Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ReI1yZvyZqJZ3bTQJEt0PHIrEE.roa
File: 5ReI1yZvyZqJZ3bTQJEt0PHIrEE.roa (raw, json)
Hash identifier: qLlRO9mupIngi8Gwv5ZLi4MUdTgKF6QNilJQlC1nfwI=
Subject key identifier: E5:17:88:D7:26:6F:C9:9A:89:67:76:D3:40:91:2D:D0:F1:C8:AC:41
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196A3D29D976C0875BD5D0D8FD0FDB80CA6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ReI1yZvyZqJZ3bTQJEt0PHIrEE.roa
Signing time: Tue 06 May 2025 04:20:10 +0000
ROA not before: Tue 06 May 2025 04:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
5.231.225.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.7.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:d2:9d:97:6c:08:75:bd:5d:0d:8f:d0:fd:b8:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 6 04:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e51788d7266fc99a896776d340912dd0f1c8ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:ce:ca:59:c4:fa:92:01:7a:6a:1d:bc:96:
08:d5:01:d6:b0:1b:7a:e2:7b:ce:68:40:11:2a:7b:
c0:ce:b6:e8:26:bd:00:a4:a3:7f:88:1e:1e:a5:8e:
5a:4a:95:b0:02:ef:6d:15:16:ee:9e:91:0d:95:ba:
bf:f0:f4:e8:9a:be:f5:f3:4b:a7:8f:f7:88:0d:02:
63:58:ab:de:61:0e:5c:de:97:88:c7:53:77:82:d9:
a0:1b:f0:c6:4c:fb:d0:c6:6f:f1:b1:2a:e8:85:c3:
ac:03:b3:b2:7c:20:aa:0c:9e:29:4e:7a:23:a3:9d:
e1:0c:ea:a6:90:7b:9b:2a:0a:bf:e5:4e:19:24:3b:
09:de:22:b7:80:fa:be:87:1f:e5:c5:36:7a:f7:d6:
57:5f:93:e4:b7:c4:e6:73:a3:d6:a0:7e:a6:98:c0:
b4:e0:33:43:9c:22:b3:d8:a2:b4:1d:fd:06:89:ac:
cc:ed:5c:38:97:a1:93:bc:36:6a:b9:6f:16:38:da:
3f:60:77:be:ec:be:34:15:51:4f:ea:4a:15:23:5f:
28:c2:9a:22:70:43:4d:90:aa:7b:55:dc:09:da:23:
e3:0b:26:f5:3b:79:48:9f:80:eb:69:bb:f5:1c:bd:
8c:ab:17:6a:a4:3d:6b:dd:59:72:4e:ac:d4:6d:8a:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:88:D7:26:6F:C9:9A:89:67:76:D3:40:91:2D:D0:F1:C8:AC:41
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ReI1yZvyZqJZ3bTQJEt0PHIrEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
5.231.96.0/24
5.231.203.0/24
5.231.225.0/24
5.231.234.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.93.1.0/24
85.93.6.0/23
85.93.22.0/24
89.144.14.0/24
89.144.16.0/24
89.144.25.0/24
89.144.35.0/24
94.249.153.0/24
94.249.158.0/24
Signature Algorithm: sha256WithRSAEncryption
48:69:c2:7e:73:34:00:0e:c5:13:fc:06:a8:da:04:eb:33:9c:
cc:0c:ba:b3:46:9c:2c:8f:a5:fd:97:4c:09:ce:d9:6f:ec:4e:
cc:80:06:5b:7a:3b:cb:9f:ca:c3:b0:1a:80:5a:0b:98:6b:73:
d9:58:99:a0:23:50:e1:50:38:06:b6:60:2c:a9:50:b5:d7:70:
56:20:2e:c1:cb:f6:5d:7a:34:1e:a9:cc:12:b2:18:26:f1:11:
bb:1d:02:66:6c:a1:3f:94:42:e6:e9:8b:76:6b:78:e1:cc:dd:
e0:e6:2c:2e:9e:96:9c:41:25:0f:e6:35:2f:60:db:4d:9a:73:
fe:bf:77:d3:de:62:a9:51:f0:9e:fa:57:23:59:e8:80:15:d6:
e7:4e:74:c2:3f:4b:3e:38:41:e7:5b:90:cd:7c:06:07:02:07:
8d:1b:8f:43:17:c4:12:66:3b:28:29:bd:9c:f2:62:e8:52:a1:
39:48:8e:1f:87:a6:c8:cd:88:9b:bc:5c:0b:c1:4e:90:f3:fd:
ba:f4:11:dc:23:43:a0:93:3b:1d:a6:98:c3:22:95:29:e2:a7:
cd:03:c9:b5:30:c2:88:62:b0:1e:3b:04:23:29:94:a8:91:07:
43:71:ca:ed:13:aa:b5:6d:b7:ba:6e:89:95:30:c9:c5:60:e6:
40:a0:ca:cf
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZaj0p2XbAh1vV0Nj9D9uAymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTA2MDQyMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTE3ODhkNzI2NmZjOTlhODk2Nzc2ZDM0MDkxMmRkMGYxYzhhYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j/OylnE+pIBemodvJYI1QHWsBt6
4nvOaEARKnvAzrboJr0ApKN/iB4epY5aSpWwAu9tFRbunpENlbq/8PTomr7180un
j/eIDQJjWKveYQ5c3peIx1N3gtmgG/DGTPvQxm/xsSrohcOsA7OyfCCqDJ4pTnoj
o53hDOqmkHubKgq/5U4ZJDsJ3iK3gPq+hx/lxTZ699ZXX5Pkt8Tmc6PWoH6mmMC0
4DNDnCKz2KK0Hf0GiazM7Vw4l6GTvDZquW8WONo/YHe+7L40FVFP6koVI18owpoi
cENNkKp7VdwJ2iPjCyb1O3lIn4Drabv1HL2MqxdqpD1r3VlyTqzUbYre8QIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOUXiNcmb8maiWd200CRLdDxyKxBMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNVJlSTF5WnZ5WnFKWjNiVFFKRXQwUEhJckVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAAVT
lgMEAAXnRgMEAAXnUgMEAAXnYAMEAAXnywMEAAXn4QMEAAXn6gMEAE1aFgMEAE1a
JwMEAE1aKQMEAE1aNAMEAE1aOgMEAFVdAQMEAVVdBgMEAFVdFgMEAFmQDgMEAFmQ
EAMEAFmQGQMEAFmQIwMEAF75mQMEAF75njANBgkqhkiG9w0BAQsFAAOCAQEASGnC
fnM0AA7FE/wGqNoE6zOczAy6s0acLI+l/ZdMCc7Zb+xOzIAGW3o7y5/Kw7AagFoL
mGtz2ViZoCNQ4VA4BrZgLKlQtddwViAuwcv2XXo0HqnMErIYJvERux0CZmyhP5RC
5umLdmt44czd4OYsLp6WnEElD+Y1L2DbTZpz/r93095iqVHwnvpXI1nogBXW5050
wj9LPjhB51uQzXwGBwIHjRuPQxfEEmY7KCm9nPJi6FKhOUiOH4emyM2Im7xcC8FO
kPP9uvQR3CNDoJM7HaaYwyKVKeKnzQPJtTDCiGKwHjsEIymUqJEHQ3HK7ROqtW23
um6JlTDJxWDmQKDKzw==
-----END CERTIFICATE-----
Generated at Tue May 6 21:11:02 2025 by rpki-client