Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/aPapdOg3chczRLaEQQ4twwrxodQ.roa
File: aPapdOg3chczRLaEQQ4twwrxodQ.roa (raw, json)
Hash identifier: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=
Subject key identifier: 68:F6:A9:74:E8:37:72:17:33:44:B6:84:41:0E:2D:C3:0A:F1:A1:D4
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0196C4CE849069199BF1AA80D4513226BAD4
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/aPapdOg3chczRLaEQQ4twwrxodQ.roa
Signing time: Mon 12 May 2025 14:03:10 +0000
ROA not before: Mon 12 May 2025 14:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.133.68.0/22 maxlen: 24
185.153.56.0/22 maxlen: 24
193.104.32.0/24 maxlen: 24
2a05:2440::/29 maxlen: 48
2a07:8880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:ce:84:90:69:19:9b:f1:aa:80:d4:51:32:26:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: May 12 14:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f6a974e83772173344b684410e2dc30af1a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:9a:64:92:0b:4d:f1:bd:7a:82:c2:27:2c:
cf:8a:e0:3b:88:38:19:a1:8d:c6:5e:50:ee:c6:7d:
21:cf:26:17:a3:07:33:2a:4b:3b:8d:d6:59:fb:6c:
5e:31:30:68:28:cf:b0:83:1c:24:2a:33:62:58:4e:
cd:02:ba:b7:9f:35:28:44:40:ac:b9:68:82:30:ce:
57:d9:c3:17:ef:f0:05:cc:2f:57:b2:51:f6:8d:ac:
9e:d2:6e:8d:c5:94:ea:73:0f:98:49:47:56:7d:8b:
4b:d6:f9:2b:75:08:2c:2f:a9:e3:8d:5d:0d:57:c4:
74:c9:a8:e1:c7:2e:49:c5:6f:99:69:24:36:5c:e4:
a9:9f:e7:f0:da:d7:19:7f:60:b3:8c:e7:6f:0c:8c:
0e:b0:6d:1e:9e:ed:ca:4b:60:8e:58:cf:3e:b3:e0:
46:e5:fb:c4:a4:fa:03:98:ad:26:fc:e7:6d:6d:54:
5f:91:3b:aa:04:f8:fa:5a:e4:54:7e:f3:26:e4:cb:
67:22:85:2a:e3:aa:54:e6:ee:c1:32:ca:c6:ec:b7:
d2:a2:8f:a0:09:fd:8a:db:ad:c3:e4:de:ff:0f:5f:
54:8a:db:bf:95:ca:46:30:92:ab:85:50:e6:64:00:
70:3b:e9:74:80:2c:b2:13:f2:dd:3d:a1:ba:dc:35:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:A9:74:E8:37:72:17:33:44:B6:84:41:0E:2D:C3:0A:F1:A1:D4
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/aPapdOg3chczRLaEQQ4twwrxodQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.68.0/22
185.153.56.0/22
193.104.32.0/24
IPv6:
2a05:2440::/29
2a07:8880::/29
Signature Algorithm: sha256WithRSAEncryption
60:11:2a:c0:ac:90:17:f8:c7:59:5a:9e:63:6d:f4:2b:32:31:
7c:b1:ea:00:c6:94:1a:25:2f:f8:b7:c1:fc:9e:99:4a:36:f6:
d1:2a:59:66:17:57:66:81:8e:25:90:19:3c:c4:dc:1a:c9:38:
1a:27:93:bb:86:58:07:5a:2d:b3:c3:b1:22:1a:4f:5e:fe:38:
2a:b3:4f:74:b3:31:4a:e7:28:4e:c7:61:08:b0:70:05:17:28:
3c:06:01:44:d4:37:b1:78:98:a2:29:4c:ad:bf:35:ec:06:99:
81:16:cb:86:04:57:4c:fb:19:97:d3:86:76:d4:eb:8f:e4:27:
4d:50:42:64:db:c8:be:fd:57:34:e1:13:2e:cc:9c:ac:1a:7f:
66:0f:76:ee:e6:87:ca:f8:27:57:ae:97:7a:eb:29:4e:b9:0f:
4d:f2:da:7d:f4:a6:3e:e7:e9:05:65:e5:85:e2:56:91:9b:0a:
bc:d8:ac:c9:e8:a8:fc:62:bd:90:04:53:35:4b:ba:af:6d:e6:
71:df:e1:1b:22:66:b6:d6:8d:c1:52:74:af:21:fd:07:81:c4:
03:7b:10:d7:a8:ef:92:11:0b:f1:d1:bc:0b:bc:91:c8:12:6b:
a6:d9:0d:a9:7f:b3:97:fc:ce:6b:20:8e:24:60:ff:20:58:bf:
be:2b:f5:a1
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZbEzoSQaRmb8aqA1FEyJrrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjUwNTEyMTQwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGY2YTk3NGU4Mzc3MjE3MzM0NGI2ODQ0MTBlMmRjMzBhZjFhMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvryaZJILTfG9eoLCJyzPiuA7iDgZ
oY3GXlDuxn0hzyYXowczKks7jdZZ+2xeMTBoKM+wgxwkKjNiWE7NArq3nzUoRECs
uWiCMM5X2cMX7/AFzC9XslH2jaye0m6NxZTqcw+YSUdWfYtL1vkrdQgsL6njjV0N
V8R0yajhxy5JxW+ZaSQ2XOSpn+fw2tcZf2CzjOdvDIwOsG0enu3KS2COWM8+s+BG
5fvEpPoDmK0m/OdtbVRfkTuqBPj6WuRUfvMm5MtnIoUq46pU5u7BMsrG7LfSoo+g
Cf2K263D5N7/D19Uitu/lcpGMJKrhVDmZABwO+l0gCyyE/LdPaG63DUn/QIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFGj2qXToN3IXM0S2hEEOLcMK8aHUMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvYVBhcGRPZzNjaGN6UkxhRVFRNHR3d3J4b2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuYVEAwQC
uZk4AwQAwWggMBQEAgACMA4DBQMqBSRAAwUDKgeIgDANBgkqhkiG9w0BAQsFAAOC
AQEAYBEqwKyQF/jHWVqeY230KzIxfLHqAMaUGiUv+LfB/J6ZSjb20SpZZhdXZoGO
JZAZPMTcGsk4GieTu4ZYB1ots8OxIhpPXv44KrNPdLMxSucoTsdhCLBwBRcoPAYB
RNQ3sXiYoilMrb817AaZgRbLhgRXTPsZl9OGdtTrj+QnTVBCZNvIvv1XNOETLsyc
rBp/Zg927uaHyvgnV66XeuspTrkPTfLaffSmPufpBWXlheJWkZsKvNisyeio/GK9
kARTNUu6r23mcd/hGyJmttaNwVJ0ryH9B4HEA3sQ16jvkhEL8dG8C7yRyBJrptkN
qX+zl/zOayCOJGD/IFi/viv1oQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:11:37 2025 by rpki-client