Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3I5SMzfV3X2bp-ZE5fRorVPE9yg.roa
File: 3I5SMzfV3X2bp-ZE5fRorVPE9yg.roa (raw, json)
Hash identifier: reA3H+soi2ZzCIioU9uZToGIBsR6YdfTtmzdGpud97o=
Subject key identifier: DC:8E:52:33:37:D5:DD:7D:9B:A7:E6:44:E5:F4:68:AD:53:C4:F7:28
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0197641DB4E00C3FC1149B3FBDD3A3334C24
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3I5SMzfV3X2bp-ZE5fRorVPE9yg.roa
Signing time: Thu 12 Jun 2025 12:29:17 +0000
ROA not before: Thu 12 Jun 2025 12:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 79.132.180.0/24 maxlen: 24
79.132.183.0/24 maxlen: 24
79.132.188.0/24 maxlen: 24
79.132.190.0/24 maxlen: 24
88.223.154.0/23 maxlen: 24
88.223.164.0/24 maxlen: 24
88.223.165.0/24 maxlen: 24
88.223.166.0/24 maxlen: 24
88.223.167.0/24 maxlen: 24
88.223.176.0/20 maxlen: 24
88.223.180.0/24 maxlen: 24
88.223.183.0/24 maxlen: 24
88.223.189.0/24 maxlen: 24
88.223.190.0/24 maxlen: 24
88.223.191.0/24 maxlen: 24
88.223.208.0/24 maxlen: 24
88.223.218.0/24 maxlen: 24
88.223.224.0/19 maxlen: 24
95.173.40.0/21 maxlen: 21
213.164.96.0/20 maxlen: 24
213.164.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:1d:b4:e0:0c:3f:c1:14:9b:3f:bd:d3:a3:33:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 12 12:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc8e523337d5dd7d9ba7e644e5f468ad53c4f728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:ef:67:77:70:71:3f:48:75:f7:22:2f:2e:
42:77:d9:a3:55:28:23:f6:9c:d4:b0:03:00:39:25:
d5:33:42:49:a9:3b:e3:69:70:f3:cc:52:b3:9c:aa:
bf:1a:24:1d:a9:2f:b0:ed:1c:1f:e7:c0:de:81:95:
bc:2e:dc:7e:15:dc:d8:80:63:6e:6c:58:3e:45:bc:
cd:82:b3:e1:3c:ab:14:06:73:4a:c2:ce:e1:2e:5a:
60:9c:89:f9:5a:38:a7:f5:14:e7:76:7b:d7:4d:61:
b0:92:2c:f3:80:89:2d:76:06:ff:f8:1f:74:36:49:
69:04:b1:b1:f4:a7:d2:81:d0:76:23:67:ba:87:0a:
ca:c7:ab:cf:68:e0:4d:0c:8e:9f:03:0e:b5:48:e6:
3d:7e:1d:52:92:43:72:19:ec:c6:dd:32:2d:27:60:
ab:d7:bd:10:22:e4:42:5a:17:80:de:b9:d9:01:25:
3c:ea:30:ec:65:06:c4:90:90:3d:ca:9d:0e:0a:91:
d2:6c:a0:48:f2:08:3a:9c:56:5d:88:cf:27:6f:c5:
f8:91:8f:55:88:fb:7b:0f:ce:e9:4d:54:ca:8e:a8:
94:ba:f8:5c:db:fa:17:a6:ec:5b:4d:20:38:ad:19:
68:0e:38:85:0d:63:97:3f:96:0f:6f:21:76:6a:53:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:52:33:37:D5:DD:7D:9B:A7:E6:44:E5:F4:68:AD:53:C4:F7:28
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3I5SMzfV3X2bp-ZE5fRorVPE9yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.180.0/24
79.132.183.0/24
79.132.188.0/24
79.132.190.0/24
88.223.154.0/23
88.223.164.0/22
88.223.176.0/20
88.223.208.0/24
88.223.218.0/24
88.223.224.0/19
95.173.40.0/21
213.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:50:6b:b4:e3:78:6d:98:e1:7a:37:b8:65:ca:3e:01:03:4b:
b5:d0:e7:0f:f5:54:bb:cf:84:fc:60:b8:ae:13:2c:8f:d3:aa:
9c:4e:f8:91:2a:23:1c:08:67:e0:07:d6:09:17:4f:e7:d9:6e:
d9:00:8b:61:09:76:bc:9d:7e:8e:40:81:17:4b:a3:dd:f3:e9:
d2:9e:2d:c3:fe:ef:3f:1e:40:f8:66:fb:06:6e:7b:ac:9e:94:
4a:97:dd:ef:f4:db:d1:06:e2:3f:cd:d3:7d:0f:24:dd:1c:62:
42:b4:c6:5b:cc:b3:18:c6:4c:2d:30:00:5c:1e:78:53:c7:51:
a0:36:bb:c6:70:17:c6:5d:45:96:29:cd:16:60:8a:b0:2f:cd:
43:1e:6c:62:52:dd:dd:8e:13:c7:91:47:4b:c6:c9:97:23:38:
2e:20:cb:e1:b5:5e:d3:56:f3:76:26:9b:21:ed:20:fd:f7:14:
91:67:3b:48:e8:9f:a2:3a:7e:41:34:81:0d:ee:3d:31:46:ee:
9e:d8:96:2b:99:13:af:73:74:94:3c:a2:3c:07:e4:88:11:38:
a5:f2:aa:77:76:7e:a1:7c:c7:56:4f:ce:23:3d:42:2c:e3:9b:
b9:5d:10:bf:54:bf:97:32:e2:ca:93:b3:c4:fc:5f:a1:fd:db:
30:5d:64:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:24:18 2025 by rpki-client