Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/mf3HqTb27EylepnRyKyFlLE_bQI.roa
File: mf3HqTb27EylepnRyKyFlLE_bQI.roa (raw, json)
Hash identifier: 6GZjLiGY/TtKI5z9Lycrp6k2FdBuBIlZloVH0xnr3R8=
Subject key identifier: 99:FD:C7:A9:36:F6:EC:4C:A5:7A:99:D1:C8:AC:85:94:B1:3F:6D:02
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0197A0F55A72728ABD68E5BB434330481F4A
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/mf3HqTb27EylepnRyKyFlLE_bQI.roa
Signing time: Tue 24 Jun 2025 08:02:03 +0000
ROA not before: Tue 24 Jun 2025 08:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
146.103.73.0/24 maxlen: 24
146.103.74.0/24 maxlen: 24
146.103.75.0/24 maxlen: 24
146.103.76.0/24 maxlen: 24
146.103.77.0/24 maxlen: 24
146.103.78.0/24 maxlen: 24
146.103.79.0/24 maxlen: 24
146.103.80.0/24 maxlen: 24
146.103.81.0/24 maxlen: 24
146.103.82.0/24 maxlen: 24
146.103.83.0/24 maxlen: 24
146.103.84.0/24 maxlen: 24
146.103.85.0/24 maxlen: 24
146.103.86.0/24 maxlen: 24
146.103.87.0/24 maxlen: 24
146.103.88.0/24 maxlen: 24
146.103.89.0/24 maxlen: 24
146.103.90.0/24 maxlen: 24
146.103.91.0/24 maxlen: 24
146.103.92.0/24 maxlen: 24
146.103.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:f5:5a:72:72:8a:bd:68:e5:bb:43:43:30:48:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jun 24 08:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fdc7a936f6ec4ca57a99d1c8ac8594b13f6d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:fd:f1:90:e6:63:bd:76:b5:eb:80:40:aa:
ea:29:6c:d8:c9:4f:2f:a1:d4:45:37:f9:c8:11:3b:
94:34:36:bd:fe:bb:65:0d:e9:f4:07:d6:46:34:64:
96:b6:e3:cc:9d:bf:45:4b:22:13:91:cf:93:f8:c4:
28:ac:cb:72:06:78:49:13:1c:0d:81:7c:2c:84:4f:
66:8d:5e:f0:11:f9:48:8a:68:c4:e6:62:4f:11:b4:
cc:00:90:dc:e1:d4:26:5c:93:65:ed:62:bb:b9:2f:
a6:f0:7b:88:18:2e:02:cf:e8:c5:08:74:93:b3:85:
26:3f:0a:7e:8d:91:57:a8:4d:d1:da:8d:b0:49:ea:
74:22:19:fe:dc:01:5a:8d:18:1a:1a:54:88:28:ad:
f1:a9:fb:c5:c7:99:2a:2b:84:cc:a9:4f:88:f0:7a:
d9:7a:86:f5:0f:dd:c6:c7:42:84:2d:74:79:63:e1:
75:16:d9:a0:45:98:bc:e1:7f:7b:bb:59:e4:aa:22:
52:ea:d1:07:e0:fe:d6:91:fe:f3:f8:99:37:f3:16:
51:8b:f9:1b:f6:23:d8:c9:dd:63:3c:bb:fb:a1:b9:
a3:8e:79:d3:01:5b:19:91:1f:ae:41:1c:49:7a:06:
02:08:48:a0:7b:6b:24:65:64:14:82:5e:31:ef:80:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:C7:A9:36:F6:EC:4C:A5:7A:99:D1:C8:AC:85:94:B1:3F:6D:02
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/mf3HqTb27EylepnRyKyFlLE_bQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0-140.150.12.255
140.150.14.0/23
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
146.103.64.0-146.103.68.255
146.103.71.0/24
146.103.73.0-146.103.93.255
Signature Algorithm: sha256WithRSAEncryption
20:da:15:4f:4b:47:c4:ae:f2:9a:b8:5e:6f:97:06:db:5c:fb:
4d:4a:6d:a9:0b:cd:d9:3c:fc:ce:d9:ee:d4:3a:c3:89:d7:4d:
e9:0d:d4:64:dc:d7:65:85:be:3a:3f:aa:eb:e3:fe:44:7a:2d:
b1:ab:e7:46:ce:e7:5f:ba:dc:65:6d:17:1a:31:5d:ce:10:35:
a9:ed:53:28:0a:7c:4a:aa:61:52:d7:78:de:13:66:ec:8d:d6:
7d:1d:70:39:45:b3:54:5f:73:69:97:74:d7:c1:23:cd:fe:bf:
d7:48:bc:f3:5e:a6:c2:31:52:ec:26:30:25:4a:6d:2a:d3:43:
0b:5c:b0:0d:fc:6e:37:dd:d1:c4:13:63:fb:e4:4f:fc:0a:65:
fa:4f:da:d8:79:59:6c:22:78:47:6f:f1:b8:7c:97:bd:bb:5a:
00:a7:e8:b2:45:e5:d0:36:90:6e:c9:83:51:10:91:45:ba:62:
af:44:0c:e5:ad:50:dc:ce:38:06:11:eb:1d:8a:c5:f9:22:7b:
e8:82:91:56:9f:b2:1f:45:d9:ff:3c:2a:d9:91:8d:da:99:5b:
ca:98:16:df:f2:ca:96:a0:06:54:8f:fb:4f:4d:b6:e5:e5:a9:
42:51:30:06:57:da:15:07:9f:39:54:49:29:2d:c1:db:24:dc:
87:ef:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:50:56 2025 by rpki-client