Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nQE_4KGwCHkyWHEgv6fUzaQofXs.roa
File: nQE_4KGwCHkyWHEgv6fUzaQofXs.roa (raw, json)
Hash identifier: oo0IyshOkB5HRlUPqt8B2iKoLtnPnAUVNo/XzwHy2Qw=
Subject key identifier: 9D:01:3F:E0:A1:B0:08:79:32:58:71:20:BF:A7:D4:CD:A4:28:7D:7B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01968A0E3B44B0DB67D97F539FB57364480D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nQE_4KGwCHkyWHEgv6fUzaQofXs.roa
Signing time: Thu 01 May 2025 04:15:10 +0000
ROA not before: Thu 01 May 2025 04:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:0e:3b:44:b0:db:67:d9:7f:53:9f:b5:73:64:48:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 1 04:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d013fe0a1b0087932587120bfa7d4cda4287d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:6c:f4:1b:06:51:45:33:d1:20:0b:96:79:
e4:ae:17:4f:0f:ce:e2:2a:51:56:d6:e4:66:5e:84:
36:5a:10:18:6b:30:51:dc:c7:fb:fe:ed:eb:4b:95:
b8:33:22:7b:95:67:f6:c0:66:3c:8a:16:88:59:7e:
0b:73:4e:70:25:4a:8a:7e:f6:78:4d:55:b1:53:27:
4c:a0:5c:14:e8:df:22:b7:a3:16:80:45:a7:45:b4:
5f:a4:54:5f:ba:64:cb:53:3e:99:09:9f:6e:7f:75:
ce:ac:ee:30:ce:01:30:84:af:99:c9:ae:ec:40:41:
7a:39:52:83:ab:f7:5a:67:90:89:42:fb:cd:47:e2:
57:1a:57:6b:af:07:7c:3b:bd:19:e8:5d:d9:5d:6f:
71:ee:4e:f5:6e:39:fc:4c:68:7c:43:fb:99:a3:00:
c7:8a:9a:10:f6:fd:08:8a:30:13:c1:12:44:43:8a:
58:bb:a6:c3:ba:e9:78:f5:bb:bc:6d:c1:b8:ef:f5:
8b:99:a7:29:1e:e7:1e:82:f6:7a:02:60:e9:b6:20:
d1:ec:fd:b1:0f:65:40:e5:a3:e5:9e:42:3f:1e:9a:
f5:e2:d3:98:aa:01:ca:fa:a0:99:97:0b:d2:e5:a0:
1b:1f:20:67:ee:f9:2e:fa:ad:81:27:ea:79:c6:5c:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:3F:E0:A1:B0:08:79:32:58:71:20:BF:A7:D4:CD:A4:28:7D:7B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nQE_4KGwCHkyWHEgv6fUzaQofXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.175.239.0/24
5.231.25.0-5.231.26.255
85.93.23.0/24
89.106.69.0/24
89.106.71.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:42:83:f9:43:e8:61:dc:7e:04:b1:4d:f4:e1:fe:d9:01:02:
01:72:76:45:62:e8:86:58:f2:85:92:ec:6d:f6:e7:5a:8e:31:
d7:ef:d4:93:ed:89:23:ff:72:22:7e:a7:a5:83:18:10:9a:2e:
10:8f:56:72:cd:09:04:12:32:fc:7d:67:a4:1a:d4:77:cd:b9:
f9:25:37:f3:14:a4:4a:58:60:ef:91:04:77:01:e5:b8:a8:92:
fc:69:d7:9d:66:8e:83:31:d2:62:56:b4:1a:69:eb:af:cb:fe:
c6:6a:73:7b:99:f4:92:72:08:48:28:62:2a:90:27:39:ab:82:
bc:9d:89:e9:7e:2c:a8:10:21:4e:b2:7a:97:67:90:06:a3:07:
80:06:b0:58:6b:7f:ac:5a:07:41:93:69:a4:70:74:40:f1:f5:
d3:61:91:19:0a:a5:4f:ff:eb:81:73:62:86:91:0c:8f:66:d1:
60:c9:e4:55:f6:27:2c:19:e1:57:a4:31:a8:92:be:e8:00:78:
0c:04:c6:a8:11:96:52:79:34:8f:cd:91:07:e6:51:06:b7:dd:
18:a6:c3:46:38:80:d2:f1:7c:6c:83:fb:c8:8d:7c:bb:4a:f7:
a8:ed:3e:c0:6d:af:2d:a3:62:22:00:98:ef:d3:c7:ce:ab:5c:
5c:a1:92:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 15:16:20 2025 by rpki-client