Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/SDCjGiu7HlJmu92riiwnYJVUZkM.roa
File: SDCjGiu7HlJmu92riiwnYJVUZkM.roa (raw, json)
Hash identifier: dRu22wu3jt3btScf5pPPepbiwZpCNe4LeyeAtOs7QoU=
Subject key identifier: 48:30:A3:1A:2B:BB:1E:52:66:BB:DD:AB:8A:2C:27:60:95:54:66:43
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0197207AE72696018C28AA9213FF335A75EB
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/SDCjGiu7HlJmu92riiwnYJVUZkM.roa
Signing time: Fri 30 May 2025 09:16:54 +0000
ROA not before: Fri 30 May 2025 09:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13037
IP address blocks: 51.148.0.0/16 maxlen: 16
51.155.0.0/16 maxlen: 16
62.3.64.0/18 maxlen: 18
77.104.128.0/18 maxlen: 18
82.68.0.0/15 maxlen: 15
82.71.0.0/16 maxlen: 16
82.71.240.0/20 maxlen: 20
88.97.0.0/18 maxlen: 18
88.97.64.0/19 maxlen: 19
88.97.96.0/20 maxlen: 20
88.98.0.0/20 maxlen: 20
88.98.16.0/23 maxlen: 23
88.98.18.0/24 maxlen: 24
88.98.21.0/24 maxlen: 24
88.98.22.0/23 maxlen: 23
88.98.24.0/21 maxlen: 21
88.98.32.0/19 maxlen: 19
88.98.64.0/19 maxlen: 19
88.98.128.0/19 maxlen: 19
88.98.160.0/21 maxlen: 21
88.98.170.0/23 maxlen: 23
88.98.172.0/22 maxlen: 22
88.98.176.0/20 maxlen: 20
146.66.64.0/18 maxlen: 18
212.23.0.0/19 maxlen: 19
212.23.0.0/23 maxlen: 23
217.155.0.0/16 maxlen: 16
2a02:8010::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:7a:e7:26:96:01:8c:28:aa:92:13:ff:33:5a:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: May 30 09:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4830a31a2bbb1e5266bbddab8a2c276095546643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:d7:e5:e2:3d:cd:aa:38:2e:47:85:12:00:
05:ce:a1:58:fb:e2:a4:a5:c9:0e:ba:c4:c1:13:1d:
e1:62:43:c7:d4:55:5c:78:77:b3:db:a4:ad:9c:14:
a9:89:f8:e3:d1:d5:b5:16:ba:71:c8:cd:0f:8d:e7:
e4:a1:15:6b:ac:d0:26:6a:59:5f:a0:7e:8e:fe:01:
d8:54:26:ae:05:0c:50:3f:3f:ad:55:75:f7:87:9d:
0b:7f:01:a6:74:a9:f9:cd:83:9c:20:75:fa:0c:0f:
65:92:03:f7:97:f5:de:15:0c:08:8b:78:20:99:2b:
e2:ba:c5:95:74:85:5a:09:21:88:81:f9:2c:c0:68:
11:12:68:6a:62:15:0f:ea:ed:35:8e:28:f2:33:68:
83:d1:9e:66:dc:77:b4:10:08:c1:ac:80:82:30:0b:
49:c6:06:e1:bc:b2:c3:12:17:07:08:12:15:9f:0f:
a1:30:8a:14:72:a2:e7:dd:9e:8a:1e:24:8e:f0:91:
bc:fd:1d:77:70:55:59:df:c4:6a:02:88:2a:b2:b0:
fb:38:2a:04:ad:0e:c3:2d:42:76:77:37:b9:04:90:
4b:63:57:b0:04:05:7d:0d:bc:fa:15:b8:88:68:b4:
cd:78:49:87:e2:f6:bf:e4:5f:16:01:03:b6:05:66:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:A3:1A:2B:BB:1E:52:66:BB:DD:AB:8A:2C:27:60:95:54:66:43
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/SDCjGiu7HlJmu92riiwnYJVUZkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/15
82.71.0.0/16
88.97.0.0-88.97.111.255
88.98.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
Signature Algorithm: sha256WithRSAEncryption
96:5c:eb:eb:c5:22:1e:13:29:f5:ec:dc:2b:6d:00:ab:f3:f7:
f8:f2:4b:32:06:2c:a3:da:c6:5b:32:7e:c0:fd:4f:71:c1:0e:
d9:2a:86:70:48:25:e6:be:8a:85:20:04:98:76:6f:70:b6:58:
7d:9c:3b:cd:e7:a2:4d:25:f3:6f:c8:93:73:41:a0:ed:bd:e0:
15:e8:8f:85:da:c9:78:e5:ca:e7:e0:e4:5c:1b:74:f8:cd:5d:
99:47:9d:32:31:2a:29:7f:d9:07:57:a5:a6:2e:cb:e0:e3:67:
0b:2a:5e:60:76:97:18:70:12:6f:fe:3d:96:30:63:45:da:a8:
c5:a1:15:d4:20:d3:05:ac:be:a6:6b:18:88:85:13:47:24:1f:
98:54:6a:45:25:72:dc:5c:e1:e0:2e:39:99:50:56:a0:fa:54:
d3:88:25:73:31:ee:be:5d:db:10:02:d9:0e:43:22:bd:94:f1:
1a:44:ac:4e:57:06:c8:b0:6b:0e:42:5c:78:0c:29:a2:0c:ae:
65:f9:9f:c2:ce:20:1f:ce:31:ed:57:d5:db:83:23:c9:bc:36:
0e:7b:22:ef:4e:a4:44:0f:e3:9c:b7:98:d2:4e:38:f3:3d:e6:
f0:dd:66:8a:c7:bf:bd:57:56:a0:68:56:98:3e:d4:e3:9d:34:
6f:10:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:33 2025 by rpki-client