Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vN_gJlY2Dxglpry20_a9D0QpFPI.roa
File: vN_gJlY2Dxglpry20_a9D0QpFPI.roa (raw, json)
Hash identifier: nlKFqe6fZpN/0gNRJMY49nWeIqDYWTXgD28HUe0rLP0=
Subject key identifier: BC:DF:E0:26:56:36:0F:18:25:A6:BC:B6:D3:F6:BD:0F:44:29:14:F2
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01978220D0B1EAF3CC66B4C62CD8E1DCFE63
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vN_gJlY2Dxglpry20_a9D0QpFPI.roa
Signing time: Wed 18 Jun 2025 08:21:17 +0000
ROA not before: Wed 18 Jun 2025 08:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 5.172.179.0/24 maxlen: 24
31.40.202.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.10.248.0/22 maxlen: 22
45.87.255.0/24 maxlen: 24
45.93.12.0/24 maxlen: 24
45.93.14.0/24 maxlen: 24
45.93.15.0/24 maxlen: 24
45.94.228.0/22 maxlen: 22
45.95.28.0/24 maxlen: 24
45.95.148.0/22 maxlen: 22
45.128.129.0/24 maxlen: 24
45.129.4.0/22 maxlen: 22
45.142.254.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
93.190.123.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.222.214.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
194.50.73.0/24 maxlen: 24
194.104.232.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
217.8.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:20:d0:b1:ea:f3:cc:66:b4:c6:2c:d8:e1:dc:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 18 08:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcdfe02656360f1825a6bcb6d3f6bd0f442914f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:94:ee:ca:9f:81:e8:bf:4d:59:2f:d8:3c:
24:18:56:0e:c5:ee:3c:6a:f7:91:22:b9:17:d2:f3:
21:fe:dd:ad:7b:3b:47:d2:0a:e6:9a:25:1c:5d:04:
ed:9f:a9:ce:a4:91:e4:93:b3:c1:1b:d7:65:81:db:
59:ec:ae:f9:08:c3:24:3a:ea:8f:ca:5a:77:b7:49:
8f:2f:8f:7b:f8:4f:c4:f1:d9:c1:31:da:95:6a:09:
6f:64:6d:aa:4f:fe:15:60:ec:10:b1:84:2c:f8:52:
85:70:91:e0:3e:58:49:6b:ee:b3:01:fe:b8:89:09:
4e:3c:a4:e4:8c:dd:2d:e5:fa:48:de:91:ed:65:97:
c9:fc:57:50:51:82:64:aa:e0:30:7b:98:38:0a:b5:
a1:36:11:32:50:33:5d:f2:42:c5:bd:1f:8f:d0:32:
5f:c2:cf:e8:23:1d:66:ff:17:92:77:79:7e:f6:00:
e2:9d:62:d5:9e:48:bc:57:64:f3:f8:fc:46:d6:1a:
4d:3b:5c:02:f6:12:1e:9e:d3:3c:44:ca:1c:90:39:
cd:08:d0:87:cc:2e:4d:38:b3:20:b6:1c:2a:25:f7:
ef:76:21:5c:28:a7:8d:80:00:16:06:d0:e0:1e:ac:
bc:4b:25:4b:12:a4:e8:d2:db:ac:8b:1a:84:1e:42:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:E0:26:56:36:0F:18:25:A6:BC:B6:D3:F6:BD:0F:44:29:14:F2
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vN_gJlY2Dxglpry20_a9D0QpFPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.179.0/24
31.40.202.0/24
31.41.253.0/24
45.10.248.0/22
45.87.255.0/24
45.93.12.0/24
45.93.14.0/23
45.94.228.0/22
45.95.28.0/24
45.95.148.0/22
45.128.129.0/24
45.129.4.0/22
45.142.254.0/24
88.151.11.0/24
91.190.158.0/24
93.190.123.0/24
94.154.188.0/23
94.154.191.0/24
176.116.17.0/24
176.126.98.0/24
176.126.102.0/24
185.222.214.0/24
193.187.106.0/24
194.50.73.0/24
194.104.232.0/24
212.60.7.0/24
217.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:89:09:9e:11:91:6d:74:37:cc:e1:42:39:94:96:f7:a1:81:
65:5b:21:73:60:5b:66:89:41:f2:8b:91:25:56:1a:7b:d6:34:
6a:32:aa:23:19:21:1c:5f:1c:4e:eb:5a:2a:53:a2:96:d0:56:
eb:c9:da:09:08:56:f0:9f:d2:8d:31:f6:40:3a:59:e0:ba:3a:
bb:ce:db:b7:32:d0:65:45:3e:95:ec:eb:09:fa:0f:48:3a:65:
f6:c7:88:47:03:49:e4:3f:2b:c2:00:e5:e3:05:e7:6c:7f:5c:
d6:a9:16:05:c1:65:ce:e6:20:36:c3:3e:54:d8:5f:14:db:99:
f1:04:de:e7:98:22:e8:e9:9b:00:d0:18:b9:63:82:4a:0f:76:
49:33:36:eb:5c:e8:5c:61:cb:19:7b:57:09:98:c2:9c:e1:ab:
2e:a2:66:2c:75:36:71:be:1d:aa:cf:5a:a4:9c:1e:fe:2a:7f:
73:e3:be:03:cf:8d:a3:c6:c5:be:67:c0:b1:2e:84:63:75:39:
92:6e:be:50:3d:7a:be:c7:1a:6e:3b:cf:d1:ef:51:c5:94:2c:
e7:d5:1d:cd:2e:f3:1d:f6:d6:19:86:3a:2c:6b:b5:21:56:a7:
8c:21:f3:3f:34:2b:9b:6e:05:a8:d4:61:71:de:ff:3b:27:14:
90:9b:bc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:37 2025 by rpki-client