nASujCtnnLW7ow
tSIhtKA7iWoJOrGHa8MI7v728acpQf1DmpoaaCZCuUcXqoN+BmBvsplw47QUrtiw
i5xNL1pAM1M2Gs7Bbv4oMerFIMXizBLwhclnR5lket7qsFoS5mjxmyeLsL9LD1IJ
yzuZKVdkII3mbxtpSYkQXI81kewtorpGmPS2DicEv5CiOFZlvJmcQXhJwjBmJTuF
hildxKHB3aEzReO9E3rmQdOtlg7fSAufn1CdHhWqpDCXqxxE8Q+jZztTVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBt+TCXYY8S0cmqD3xKjtv6/G9cmMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvRzM1TUpkaGp4TFJ5YW9QZkVxTzJfcjhiMXlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSwsAwQA
LYG6MA0GCSqGSIb3DQEBCwUAA4IBAQBkjLDNAn9s1MrE9vt+Kdd9pgzUUS7wfSVe
uoEHBJTb3TuPogpwetUfqKsKEq/t1EqmyXPHkG4cZMGWcGZC1rPIMWc/OGc2LbvH
BQxGS5pXHGMrrbY2hr9SCflntp2Q3xpybG0K2jHVJo52yzliwSQ93vRIcdReNWh4
jJfAaG0SGX6LLB0N04VfimtuKADGyz+KcJAah6nUc3wVUsVev/E23/4fopfKQbuN
10I1uM6OSYiDAf8HzU8PYnqtuU49CkHds5FLH7aNgv/BeUrj7y+nE3pI9oxiUhXo
D+WCiLtwtlKXtPyt1sRABGq15nvmfQcnZtMCdS2QNZXF1ul08Pdo
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:31 2025 by rpki-client