Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9gjjmBHkvKyN0-6Am8-nnXM3bh0.roa
File: 9gjjmBHkvKyN0-6Am8-nnXM3bh0.roa (raw, json)
Hash identifier: MCRq2QW0V4m3Nq0mYiKwAotKrOaehBzgomZWab5/HE0=
Subject key identifier: F6:08:E3:98:11:E4:BC:AC:8D:D3:EE:80:9B:CF:A7:9D:73:37:6E:1D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019795E02389821B6AD73D7E6BFCD49D186A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9gjjmBHkvKyN0-6Am8-nnXM3bh0.roa
Signing time: Sun 22 Jun 2025 04:23:03 +0000
ROA not before: Sun 22 Jun 2025 04:23:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 5.175.203.0/24 maxlen: 24
89.106.74.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:e0:23:89:82:1b:6a:d7:3d:7e:6b:fc:d4:9d:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 22 04:23:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f608e39811e4bcac8dd3ee809bcfa79d73376e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:ac:26:7d:2c:77:b1:b6:5f:72:a2:ca:7e:
83:55:26:32:53:26:9f:da:7d:29:a9:53:e2:36:bb:
5e:2d:c7:a1:6c:72:2a:7e:51:8d:fd:2a:fa:39:3d:
1b:98:2d:3e:ba:18:5d:7d:80:1f:c1:43:e6:88:d4:
59:18:d7:9d:4e:f1:59:f9:48:94:cf:8a:57:68:43:
71:a7:15:66:2f:1a:e8:f6:d5:37:54:b2:bd:cb:1d:
05:ed:1f:40:82:28:c7:9f:ef:1a:ff:59:a8:e1:ef:
46:3b:39:0a:58:ec:06:1d:59:c7:c6:30:99:ee:81:
0c:14:6a:28:33:6f:f6:9e:3a:30:a1:71:e1:80:c3:
54:4d:87:9d:ee:55:0c:1b:e3:28:7f:ff:1f:26:12:
26:8b:31:c6:0f:4a:99:f0:62:db:f8:fa:25:d6:a4:
6e:05:e9:d8:16:87:c0:fd:90:7a:f5:11:24:24:62:
31:3e:7e:11:e7:a0:06:61:6a:2a:dd:53:f9:a5:97:
76:d2:c9:db:a0:06:68:4a:95:a1:81:b8:88:ed:86:
9e:9b:20:90:72:a1:20:5f:27:88:9b:4d:ec:6e:13:
37:9e:6a:76:3a:95:64:21:12:05:62:c5:8c:2c:1c:
51:49:a1:66:6b:d0:b3:f6:66:02:be:4c:e4:b9:85:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:E3:98:11:E4:BC:AC:8D:D3:EE:80:9B:CF:A7:9D:73:37:6E:1D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9gjjmBHkvKyN0-6Am8-nnXM3bh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.203.0/24
89.106.74.0-89.106.77.255
Signature Algorithm: sha256WithRSAEncryption
31:c8:28:a5:e2:70:ae:51:88:39:8d:1a:61:d0:0b:f8:64:10:
83:b7:af:5c:63:bb:15:88:73:27:b8:29:13:2c:cd:2b:f9:3b:
de:b9:50:92:3f:17:e1:75:19:aa:ed:1a:d6:a8:bd:1f:cf:08:
54:ce:9b:d0:a7:be:29:7f:bb:ae:be:b4:3d:8c:0d:35:78:ef:
e9:4c:8e:4c:94:c9:47:67:d1:45:e2:3d:9a:a4:f8:dc:93:e9:
6f:90:69:ce:64:2e:77:38:f3:37:00:7d:b4:b1:1f:83:7a:ba:
c6:11:73:4a:0d:da:b4:d7:21:c6:8f:60:05:49:19:27:d2:57:
7b:b1:df:6e:54:be:65:a2:9f:fd:59:2b:0a:9a:44:37:dd:8a:
4a:16:09:6b:ab:99:43:27:00:1b:76:bf:11:fa:a6:a0:d0:83:
31:4c:36:72:ad:c7:ff:df:a3:f6:51:f7:b8:b3:46:84:a0:0e:
b4:5e:e2:2e:ae:8a:0b:26:2e:2b:88:9d:62:df:45:42:7c:e3:
f7:7f:2f:22:82:b9:4a:38:c2:1c:8f:5f:f5:a2:3f:9e:d2:45:
2a:d0:26:93:76:f7:56:af:47:47:ab:58:3b:95:e6:17:cf:e2:
c5:7a:26:c6:ea:76:b3:50:0b:43:c2:26:84:a3:cb:bd:43:a5:
80:d8:3c:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:13 2025 by rpki-client