Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/Uyxb19QbZRCxbhE27fnbxseC3Oc.roa
File: Uyxb19QbZRCxbhE27fnbxseC3Oc.roa (raw, json)
Hash identifier: BnjOueluG7H/015ihaAL3TJm9SFqiqVP5xJ7qb5hKFU=
Subject key identifier: 53:2C:5B:D7:D4:1B:65:10:B1:6E:11:36:ED:F9:DB:C6:C7:82:DC:E7
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 0197ACDAFE34682E9B1E86C14ED13AC13C6E
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/Uyxb19QbZRCxbhE27fnbxseC3Oc.roa
Signing time: Thu 26 Jun 2025 15:28:42 +0000
ROA not before: Thu 26 Jun 2025 15:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6775
IP address blocks: 5.154.186.0/24 maxlen: 24
79.134.224.0/19 maxlen: 24
79.134.225.0/24 maxlen: 24
79.134.227.0/24 maxlen: 24
79.134.228.0/24 maxlen: 24
79.134.229.0/24 maxlen: 24
79.134.230.0/24 maxlen: 24
79.134.231.0/24 maxlen: 24
79.134.232.0/24 maxlen: 24
79.134.233.0/24 maxlen: 24
79.134.234.0/24 maxlen: 24
79.134.235.0/24 maxlen: 24
79.134.236.0/23 maxlen: 23
79.134.236.0/24 maxlen: 24
79.134.237.0/24 maxlen: 24
79.134.238.0/23 maxlen: 23
79.134.240.0/20 maxlen: 24
79.134.243.0/24 maxlen: 24
79.134.247.0/24 maxlen: 24
79.134.250.0/23 maxlen: 23
79.134.250.0/24 maxlen: 24
79.134.251.0/24 maxlen: 24
79.134.252.0/24 maxlen: 24
79.134.254.0/23 maxlen: 23
85.209.172.0/22 maxlen: 24
128.0.33.0/24 maxlen: 24
185.22.52.0/22 maxlen: 24
185.22.52.0/24 maxlen: 24
2001:4b28::/32 maxlen: 48
2a01:528::/32 maxlen: 48
2a01:528:7000::/40 maxlen: 40
2a01:528:7100::/40 maxlen: 40
2a01:528:7200::/40 maxlen: 40
2a01:528:7300::/40 maxlen: 40
2a01:528:7400::/40 maxlen: 40
2a01:528:7500::/40 maxlen: 40
2a01:528:7600::/40 maxlen: 40
2a01:528:7700::/40 maxlen: 40
2a01:528:7800::/40 maxlen: 40
2a01:528:7900::/40 maxlen: 40
2a01:528:7a00::/40 maxlen: 40
2a01:528:7b00::/40 maxlen: 40
2a01:528:7c00::/40 maxlen: 40
2a01:528:7d00::/40 maxlen: 40
2a01:528:7e00::/40 maxlen: 40
2a01:528:7f00::/40 maxlen: 40
2a04:1d40::/29 maxlen: 29
2a04:1d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:da:fe:34:68:2e:9b:1e:86:c1:4e:d1:3a:c1:3c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jun 26 15:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=532c5bd7d41b6510b16e1136edf9dbc6c782dce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:98:9e:9d:32:c4:17:69:d6:f9:35:44:fb:
5f:52:0f:d8:64:5b:1c:d9:95:02:ba:58:96:fd:28:
05:93:cd:10:03:28:1a:fe:dc:f0:76:65:36:dd:8b:
c9:20:71:a2:7f:50:4a:ce:e5:0e:88:5e:67:7b:9c:
73:f5:73:86:c0:a3:15:0f:f9:ad:44:0d:07:b9:a3:
ba:73:01:d8:c4:61:ab:a2:37:b1:4d:4c:c0:c1:25:
67:d4:71:a9:a0:33:3f:a1:de:de:af:ce:81:98:d9:
e3:8d:60:44:2a:72:a9:3f:01:ff:68:e2:b4:c2:e2:
2a:19:84:a5:f9:6c:3c:38:88:89:a8:25:a2:63:02:
89:65:34:5c:85:8a:b0:4a:67:4d:0c:92:43:b2:70:
2e:d1:e8:13:f3:a3:f9:73:57:1d:34:04:81:32:fa:
7f:cc:24:cc:62:a7:ae:50:cb:26:ef:97:cc:99:22:
95:1f:c8:cf:03:a9:6e:86:cc:e8:ac:19:e1:09:2c:
27:99:94:01:33:5a:18:0c:7f:c5:d6:4d:f7:8a:0c:
3e:f4:88:44:e6:38:0c:1b:64:20:32:ac:cf:0f:bb:
9f:33:45:c0:cc:4d:02:41:fb:f6:eb:d3:f8:53:32:
ab:d9:1f:5e:19:7c:3e:ac:09:1f:88:ac:13:0b:10:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:5B:D7:D4:1B:65:10:B1:6E:11:36:ED:F9:DB:C6:C7:82:DC:E7
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/Uyxb19QbZRCxbhE27fnbxseC3Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.186.0/24
79.134.224.0/19
85.209.172.0/22
128.0.33.0/24
185.22.52.0/22
IPv6:
2001:4b28::/32
2a01:528::/32
2a04:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
97:03:35:19:b0:54:fa:c8:10:1f:1c:87:b2:54:c5:4c:dd:4e:
46:89:bf:44:92:97:b5:e0:3e:a3:d9:67:c1:4e:86:d4:9c:54:
dc:a6:e3:bd:4c:4a:21:e3:e0:c4:32:ad:f5:2a:8a:cc:45:8a:
df:24:8b:3a:32:90:54:76:c5:36:01:b8:be:e1:69:2d:f4:10:
61:90:21:01:9e:6b:d5:d8:08:3c:9e:d0:ef:ed:1d:5c:97:69:
82:db:70:5d:ca:d8:dc:7e:25:bc:ba:64:b2:d7:74:c5:cb:06:
f4:0c:1e:03:a5:54:50:df:85:9b:a9:19:5b:c1:74:e0:58:f2:
57:33:7f:23:72:23:e0:04:6b:0f:58:9c:77:24:1c:98:3b:50:
28:ff:37:b6:12:56:77:21:c8:4d:56:df:69:c3:07:3f:4c:96:
1e:d0:9f:04:6a:d4:2a:03:12:22:57:c4:f1:e4:6b:6d:44:11:
67:c7:b2:23:f7:3e:36:b8:b6:6a:ed:8d:51:89:75:58:a8:0e:
7f:ba:c8:f4:47:3b:4d:f2:85:95:45:fd:73:48:77:e1:be:d1:
57:cb:ee:6c:f1:d1:12:c3:86:b4:ed:88:0c:f3:a8:38:00:37:
fd:d6:27:57:2a:58:df:50:80:fd:dc:ff:c7:66:a2:b8:95:3c:
49:8f:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:23 2025 by rpki-client