Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa
File: 5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa (raw, json)
Hash identifier: NHd1FZ0Cj9dSpCZXcpxcSuivwawk/XLiDV5hFVcK8gs=
Subject key identifier: E5:31:47:FD:E5:B6:A8:85:91:61:72:CF:56:A7:4D:91:80:66:F1:16
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 0198BC1E129644A9B36225564D88B76044DA
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa
Signing time: Mon 18 Aug 2025 07:39:04 +0000
ROA not before: Mon 18 Aug 2025 07:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12963
IP address blocks: 91.197.168.0/22 maxlen: 22
91.218.72.0/24 maxlen: 24
91.218.73.0/24 maxlen: 24
91.218.74.0/24 maxlen: 24
91.218.75.0/24 maxlen: 24
94.247.224.0/21 maxlen: 21
94.247.224.0/23 maxlen: 23
176.97.0.0/21 maxlen: 21
185.192.216.0/22 maxlen: 22
194.183.160.0/19 maxlen: 19
213.160.128.0/19 maxlen: 19
2a00:9880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:1e:12:96:44:a9:b3:62:25:56:4d:88:b7:60:44:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Aug 18 07:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e53147fde5b6a885916172cf56a74d918066f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:a5:61:3a:c3:98:4f:1e:e0:f2:aa:50:db:
67:ee:12:43:6e:30:58:88:ca:d2:d0:72:2b:f0:98:
ff:f1:85:90:43:5e:ae:1f:17:84:a9:72:05:16:72:
c1:7e:da:c7:b9:66:62:84:60:73:fe:eb:1d:1a:41:
b0:fe:07:a3:33:9d:1e:7c:aa:ef:f3:60:fa:b9:93:
ff:0d:00:af:6b:96:4e:f4:d6:ca:16:1c:72:a8:3b:
2f:64:7d:7f:ed:e4:d7:49:06:7e:ae:65:e0:90:dd:
87:75:dc:e8:64:0b:e0:a3:56:c9:47:bf:7a:fb:1f:
1a:98:92:10:a4:0f:ef:fc:d3:d4:45:96:1d:88:a3:
d5:1f:f5:3c:6f:ec:d6:48:76:c5:ef:72:5d:8a:83:
2f:13:26:a6:1b:76:00:d6:8f:9d:60:af:71:d3:17:
9b:72:cd:9d:4c:c8:de:f8:2d:82:ee:56:52:bc:d4:
18:d3:50:a0:16:44:cf:0d:39:f9:e5:12:05:89:8d:
7e:82:8f:b9:87:73:cf:13:63:a8:99:08:2c:e5:24:
04:3d:fb:d6:4f:8e:f7:20:36:b4:ea:77:ad:f8:e3:
42:68:2a:2c:dd:a2:fd:73:d3:04:41:d7:7d:94:d8:
12:d6:79:c0:3b:3d:73:43:bf:62:0d:ac:e3:0f:e2:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:47:FD:E5:B6:A8:85:91:61:72:CF:56:A7:4D:91:80:66:F1:16
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.168.0/22
91.218.72.0/22
94.247.224.0/21
176.97.0.0/21
185.192.216.0/22
194.183.160.0/19
213.160.128.0/19
IPv6:
2a00:9880::/32
Signature Algorithm: sha256WithRSAEncryption
33:6e:08:f7:26:74:fe:9e:eb:25:ee:d9:8b:4c:c8:5f:da:c8:
8f:63:af:22:c4:61:94:f7:4b:61:31:f7:05:49:d6:bd:35:62:
9b:31:d5:07:9f:c9:49:3b:13:9f:6d:8e:fc:10:93:84:38:60:
7f:71:6d:a5:f0:6b:80:3f:20:f8:5e:f9:df:d0:10:e6:1c:e4:
9f:f2:a1:fd:3a:ee:1e:8c:f9:07:a8:f4:ad:1c:cc:1f:02:ff:
64:26:53:f7:7e:54:bd:33:a2:ae:95:b1:61:40:67:f8:0b:a6:
71:b9:65:ba:0a:97:5c:b0:ca:42:c9:4b:c9:90:f8:6f:61:c1:
4a:d4:20:0d:76:f5:01:a1:0b:66:76:a2:c6:97:3a:28:c6:e5:
19:e2:d4:33:a3:1b:71:06:44:9e:f8:d2:87:62:79:83:d4:d2:
15:7b:7a:a3:03:e1:0d:5e:2e:11:d8:ee:0e:75:d3:58:43:c0:
4e:70:72:f7:15:3f:a7:f4:9f:81:d1:38:0b:0a:7b:a3:df:ed:
46:dd:d1:e8:72:20:90:f0:97:e8:a1:fc:5c:b7:77:47:66:2e:
b1:40:6d:bd:35:73:ba:1e:7f:65:e6:36:db:aa:9f:6b:30:49:
95:87:19:66:41:c9:29:ff:b6:4e:d4:47:70:95:9f:b5:2a:9f:
f5:f7:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:55 2025 by rpki-client