Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/N5zj-5kvAhoJCItFFzdBa1pYbH0.roa
File: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (raw, json)
Hash identifier: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=
Subject key identifier: 37:9C:E3:FB:99:2F:02:1A:09:08:8B:45:17:37:41:6B:5A:58:6C:7D
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0197AB322FFC00BE1039275F94CAB5EFDDA4
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/N5zj-5kvAhoJCItFFzdBa1pYbH0.roa
Signing time: Thu 26 Jun 2025 07:44:42 +0000
ROA not before: Thu 26 Jun 2025 07:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212462
IP address blocks: 109.234.80.0/24 maxlen: 24
185.33.66.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
185.235.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:32:2f:fc:00:be:10:39:27:5f:94:ca:b5:ef:dd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jun 26 07:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=379ce3fb992f021a09088b451737416b5a586c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:f6:e5:1a:20:e4:f2:0f:a6:9c:fd:35:48:
84:d9:f2:a2:26:c8:00:29:5d:4d:e4:56:38:ad:45:
50:21:17:13:64:f5:8c:05:1d:bd:30:58:34:91:06:
90:18:ee:3a:58:63:45:10:3d:94:7b:3b:5e:22:3e:
23:d3:f4:e2:66:6a:0c:68:20:25:a7:cb:d3:4a:ee:
b0:16:15:fb:33:1a:2c:bd:c9:b3:4e:65:cd:75:ac:
1d:9a:b8:c6:b9:c6:23:d0:cd:f8:88:0b:08:4e:1b:
c3:34:72:b1:9d:b0:5e:f5:00:a7:4c:ec:51:33:19:
95:aa:bd:56:aa:1a:8a:2e:2d:db:a2:3a:9f:6b:27:
78:c3:be:e2:30:c5:8c:48:b5:fc:4b:a2:20:e5:f5:
f5:5d:ac:aa:94:df:f4:95:be:2e:9e:93:09:c3:53:
ea:bf:0e:fd:f8:01:3b:26:9e:b8:05:62:c8:ff:8a:
17:90:d0:22:76:35:e0:31:5c:2d:25:60:ae:22:47:
b4:6b:78:46:df:4f:fb:57:36:fd:72:81:f9:17:39:
fe:82:79:fe:e6:83:f9:f2:86:e1:14:1d:20:6a:e0:
18:b1:cd:b1:6f:3d:7b:b2:03:b5:67:78:cc:74:d7:
ef:35:0a:75:e8:65:6f:83:55:6b:2a:68:89:3f:bc:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9C:E3:FB:99:2F:02:1A:09:08:8B:45:17:37:41:6B:5A:58:6C:7D
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/N5zj-5kvAhoJCItFFzdBa1pYbH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0/24
185.33.66.0/23
185.235.35.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e7:57:bf:59:9a:44:95:7a:b7:69:58:df:9c:ee:a7:1f:96:
3c:9c:6c:e9:d7:ed:d4:c9:61:a3:b1:97:62:db:f5:4a:32:74:
75:70:e8:61:48:5e:15:5a:07:15:db:07:d6:a5:7b:2e:bf:99:
91:85:67:6d:92:1c:fc:ee:ed:fa:40:ac:77:5a:6d:62:f7:6d:
62:5f:f2:64:eb:85:94:26:ba:81:f3:1a:ec:02:61:5b:f5:99:
06:84:3e:f2:10:52:14:40:30:60:c8:a4:4b:60:cc:09:1d:d9:
08:ef:e7:2f:cd:aa:b5:00:d3:c5:38:2e:6f:91:27:ce:44:9e:
73:f5:c8:63:b9:a9:eb:1c:5e:f6:75:b4:fb:db:3e:23:39:80:
a0:93:02:5f:53:48:2c:74:df:08:9d:18:2e:8c:33:4d:7e:ea:
fd:42:b5:a0:28:89:f5:28:85:24:34:45:69:2f:e1:18:7b:2c:
bd:1b:82:43:e9:3c:ed:81:b3:e6:50:16:ad:cf:a4:7b:94:65:
51:67:d0:94:5c:b5:ed:14:d7:f9:68:8f:3b:e2:aa:7d:bf:08:
c6:94:4d:bd:f5:41:a8:db:9e:ed:b7:90:fc:23:13:e5:22:20:
e3:69:04:7c:7d:39:88:54:fb:8d:8e:fb:76:6e:41:0b:ed:c2:
fb:1e:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:58:31 2025 by rpki-client