Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa
File: eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa (raw, json)
Hash identifier: bEXIrBrzj/GHJADmo6N/Mu/Sg4DT82z14P1KN6YbAzU=
Subject key identifier: 78:C3:AD:24:B1:F2:45:2D:27:95:57:E4:3E:CF:59:61:5D:AC:7C:9B
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019995F93B94C35B008790DD6953AA107F85
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa
Signing time: Mon 29 Sep 2025 14:56:02 +0000
ROA not before: Mon 29 Sep 2025 14:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6424
IP address blocks: 5.183.96.0/22 maxlen: 24
103.243.124.0/22 maxlen: 24
146.19.95.0/24 maxlen: 24
146.19.249.0/24 maxlen: 24
185.112.251.0/24 maxlen: 24
185.162.183.0/24 maxlen: 24
185.166.144.0/24 maxlen: 24
188.93.192.0/21 maxlen: 24
188.93.196.0/24 maxlen: 24
188.93.198.0/24 maxlen: 24
188.93.199.0/24 maxlen: 24
193.107.13.0/24 maxlen: 24
193.109.184.0/21 maxlen: 24
193.109.184.0/24 maxlen: 24
193.163.151.0/24 maxlen: 24
212.52.23.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2001:b18:a::/48 maxlen: 48
2001:b18:b::/48 maxlen: 48
2001:b18:1000::/48 maxlen: 48
2001:b18:1001::/48 maxlen: 48
2001:b18:1002::/48 maxlen: 48
2001:b18:1008::/48 maxlen: 48
2001:b18:1012::/48 maxlen: 48
2001:b18:1016::/48 maxlen: 48
2001:b18:1018::/48 maxlen: 48
2001:b18:1020::/48 maxlen: 48
2001:b18:1031::/48 maxlen: 48
2a0b:e740::/29 maxlen: 29
2a0d:82c0::/29 maxlen: 48
2a0d:82c0::/32 maxlen: 32
2a0d:82c7:d::/48 maxlen: 48
2a0e:5f00::/29 maxlen: 48
2a0e:5f00::/32 maxlen: 32
2a0f:7700::/29 maxlen: 29
2a0f:8900::/29 maxlen: 29
2a0f:d300::/29 maxlen: 29
2a10:ee40::/29 maxlen: 29
2a11:c00::/29 maxlen: 29
2a12:c1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:f9:3b:94:c3:5b:00:87:90:dd:69:53:aa:10:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Sep 29 14:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c3ad24b1f2452d279557e43ecf59615dac7c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:25:2d:d3:08:61:d5:73:bf:be:a0:23:cd:
b4:ff:df:33:6a:86:89:1b:88:d3:a1:b8:16:28:b0:
3a:3a:a2:5e:57:6b:67:de:fc:f5:8d:92:71:7c:90:
7b:32:a5:e3:60:31:26:3f:a7:36:37:57:94:b3:19:
56:cc:af:d9:6d:9e:73:bf:52:ac:5b:2a:76:3d:8f:
ef:1d:ab:c8:a1:50:5f:5f:7d:bd:6a:59:ae:81:d3:
f6:a5:4b:14:f8:85:42:7b:67:0a:06:79:c4:a2:11:
98:46:ac:b9:7a:27:7a:08:0e:97:73:21:af:13:16:
b2:29:79:f4:d6:42:74:96:a2:4f:97:a9:b4:48:ac:
e8:a1:d6:47:fd:d2:3f:58:0d:a3:f8:88:6c:c5:54:
65:7d:66:7c:a6:58:f1:c4:f8:39:07:cf:76:99:8e:
52:63:fc:f3:a2:d3:ea:9f:8f:44:59:91:32:4e:dd:
fd:be:d1:94:c3:ed:52:03:3b:a3:2e:49:3d:b5:c3:
c1:78:ac:f5:64:91:c7:a0:8d:fa:67:3a:93:3a:16:
97:10:f6:4c:9d:95:96:c9:ea:12:f7:d6:63:86:50:
99:2d:ab:53:86:a1:97:aa:25:2b:a0:36:89:2d:6a:
f0:d1:07:55:e4:71:55:99:12:b3:4e:be:c3:a4:5b:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C3:AD:24:B1:F2:45:2D:27:95:57:E4:3E:CF:59:61:5D:AC:7C:9B
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.96.0/22
103.243.124.0/22
146.19.95.0/24
146.19.249.0/24
185.112.251.0/24
185.162.183.0/24
185.166.144.0/24
188.93.192.0/21
193.107.13.0/24
193.109.184.0/21
193.163.151.0/24
212.52.23.0/24
IPv6:
2001:b18::/32
2a0b:e740::/29
2a0d:82c0::/29
2a0e:5f00::/29
2a0f:7700::/29
2a0f:8900::/29
2a0f:d300::/29
2a10:ee40::/29
2a11:c00::/29
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
21:24:8c:44:c2:be:38:70:c7:ac:b0:f8:e6:9b:b2:24:83:83:
25:b8:ad:90:61:29:e5:6d:41:d0:2b:f1:49:f6:ea:fa:ea:66:
c2:7e:3a:f0:1b:d6:b3:48:ef:b1:13:94:9d:4e:0e:10:fd:7b:
41:c7:b1:53:72:d5:87:e8:06:12:54:20:b8:32:2c:84:8d:87:
5c:0d:9a:d2:6c:c4:c2:97:fd:78:1a:a7:e9:6d:d7:df:f3:9a:
d6:b4:18:76:b2:8c:b8:74:62:79:d4:10:b9:52:ab:1b:43:f9:
90:6f:03:62:bd:05:65:c9:e0:1b:24:1d:17:c3:64:c0:bc:a1:
18:80:75:36:fd:8a:a3:b5:67:c1:da:ad:9a:53:b1:6c:11:e5:
8c:27:aa:46:3d:c2:d6:19:fa:64:a6:ad:30:b2:25:d9:9c:4d:
6a:4a:44:c6:d7:9f:74:66:1a:a4:ce:96:16:76:7f:cf:04:e1:
1c:c1:ed:f7:7c:3e:cd:9c:5c:32:ad:8d:9c:fc:c2:17:8a:c0:
79:ac:18:4d:cb:1f:25:4c:ee:96:78:cc:62:7d:c4:ff:48:38:
15:92:91:78:d0:f5:20:4e:76:04:83:e4:fc:2f:e7:e2:c5:bc:
73:f3:d8:e1:9f:a8:60:15:68:63:c0:81:56:f5:b5:d6:29:39:
03:0e:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:31 2025 by rpki-client