Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa
File: xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa (raw, json)
Hash identifier: rI1CEkrztn+BRMtnvWNccs01rdhwia4WvS8p6nZL0z8=
Subject key identifier: C4:18:07:97:C0:B7:74:91:96:08:99:99:1E:AB:FA:9C:1E:58:F2:84
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01971AE799146AA1456B3E8EF0E3153AF613
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa
Signing time: Thu 29 May 2025 07:17:54 +0000
ROA not before: Thu 29 May 2025 07:17:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 153.112.128.0/24 maxlen: 24
153.112.195.0/24 maxlen: 24
153.112.200.0/24 maxlen: 24
153.112.201.0/24 maxlen: 24
153.112.203.0/24 maxlen: 24
153.112.205.0/24 maxlen: 24
153.112.210.0/24 maxlen: 24
153.112.216.0/24 maxlen: 24
153.112.217.0/24 maxlen: 24
153.112.223.0/24 maxlen: 24
153.112.224.0/24 maxlen: 24
153.112.225.0/24 maxlen: 24
153.112.226.0/24 maxlen: 24
153.112.227.0/24 maxlen: 24
153.112.228.0/24 maxlen: 24
153.112.229.0/24 maxlen: 24
153.112.230.0/24 maxlen: 24
153.112.231.0/24 maxlen: 24
192.131.25.0/24 maxlen: 24
192.157.12.0/23 maxlen: 23
192.157.12.0/24 maxlen: 24
192.157.13.0/24 maxlen: 24
192.157.14.0/24 maxlen: 24
192.157.15.0/24 maxlen: 24
192.157.16.0/23 maxlen: 23
192.157.16.0/24 maxlen: 24
192.157.17.0/24 maxlen: 24
193.53.25.0/24 maxlen: 24
193.53.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:e7:99:14:6a:a1:45:6b:3e:8e:f0:e3:15:3a:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: May 29 07:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4180797c0b77491960899991eabfa9c1e58f284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:29:d9:7e:9b:ca:d3:50:87:e2:62:00:73:
41:f7:ac:40:c1:0f:13:82:5d:6d:76:f3:07:f3:fe:
c7:a5:63:32:95:02:4d:c7:40:e1:51:51:b6:a0:60:
d7:c6:d2:12:98:96:0f:8e:7a:e8:56:fe:16:4d:bc:
16:96:2e:96:88:52:31:c0:fa:e4:71:5b:fc:09:ae:
10:64:bd:00:83:c3:fc:5f:9e:4c:5b:b6:02:f1:5a:
27:86:5e:36:3d:08:42:6e:92:1f:3b:cf:8d:49:90:
68:69:d3:18:04:6c:2d:73:63:e5:ef:30:f7:7e:d7:
99:2a:c9:41:fb:2e:bd:51:8f:fe:2a:96:b6:9e:47:
6d:ac:3c:a6:7d:e8:40:1e:92:33:2e:f1:2d:62:5c:
b7:24:87:0d:f0:77:af:6a:e0:a7:04:fb:f8:09:cc:
31:e7:30:50:40:88:bd:c0:63:ca:37:83:ad:ff:5c:
e4:f4:54:9c:e3:e9:73:1f:aa:14:43:8f:2e:b2:0b:
84:cd:5c:f0:3e:a5:8f:e2:7d:25:db:8d:7d:d8:b1:
69:79:a5:12:b8:71:6e:5e:4e:ed:f0:93:95:39:61:
2f:91:b4:37:6b:d6:26:bf:95:7e:e6:d4:e0:8d:44:
de:6a:92:34:82:41:0a:40:b5:a8:86:5e:86:e0:3c:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:18:07:97:C0:B7:74:91:96:08:99:99:1E:AB:FA:9C:1E:58:F2:84
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.128.0/24
153.112.195.0/24
153.112.200.0/23
153.112.203.0/24
153.112.205.0/24
153.112.210.0/24
153.112.216.0/23
153.112.223.0-153.112.231.255
192.131.25.0/24
192.157.12.0-192.157.17.255
193.53.25.0/24
193.53.29.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fb:2e:fd:fa:80:9a:82:95:e7:4e:81:ef:6b:9d:9b:39:08:
32:90:80:2d:df:57:57:67:ad:60:9e:72:ca:90:43:89:d1:58:
3b:02:13:50:aa:f3:2e:f6:41:e6:a4:8d:2e:d1:b5:48:82:3a:
e9:45:0d:ad:5d:12:fb:ac:4d:e6:bf:31:7b:77:fb:cc:c4:9d:
79:1c:9d:df:f5:3e:d2:d8:8c:f3:8a:ad:43:98:ea:92:f0:c8:
c9:5b:df:d4:13:6a:e5:0e:32:10:2e:2e:03:24:0a:60:10:ef:
77:49:30:03:fc:36:ae:df:95:4e:f7:a8:25:69:20:02:5b:a9:
ca:0b:2b:f8:62:74:d6:20:47:59:38:67:0f:56:9e:75:8c:88:
c5:4c:4f:f3:67:f2:96:7c:26:a7:79:f3:e2:56:de:50:be:aa:
bc:ea:b5:7e:b1:4e:9a:11:cc:53:e5:f4:64:72:16:8d:7c:d0:
c8:42:f2:eb:59:f8:3b:68:d7:d2:35:a1:33:52:a6:6b:b6:12:
7b:72:cb:a0:cd:32:71:78:f5:e4:9d:7a:a1:d0:3b:e4:1a:0f:
fe:1f:cc:40:93:9f:0c:19:a1:2c:50:c4:43:25:d8:9f:8d:90:
e3:35:21:83:60:95:57:cb:8e:e2:c9:ef:d0:0a:fa:2e:97:fd:
15:8a:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:54 2025 by rpki-client