Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1Ww8aQ1mJNx6XFrPtsJevSbJK5o.roa
File: 1Ww8aQ1mJNx6XFrPtsJevSbJK5o.roa (raw, json)
Hash identifier: 5u0lLJgJrLGwrtsVYCltkYTIadYKMzpmLpkAN5e/pBw=
Subject key identifier: D5:6C:3C:69:0D:66:24:DC:7A:5C:5A:CF:B6:C2:5E:BD:26:C9:2B:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01977C9B3DA2FAE4F1F1614E33E6E19E7D27
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1Ww8aQ1mJNx6XFrPtsJevSbJK5o.roa
Signing time: Tue 17 Jun 2025 06:37:18 +0000
ROA not before: Tue 17 Jun 2025 06:37:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:9b:3d:a2:fa:e4:f1:f1:61:4e:33:e6:e1:9e:7d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 17 06:37:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56c3c690d6624dc7a5c5acfb6c25ebd26c92b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:17:64:3e:63:23:02:63:62:1b:0b:4c:ff:
44:5c:f0:8f:a8:04:88:9f:ca:c8:9b:b4:1e:1d:64:
e7:7d:73:dc:7b:69:94:6e:c1:b7:46:e6:ce:78:ee:
1f:1c:4b:76:e7:3a:7f:b8:ef:3c:e4:af:1b:d9:9f:
14:8e:78:60:de:98:90:08:9b:50:57:14:f0:e2:75:
d9:1e:67:5a:bd:9e:c0:fc:de:ea:8c:8c:b0:79:d7:
3e:0a:bf:7c:80:0e:17:2f:91:08:6f:02:aa:23:80:
b2:5c:3f:e4:14:85:7d:8d:76:32:63:0b:68:16:c3:
a0:70:71:dd:2e:64:6f:9f:62:d8:bb:f1:ff:5f:b2:
d6:5f:7a:14:b6:a5:c4:e8:5b:e0:65:1e:df:52:ad:
77:2b:35:48:4b:25:e8:bb:5e:ba:12:78:bb:00:47:
ba:f8:88:70:15:d9:f6:0c:f6:4f:ee:2c:d9:7c:77:
de:a5:94:50:9b:4b:54:60:b4:b9:87:98:b0:1a:b9:
67:e3:a5:0f:9c:b8:44:4d:be:43:05:f9:81:af:9e:
e1:cb:31:c1:4c:ba:3f:7d:2f:89:a8:41:87:05:98:
d6:e3:ff:1e:9d:09:8f:42:70:d1:9e:e1:ca:43:d7:
e6:57:94:94:30:c9:59:dc:32:1c:d2:31:79:00:93:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:3C:69:0D:66:24:DC:7A:5C:5A:CF:B6:C2:5E:BD:26:C9:2B:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1Ww8aQ1mJNx6XFrPtsJevSbJK5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
77.90.57.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:09:ee:a1:cb:87:aa:70:5c:6e:4a:d2:6f:87:ff:1d:2d:66:
a8:e0:e8:fc:d7:d3:a1:52:1a:2c:84:a4:dc:61:34:8c:10:76:
58:38:6e:15:94:bb:55:39:aa:83:df:b6:b6:9a:d7:91:e3:77:
0a:0e:3e:17:b8:91:6c:4b:96:97:ae:e5:aa:26:a6:27:9d:de:
02:86:9f:92:02:60:07:89:17:98:13:9a:b3:29:82:7c:e1:33:
40:f3:b7:2d:10:b8:13:9b:88:3b:97:53:96:7e:be:36:47:f4:
42:0e:95:3b:cf:d5:37:42:65:8f:a8:d4:52:e2:70:94:35:28:
77:6f:14:4c:40:f3:28:10:73:be:cb:51:fa:92:e5:e1:4a:0c:
4f:30:b9:04:4f:d3:c4:87:be:01:ef:a8:b1:96:68:b2:54:a2:
11:d7:81:d1:da:73:08:87:a2:41:5c:21:bb:6d:9c:bb:17:d4:
51:c9:1f:82:7d:14:08:9c:dd:19:80:c4:6a:7c:00:e9:00:12:
e3:f4:58:f4:89:b8:b4:f6:a6:51:2a:5b:ad:68:4d:ef:98:be:
c6:53:35:39:b3:d8:88:a9:c6:df:bc:c7:9e:96:85:06:65:99:
ae:9a:6d:de:b1:4a:01:49:e1:cb:5a:de:fb:01:d5:c1:f1:09:
f2:f5:21:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZd8mz2i+uTx8WFOM+bhnn0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjE3MDYzNzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTZjM2M2OTBkNjYyNGRjN2E1YzVhY2ZiNmMyNWViZDI2YzkyYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8EXZD5jIwJjYhsLTP9EXPCPqASI
n8rIm7QeHWTnfXPce2mUbsG3RubOeO4fHEt25zp/uO885K8b2Z8Ujnhg3piQCJtQ
VxTw4nXZHmdavZ7A/N7qjIywedc+Cr98gA4XL5EIbwKqI4CyXD/kFIV9jXYyYwto
FsOgcHHdLmRvn2LYu/H/X7LWX3oUtqXE6FvgZR7fUq13KzVISyXou166Eni7AEe6
+IhwFdn2DPZP7izZfHfepZRQm0tUYLS5h5iwGrln46UPnLhETb5DBfmBr57hyzHB
TLo/fS+JqEGHBZjW4/8enQmPQnDRnuHKQ9fmV5SUMMlZ3DIc0jF5AJMXLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNVsPGkNZiTcelxaz7bCXr0mySuaMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMVd3OGFRMW1KTng2WEZyUHRzSmV2U2JKSzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa/5AwQA
TVo5MA0GCSqGSIb3DQEBCwUAA4IBAQDJCe6hy4eqcFxuStJvh/8dLWao4Oj819Oh
UhoshKTcYTSMEHZYOG4VlLtVOaqD37a2mteR43cKDj4XuJFsS5aXruWqJqYnnd4C
hp+SAmAHiReYE5qzKYJ84TNA87ctELgTm4g7l1OWfr42R/RCDpU7z9U3QmWPqNRS
4nCUNSh3bxRMQPMoEHO+y1H6kuXhSgxPMLkET9PEh74B76ixlmiyVKIR14HR2nMI
h6JBXCG7bZy7F9RRyR+CfRQInN0ZgMRqfADpABLj9Fj0ibi09qZRKlutaE3vmL7G
UzU5s9iIqcbfvMeeloUGZZmumm3esUoBSeHLWt77AdXB8Qny9SHs
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:46:54 2025 by rpki-client