Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/7J5qgHesr8wWK2TtMcGOHR0g-CM.roa
File: 7J5qgHesr8wWK2TtMcGOHR0g-CM.roa (raw, json)
Hash identifier: m+yeQoMNlQS5YjZnJ89DZy7/qcwwyYmIihQriZ/SkzI=
Subject key identifier: EC:9E:6A:80:77:AC:AF:CC:16:2B:64:ED:31:C1:8E:1D:1D:20:F8:23
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0196D50BED66C5A669627A48280080E833D1
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/7J5qgHesr8wWK2TtMcGOHR0g-CM.roa
Signing time: Thu 15 May 2025 17:44:10 +0000
ROA not before: Thu 15 May 2025 17:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
45.248.52.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
94.154.182.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
162.218.90.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:0b:ed:66:c5:a6:69:62:7a:48:28:00:80:e8:33:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 15 17:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9e6a8077acafcc162b64ed31c18e1d1d20f823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:33:3a:47:90:ae:c6:1b:24:01:d1:d8:29:
5c:37:bc:78:4b:aa:38:87:fb:df:ee:88:51:52:9a:
16:23:e5:8d:7b:24:67:27:10:e1:af:ae:97:01:93:
13:7f:88:bc:0b:a2:64:7e:8e:43:20:8c:59:ac:9c:
72:7a:dd:b3:79:d0:bb:dc:f9:13:51:41:80:84:be:
f1:57:f3:b5:1f:44:c3:8f:39:ef:2d:a7:3b:69:85:
f4:31:eb:87:15:25:c9:ac:6c:76:cc:55:95:02:ff:
7f:cd:21:df:2f:c9:bd:7a:b5:12:be:44:b4:2e:2e:
a9:cc:d2:55:f5:7d:f9:2c:28:86:cd:9c:18:5a:2f:
55:10:2e:8f:ba:75:ca:fe:97:b9:67:65:7b:af:3b:
af:02:cb:47:03:15:6b:4d:a7:c5:11:7c:ec:0b:86:
9b:7f:15:9a:89:f3:ca:6f:33:58:08:42:f4:a1:9f:
ed:ee:84:49:f8:30:a4:86:ea:a1:af:48:f1:69:78:
c3:40:85:65:4c:04:bf:a0:54:37:42:a6:9d:f5:57:
0a:90:82:fb:bc:a2:e1:36:4e:8f:12:05:14:f0:83:
ae:6a:5e:7f:42:b7:c1:b2:d2:df:c0:d7:5c:49:eb:
c9:83:5d:3f:63:10:0c:3f:74:d2:ca:f0:41:27:29:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:6A:80:77:AC:AF:CC:16:2B:64:ED:31:C1:8E:1D:1D:20:F8:23
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/7J5qgHesr8wWK2TtMcGOHR0g-CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.248.52.0/24
92.249.31.0/24
94.154.182.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
185.187.212.0/24
185.205.205.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
23:94:d6:e5:ab:37:3d:e5:46:92:26:6b:5e:25:0f:9e:d5:47:
f1:b5:95:d7:b0:c9:79:0e:3a:8c:0c:fc:16:af:a9:a0:ad:d1:
9b:20:3c:3b:36:32:49:e9:87:d5:ad:51:0d:44:e7:25:55:88:
3b:c8:66:86:71:d3:74:73:3d:48:8e:7b:88:ad:01:41:0b:2b:
c3:1e:97:1c:c8:93:7d:21:34:ba:af:67:29:b2:b2:08:23:0f:
8b:98:66:42:d0:9c:e8:58:e3:ec:dc:cc:cc:e1:fc:26:da:da:
8e:ff:82:c5:74:a5:2b:22:b4:a1:eb:a5:81:5e:42:d3:c5:76:
cb:42:4d:b9:07:7e:2c:50:ac:bb:7c:59:8e:63:c1:7a:65:da:
35:c5:e0:9d:3e:b7:c5:ad:cb:32:1f:e7:e2:97:b3:07:72:4e:
7e:1e:e1:05:93:66:21:23:b3:16:f4:b7:fb:2c:d5:2e:33:0f:
65:b7:01:e3:04:03:8b:73:fb:03:bf:13:8e:61:37:a8:4f:a9:
9d:e8:58:df:89:ec:3d:c9:85:6b:c7:3c:91:27:9a:49:7d:1f:
45:64:c8:de:6e:87:16:c6:f4:c1:ea:cc:51:8c:25:ca:a1:0d:
f0:78:26:b5:39:4b:bd:71:41:d9:ab:14:2f:ae:06:37:d0:98:
3a:9d:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:03:20 2025 by rpki-client