Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa
File: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (raw, json)
Hash identifier: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=
Subject key identifier: 1F:9F:D4:11:FE:91:32:9D:19:31:BF:CC:BF:80:FC:88:07:30:B3:25
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01979D14EBA67785334600A2FA154885E7BC
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa
Signing time: Mon 23 Jun 2025 13:58:03 +0000
ROA not before: Mon 23 Jun 2025 13:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202759
IP address blocks: 45.151.72.0/24 maxlen: 24
83.172.139.0/24 maxlen: 24
89.40.104.0/24 maxlen: 24
93.113.98.0/24 maxlen: 24
93.113.214.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
185.122.185.0/24 maxlen: 24
185.193.49.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
188.214.36.0/24 maxlen: 24
188.214.37.0/24 maxlen: 24
213.111.179.0/24 maxlen: 24
213.111.181.0/24 maxlen: 24
213.111.189.0/24 maxlen: 24
213.111.190.0/24 maxlen: 24
2a03:f80:372::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:14:eb:a6:77:85:33:46:00:a2:fa:15:48:85:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 23 13:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9fd411fe91329d1931bfccbf80fc880730b325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:7f:73:b0:f4:e6:67:13:6f:f7:d2:05:52:
a5:30:d0:b6:8e:94:7c:c9:9e:d6:05:30:80:aa:21:
eb:f1:ef:bf:e7:e1:c4:c5:38:dc:54:83:63:ed:3e:
5d:0a:8b:97:d2:e2:2b:1b:f1:d5:4c:32:0d:d5:19:
44:53:7c:f9:b8:9f:68:df:bf:ed:7c:13:35:a8:53:
25:7e:61:dd:96:9d:05:e2:ea:4f:43:23:75:c1:ca:
25:af:3d:d5:d4:10:78:d1:89:a3:17:e1:13:84:79:
6e:cc:9a:4c:0b:3b:f9:35:14:98:e4:ba:b0:d8:0d:
58:d4:24:1b:dd:9e:b6:ff:25:8d:25:fb:fd:0a:95:
ae:d5:d0:3c:39:50:66:34:0c:15:82:d5:90:ff:8c:
9c:a7:8a:4e:21:8c:aa:26:dc:8a:73:4f:6f:5c:ac:
23:40:dd:f9:ec:18:ad:57:ae:98:78:83:d5:39:ce:
81:97:6a:e8:40:a7:a4:9d:d9:a8:96:b5:9f:04:bf:
f3:a8:c0:58:22:60:b6:a8:97:46:b1:10:42:08:d6:
ce:71:11:79:a5:aa:43:1e:d2:3d:31:94:f8:ed:34:
a1:23:f7:6f:1b:5f:58:cb:35:37:4a:4e:7f:61:47:
63:d5:a3:88:e8:f9:46:18:ff:c9:c7:73:d9:8b:c6:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9F:D4:11:FE:91:32:9D:19:31:BF:CC:BF:80:FC:88:07:30:B3:25
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/24
83.172.139.0/24
89.40.104.0/24
93.113.98.0/24
93.113.214.0/24
95.156.206.0/24
185.122.185.0/24
185.193.49.0/24
188.214.32.0/24
188.214.36.0/23
213.111.179.0/24
213.111.181.0/24
213.111.189.0-213.111.190.255
IPv6:
2a03:f80:372::/48
Signature Algorithm: sha256WithRSAEncryption
9f:1a:09:99:44:1f:f8:53:d1:03:62:06:d1:1e:3a:3a:e8:27:
ff:f5:46:c5:f9:b3:da:75:26:14:fc:29:c0:1a:dc:64:57:49:
96:ba:b7:18:9b:99:58:0e:e1:1b:05:16:a4:04:5b:f9:c8:c5:
79:53:18:49:c0:ad:ab:52:e0:d1:1a:4f:22:1f:2c:e0:ab:54:
a2:b7:ee:ef:28:1e:66:51:a9:ab:ce:ae:67:bc:b8:e0:0f:8c:
db:b7:d4:01:bd:84:62:05:a3:fa:18:52:a8:26:4f:eb:c1:a1:
8d:c6:fe:f1:b4:28:28:9c:e7:9a:6d:d4:f1:2d:00:c6:ff:81:
b3:52:a3:07:29:69:88:4f:ea:c8:bc:0d:5a:07:d0:3a:bf:61:
35:d2:5b:05:da:b2:44:1b:b8:58:15:64:cc:4e:6b:58:39:bf:
bd:50:3f:e7:bc:73:c3:1e:09:62:9f:b2:45:d8:7f:7a:68:b9:
c7:95:de:bc:13:0d:df:da:84:a5:75:78:6e:d5:5e:74:cf:55:
35:d4:dc:cb:a0:71:20:b9:f3:f8:8b:23:2f:11:bb:2f:7c:23:
79:75:4f:d8:b1:3e:ff:58:df:d6:2f:76:e2:cf:46:09:7d:e6:
0a:1c:7f:9b:24:23:7b:7f:f2:12:c8:3a:82:57:d3:40:ea:89:
1d:bd:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:09:35 2025 by rpki-client