Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/p5_bRG9M5kT8MStfkRHRT1v8cg0.roa
File: p5_bRG9M5kT8MStfkRHRT1v8cg0.roa (raw, json)
Hash identifier: ZjQG7VMMupt1nuY8BdmGWD7HOxruqtYbna7mlcKvAUo=
Subject key identifier: A7:9F:DB:44:6F:4C:E6:44:FC:31:2B:5F:91:11:D1:4F:5B:FC:72:0D
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 0197B0F170CF2BE817C9A298ACCBB949E4F7
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/p5_bRG9M5kT8MStfkRHRT1v8cg0.roa
Signing time: Fri 27 Jun 2025 10:31:42 +0000
ROA not before: Fri 27 Jun 2025 10:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 86.104.215.0/24 maxlen: 24
89.32.200.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
103.47.52.0/22 maxlen: 22
162.218.158.0/24 maxlen: 24
188.215.5.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
2a0a:eb00::/29 maxlen: 29
2a0a:eb00::/30 maxlen: 30
2a11:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:f1:70:cf:2b:e8:17:c9:a2:98:ac:cb:b9:49:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jun 27 10:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79fdb446f4ce644fc312b5f9111d14f5bfc720d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:c0:6f:f4:c1:a3:3a:06:7f:50:77:ea:86:
46:6d:77:db:95:26:26:7f:ce:2c:3e:f8:fc:ad:ef:
10:f6:60:4d:68:2c:ee:fb:0b:97:e0:d6:3e:22:a6:
0f:c6:67:a5:e1:6f:fd:03:4b:0b:e1:4b:c2:3f:db:
f7:8b:95:d6:94:d8:f4:38:4f:4b:cd:73:35:9f:fa:
9f:2f:c8:65:d0:55:1c:46:ff:36:32:4b:2f:6e:99:
aa:12:ed:5e:8e:fd:c2:32:4e:8f:d9:b3:a6:db:93:
1c:3b:bd:2b:f9:80:87:aa:a5:17:e1:c4:cc:8f:1c:
ba:b8:02:3f:c2:d4:54:ab:f1:81:ca:80:d3:e8:d2:
7d:c5:20:8d:30:d7:20:ba:fe:bc:37:3f:4d:35:75:
75:b8:6f:8e:92:b4:1b:e1:f8:00:54:d2:ef:13:e6:
05:05:0a:b8:dc:8d:c1:b4:fd:05:0d:51:c2:e4:cc:
50:2f:39:0e:e1:53:8c:7c:a0:fe:95:fa:b4:58:99:
0d:76:da:f9:17:a3:55:d7:7f:d5:23:54:65:7f:56:
de:21:1f:7d:99:6b:3e:f6:cd:fa:f9:51:81:69:58:
74:68:8c:38:c5:b9:12:d9:ea:51:69:d0:36:92:1f:
30:e5:ac:db:75:36:fe:5c:a8:1d:38:92:8c:58:ec:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:DB:44:6F:4C:E6:44:FC:31:2B:5F:91:11:D1:4F:5B:FC:72:0D
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/p5_bRG9M5kT8MStfkRHRT1v8cg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.215.0/24
89.32.200.0/24
89.32.204.0/24
89.33.83.0/24
103.47.52.0/22
162.218.158.0/24
188.215.5.0/24
194.26.149.0/24
212.102.116.0/24
IPv6:
2a0a:eb00::/29
2a11:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:2a:ea:39:41:c6:ec:bf:78:66:87:6a:fd:5e:bc:0a:63:c1:
6b:ac:65:25:61:b8:61:6c:8d:b3:9c:37:be:9c:36:51:dd:b0:
fa:ab:f7:59:61:31:3c:a8:f0:66:03:00:c2:56:4f:72:e8:69:
0b:f1:7a:4b:20:6a:a5:97:be:a3:2f:11:9f:d0:90:87:c1:5e:
05:0e:2e:ed:cd:6f:21:3d:78:61:5b:e3:59:3b:61:40:9b:65:
77:e2:67:d4:58:52:71:2a:cf:78:9e:63:7d:ec:9b:3c:49:a4:
ad:20:b0:32:df:ee:f5:7a:ea:13:52:e6:3e:d2:ce:5b:c4:86:
d5:0d:4c:a3:d8:a6:c8:28:cb:3f:1a:a0:30:98:0a:a4:a6:7e:
da:01:a4:c4:c6:c3:e1:32:9e:85:8a:a2:22:da:0e:10:56:ed:
e1:2d:41:75:0d:ba:09:6d:59:e1:d7:9f:f8:94:00:42:a4:8f:
42:99:20:e0:dc:6f:8f:70:f3:1d:39:ec:2e:68:0a:37:7b:ea:
29:6d:8a:32:f6:95:cd:87:33:bb:73:56:9d:14:c1:fd:b6:3f:
b9:f7:7b:6a:14:ff:41:78:99:13:ab:00:f1:d0:f2:27:6d:09:
2a:d8:08:5d:2d:1c:57:e5:20:2b:8c:e9:00:4e:fb:4d:2d:09:
0d:02:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:05:34 2025 by rpki-client