Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/8selzdDBcWCOuVgfCsfOfBE5_CU.roa
File: 8selzdDBcWCOuVgfCsfOfBE5_CU.roa (raw, json)
Hash identifier: p2O5tRV4Q6XqdGNl3EZYTg9FiLjgZdrbbWtNR0sxUHQ=
Subject key identifier: F2:C7:A5:CD:D0:C1:71:60:8E:B9:58:1F:0A:C7:CE:7C:11:39:FC:25
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019778DF6E197AF18A704B72E3BC0C7F497A
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/8selzdDBcWCOuVgfCsfOfBE5_CU.roa
Signing time: Mon 16 Jun 2025 13:13:17 +0000
ROA not before: Mon 16 Jun 2025 13:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57768
IP address blocks: 5.187.14.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.128.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.130.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:df:6e:19:7a:f1:8a:70:4b:72:e3:bc:0c:7f:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jun 16 13:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2c7a5cdd0c171608eb9581f0ac7ce7c1139fc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:0b:8f:cd:c1:5a:1a:01:19:1b:e9:39:b7:
37:b6:f7:c6:ee:4a:35:b8:a8:25:a6:36:3d:29:58:
c1:d0:5d:31:b6:44:3a:f7:1f:38:87:04:be:bb:98:
28:b5:84:50:61:e4:3c:a5:3a:44:fc:da:10:1a:76:
a3:fb:60:cb:4b:a0:a8:88:b9:43:f7:48:d9:a2:78:
f9:2f:fc:ba:4e:f2:89:2a:c4:11:f5:d9:a8:f2:e6:
9e:13:e6:fe:5d:9e:1e:d6:f9:94:dd:19:07:90:fc:
ef:3f:c9:ec:02:05:75:3c:49:a9:60:e1:37:87:9d:
ca:2d:c9:cd:8b:8f:55:28:27:97:7c:97:16:4d:28:
f3:1c:e1:fc:50:34:7a:01:05:b7:39:da:15:0e:68:
0a:38:2b:56:39:d7:77:de:d5:71:e9:bc:fe:07:7e:
3f:d1:4f:c0:90:ec:ef:0d:ba:73:e7:3b:be:71:61:
2d:e6:b2:7e:59:d7:fd:84:ea:11:74:1d:18:b9:ce:
5f:83:7b:ff:3c:0c:fc:37:e5:68:b5:4b:11:f1:66:
91:8e:2b:5a:60:8c:ea:4a:20:db:d6:5f:b5:e0:17:
26:a0:0e:b8:66:d0:cf:60:27:46:3d:1e:ca:31:3a:
dc:d5:d6:11:3a:aa:90:a2:fa:62:2d:be:b8:29:b2:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:A5:CD:D0:C1:71:60:8E:B9:58:1F:0A:C7:CE:7C:11:39:FC:25
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/8selzdDBcWCOuVgfCsfOfBE5_CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.14.0/24
37.75.128.0/21
Signature Algorithm: sha256WithRSAEncryption
99:10:a1:09:6a:d4:56:b3:28:79:75:18:ed:51:b0:c3:4e:6f:
e9:98:6d:cd:f4:44:45:80:bd:ff:8c:83:0b:37:38:c1:17:30:
17:60:da:3d:db:20:a5:72:12:bf:03:3b:37:61:5a:70:6f:a4:
f1:26:0c:3d:ce:37:b8:36:2e:32:1d:0b:52:4e:1d:2b:a4:ea:
c4:3b:18:04:09:f0:d5:90:80:e5:36:ec:11:42:c8:fb:b3:f4:
06:77:df:f5:95:28:83:bd:4e:c3:34:31:cb:3d:83:f7:9c:85:
fb:48:9d:46:8a:e1:b1:a8:92:04:5e:f0:c6:3a:08:d6:d7:3a:
9e:79:4f:d5:21:9f:2b:38:4c:04:2e:67:a5:74:83:47:73:e8:
d2:55:67:89:f3:fd:f1:f8:1a:10:05:50:dd:a9:32:36:8d:4a:
56:c5:a6:6b:e4:6d:3f:4f:58:94:ee:63:62:de:d7:aa:bf:1c:
48:be:57:95:95:54:87:90:27:ee:02:15:a2:e8:ec:a8:4b:c1:
1e:42:e1:92:b4:ff:ca:be:7e:14:16:87:06:4b:d4:e7:61:06:
f8:df:d8:7e:86:40:79:42:4b:0c:24:cb:ac:68:d9:c4:0c:c9:
61:46:a7:79:b0:01:0c:c9:32:a0:4a:d4:9f:a8:18:a7:35:65:
e2:36:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:15:39 2025 by rpki-client