Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa
File: Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa (raw, json)
Hash identifier: /X5EutEm7vdfoKklrEHO/rbL7vz/kb7MtLIMtv6Btbs=
Subject key identifier: 3F:1E:62:2E:B3:1F:02:76:A1:61:6F:1D:EC:A7:F8:B0:FE:4C:43:B7
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019947FEF363C8772297FBD90EB480B15F68
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa
Signing time: Sun 14 Sep 2025 11:31:54 +0000
ROA not before: Sun 14 Sep 2025 11:31:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.130.187.0/24 maxlen: 24
45.140.4.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.20.0/22 maxlen: 24
77.83.48.0/23 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
88.218.239.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:fe:f3:63:c8:77:22:97:fb:d9:0e:b4:80:b1:5f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 14 11:31:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f1e622eb31f0276a1616f1deca7f8b0fe4c43b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:fe:41:80:6a:c6:a0:44:60:5b:bc:dc:3d:
41:68:01:1c:e0:e2:2e:c4:26:99:ae:ba:21:5a:e4:
75:16:41:a2:d6:e6:62:e0:00:ab:b6:d8:7c:93:a9:
6b:a2:5d:7d:52:6c:83:8c:d2:bf:92:ea:b7:aa:79:
61:a5:d6:68:9b:6a:7d:a0:1c:ce:69:c4:d9:67:3a:
78:0a:8d:dc:d5:4c:2e:8a:0f:a4:b4:27:04:eb:8e:
e4:0c:90:c1:6b:50:50:7f:68:d8:d1:ad:a1:2b:f6:
93:63:10:12:39:e1:5d:9c:36:8c:25:9f:95:ee:94:
9d:36:4a:a5:3c:b0:14:cc:b9:9c:60:60:a6:b1:cf:
62:bf:8b:a0:fd:dd:94:03:7d:58:3d:c8:48:32:4f:
29:fd:07:6b:53:ab:09:dd:c8:de:3b:96:ef:52:d1:
5f:43:0b:27:90:28:21:77:69:7e:b4:4e:94:09:c0:
00:61:9a:75:d7:d9:22:03:20:d8:f8:18:8b:22:5a:
f7:12:b2:04:c1:29:52:b2:d9:67:89:a4:43:da:97:
2c:37:9a:6b:1f:a5:2a:83:fe:e9:06:cb:ba:69:f0:
d9:c3:43:fc:c1:99:40:8c:ac:1b:4f:6d:d1:c4:cd:
49:58:7c:e1:18:29:f2:9d:a8:5a:d8:24:38:dd:30:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:62:2E:B3:1F:02:76:A1:61:6F:1D:EC:A7:F8:B0:FE:4C:43:B7
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/24
31.40.194.0/24
45.130.184.0/22
45.140.4.0/24
45.140.6.0/23
45.154.120.0/22
77.83.20.0/22
77.83.48.0/23
84.252.64.0/22
86.62.53.0-86.62.54.255
88.218.80.0/22
88.218.239.0/24
91.132.126.0/23
91.245.238.0/23
93.177.92.0/23
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
95.214.244.0/22
176.118.188.0/23
176.118.191.0/24
185.155.100.0/24
185.177.76.0/23
193.31.124.0/23
193.160.68.0/24
193.160.72.0/24
193.160.74.0/23
194.28.157.0/24
194.53.188.0/22
194.124.41.0/24
212.69.135.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
49:dc:39:ee:46:b3:2a:20:74:be:48:58:32:dd:76:58:99:8e:
3a:c5:9a:11:71:7b:ed:9a:a7:17:d8:95:51:67:c9:a1:3a:5d:
02:19:ae:d0:da:bd:91:1e:54:a1:45:55:94:68:c6:92:ee:29:
bd:54:ee:04:b0:36:34:9f:85:4d:43:2b:86:b4:80:74:6a:a7:
d8:d6:24:1e:a5:01:ab:20:e1:0e:d5:38:ac:60:57:30:09:8f:
49:fb:85:22:2a:02:ac:2e:c2:e2:a2:0d:75:f9:b3:4d:8c:06:
0a:16:4a:75:a8:f6:43:d5:41:39:5d:ab:ca:50:40:35:f8:e2:
1c:2d:6f:d5:d0:36:7b:c9:e5:a4:fa:5c:17:12:70:26:af:77:
92:83:5b:6c:60:d8:9a:a8:67:62:0b:f3:52:f1:a0:e7:27:57:
15:c0:75:8e:4b:f9:a6:22:05:83:a7:7b:08:20:24:54:41:72:
35:f2:24:6b:ff:e7:26:20:2f:78:49:58:26:ff:97:5e:ee:71:
d0:60:aa:0b:e2:74:75:26:1a:a9:98:b5:4e:22:cd:d6:0f:cf:
b7:c7:08:2c:06:50:ed:63:3c:fb:f6:48:00:84:f7:1c:8a:2e:
91:69:23:d4:82:1d:41:0d:af:77:3e:d8:dc:a9:51:5f:7d:f9:
6b:05:61:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:04 2025 by rpki-client