Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa
File: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (raw, json)
Hash identifier: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=
Subject key identifier: E0:8C:45:46:53:2B:63:93:34:78:71:ED:67:65:0E:B5:91:EA:C9:5D
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 01967CC50BD5287E6570F4FD2D34012FF2B7
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa
Signing time: Mon 28 Apr 2025 14:20:10 +0000
ROA not before: Mon 28 Apr 2025 14:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198605
IP address blocks: 5.45.56.0/21 maxlen: 24
31.14.72.0/24 maxlen: 24
31.14.73.0/24 maxlen: 24
31.14.74.0/24 maxlen: 24
37.156.184.0/22 maxlen: 24
69.94.64.0/20 maxlen: 24
77.234.40.0/21 maxlen: 24
77.234.40.0/24 maxlen: 24
91.213.143.0/24 maxlen: 24
185.51.228.0/22 maxlen: 24
185.167.64.0/24 maxlen: 24
185.189.92.0/22 maxlen: 24
185.189.94.0/24 maxlen: 24
195.74.76.0/24 maxlen: 24
2001:67c:284::/48 maxlen: 48
2a0b:e180::/29 maxlen: 48
2a0b:e181:604::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:c5:0b:d5:28:7e:65:70:f4:fd:2d:34:01:2f:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Apr 28 14:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e08c4546532b6393347871ed67650eb591eac95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:7d:9f:9f:33:30:72:c6:f6:db:69:25:40:
40:62:aa:40:c3:5f:a9:83:4b:4e:48:86:29:72:a9:
55:0a:78:74:15:7e:3e:3e:6d:07:bf:bd:c3:91:11:
e8:66:6a:63:31:3d:23:66:a7:25:7c:64:cf:a0:1f:
f0:70:03:95:56:ee:ea:8b:f8:db:3d:5e:2f:63:58:
10:c1:1b:4a:56:9b:c3:97:53:fc:55:60:14:3f:13:
9f:24:29:c5:5b:87:71:02:27:6f:7a:73:3d:cb:58:
15:67:0f:4d:ba:78:e3:fb:b1:b7:a3:1c:3a:52:26:
f7:65:eb:e8:61:d7:75:e4:4e:e5:4d:f8:64:41:9b:
a9:5b:5b:0d:29:9f:e0:16:30:b9:04:ba:24:2a:e3:
aa:9d:1b:97:f8:8f:90:b1:56:db:6b:cf:36:87:c0:
51:49:5a:21:c1:c6:01:fe:2b:9e:2c:47:53:6b:5b:
33:7a:24:c1:22:76:09:a8:6a:37:5e:28:61:8f:28:
b9:47:72:f9:47:ec:ca:0d:d4:91:79:2e:14:d2:c4:
4d:e8:09:cf:c5:32:60:0d:3d:bb:78:72:d2:b4:a0:
d5:3c:0b:26:f1:0e:67:69:a1:09:02:18:6b:23:25:
8b:6b:c2:b5:77:4a:3a:39:70:83:18:fd:53:f0:b8:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:45:46:53:2B:63:93:34:78:71:ED:67:65:0E:B5:91:EA:C9:5D
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.56.0/21
31.14.72.0-31.14.74.255
37.156.184.0/22
69.94.64.0/20
77.234.40.0/21
91.213.143.0/24
185.51.228.0/22
185.167.64.0/24
185.189.92.0/22
195.74.76.0/24
IPv6:
2001:67c:284::/48
2a0b:e180::/29
Signature Algorithm: sha256WithRSAEncryption
08:3a:09:37:7e:2f:1d:89:f9:3a:14:b4:a1:9f:ae:8d:f4:73:
95:ca:a2:30:ab:fb:ad:92:3c:b3:5a:e5:e7:73:0a:b3:79:32:
d1:0d:f3:69:ec:a0:34:b2:b5:fd:f7:4d:ff:af:71:d2:26:c9:
c0:ac:76:a9:06:a7:b4:81:12:26:74:5d:93:d3:55:d0:c8:1d:
b6:12:82:da:77:7b:b9:f8:9d:4d:7e:b9:f8:4c:79:2c:75:03:
65:bf:37:de:1a:32:d8:31:84:42:16:b4:62:52:89:9c:c9:b9:
48:70:3f:54:17:ad:a6:dd:34:9b:4b:39:f5:c7:4b:8c:04:f0:
97:96:50:c7:6d:36:52:ab:db:82:8d:b0:b8:0e:8c:3c:fd:22:
f4:d1:10:83:5e:a5:7b:e6:28:7d:f7:0c:75:57:00:18:10:5f:
a4:23:fc:10:ee:df:c6:cf:bf:a9:a8:e6:0a:59:cf:18:91:b8:
7d:59:7a:f5:8b:b1:99:61:48:22:0e:c6:a2:73:b0:57:24:ea:
d2:b9:8f:e7:23:da:3c:f3:9c:e5:18:98:bb:23:20:e1:68:48:
6c:39:95:08:9f:19:ec:50:f8:8c:d0:85:75:be:95:e4:1e:61:
ba:cf:17:73:e1:bb:07:30:ce:00:27:9d:c7:4f:9b:13:ec:af:
3f:d3:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:59:59 2025 by rpki-client