Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ubLp4PH2ihPkEr2ZdvuLpdWi76c.roa
File: ubLp4PH2ihPkEr2ZdvuLpdWi76c.roa (raw, json)
Hash identifier: x6ptL6V/wUs3rF3ZKgR1NFUTk/mmoKuNHDm04MrbmvQ=
Subject key identifier: B9:B2:E9:E0:F1:F6:8A:13:E4:12:BD:99:76:FB:8B:A5:D5:A2:EF:A7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01977F0E608620B48F1949BE2E44D68DFDCA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ubLp4PH2ihPkEr2ZdvuLpdWi76c.roa
Signing time: Tue 17 Jun 2025 18:02:18 +0000
ROA not before: Tue 17 Jun 2025 18:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0e:60:86:20:b4:8f:19:49:be:2e:44:d6:8d:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 17 18:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b2e9e0f1f68a13e412bd9976fb8ba5d5a2efa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:27:41:4a:d7:37:d3:56:55:ee:65:6b:d9:
68:77:df:f7:23:15:0d:52:81:c6:a6:de:7a:d9:2c:
6e:5e:80:2f:1c:7e:c0:a6:77:68:9d:be:01:47:37:
e4:37:ba:1b:fe:bd:eb:22:e7:59:22:cb:4a:a8:14:
f9:a2:3a:52:f6:ac:9a:89:48:2c:8b:d6:41:c3:ef:
f5:bc:a1:8d:d2:7d:92:47:4e:ff:1a:17:92:29:6b:
38:e6:3e:1b:36:ef:c9:47:42:c2:93:16:8b:70:af:
ea:a2:07:9c:ff:6e:67:22:5e:07:e4:6c:42:52:73:
64:84:85:af:1c:ca:09:9c:a7:66:1b:2b:d1:2c:38:
1e:56:c5:c5:38:bb:70:c8:7a:62:56:29:19:f4:2e:
34:de:48:07:94:98:07:8b:0e:74:cd:f6:8b:7b:a1:
e6:79:aa:30:44:b9:33:a0:ae:f3:7d:9a:28:be:34:
13:e4:62:48:95:e9:53:7c:ef:72:34:b2:40:ff:f7:
10:0a:8f:f1:80:5c:e3:51:9c:b3:f8:6c:5b:77:e3:
d6:9a:bb:5f:87:c9:2f:67:16:28:de:dc:ef:90:74:
b7:89:b7:48:17:fc:44:3a:73:09:64:22:e1:83:e0:
36:25:e0:52:b3:fd:5a:9a:74:2b:b2:ed:c9:0a:ee:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:E9:E0:F1:F6:8A:13:E4:12:BD:99:76:FB:8B:A5:D5:A2:EF:A7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ubLp4PH2ihPkEr2ZdvuLpdWi76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.231.80.0/24
94.103.163.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:59:29:7d:ba:29:67:6f:5a:9c:82:af:d2:77:09:af:87:
4e:a1:35:a5:0c:18:04:1a:2d:93:0e:16:45:52:fb:4d:9a:a4:
ab:18:9f:d7:4b:5d:c0:6f:ba:0d:5a:3f:29:98:87:c7:34:89:
57:0d:9b:48:f1:63:19:0b:e2:49:f9:fc:f1:ab:cf:83:26:06:
67:47:0c:5e:38:b3:19:aa:0b:2b:51:db:fb:4b:7d:c2:35:8f:
bf:8e:b0:7e:f7:87:09:55:b6:f6:d5:34:3b:f4:df:9b:a8:00:
61:ae:2f:8e:2a:77:e0:84:1d:ee:54:db:05:ef:b7:21:97:9b:
c5:55:0d:c5:38:5d:6c:51:61:aa:2b:7b:85:9f:5c:ad:7a:29:
de:08:06:43:ac:e6:1f:c1:93:90:0e:94:53:60:58:94:2e:fb:
b8:7c:5e:fc:8f:5e:2d:00:8e:67:24:39:39:a3:4a:66:42:53:
41:8b:f0:5a:ad:88:8d:33:71:30:db:75:00:9e:15:77:38:0d:
ae:81:62:98:c1:14:2d:b9:88:8c:6b:3e:c3:61:b9:df:6a:87:
e0:64:7f:c4:fb:6f:43:8f:87:98:28:00:0d:77:b6:9f:70:e1:
86:80:74:20:ef:05:be:ea:8d:f3:0f:e3:61:17:04:1c:39:63:
90:3e:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:18:35 2025 by rpki-client