Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5upSYZ5msYxGuhzGMYZyMzE7Uac.roa
File: 5upSYZ5msYxGuhzGMYZyMzE7Uac.roa (raw, json)
Hash identifier: Mo5AMVnEuF7p2BlU2BvHctbUFLBtbYW/9NuyIEpuFjc=
Subject key identifier: E6:EA:52:61:9E:66:B1:8C:46:BA:1C:C6:31:86:72:33:31:3B:51:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786DDAAF431026A92291E4FB49656DB6C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5upSYZ5msYxGuhzGMYZyMzE7Uac.roa
Signing time: Thu 19 Jun 2025 06:26:03 +0000
ROA not before: Thu 19 Jun 2025 06:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
151.244.101.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:dd:aa:f4:31:02:6a:92:29:1e:4f:b4:96:56:db:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6ea52619e66b18c46ba1cc631867233313b51a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:7e:9a:5f:92:c9:00:52:17:f9:03:a9:5f:
d2:26:ca:4b:23:83:2d:06:10:77:08:5a:4a:03:a0:
27:ac:1e:ee:26:00:29:77:4a:45:61:64:7d:6d:8a:
aa:86:41:f9:e3:ed:ed:47:bd:f2:11:c2:cb:42:d8:
15:b3:9d:fb:d1:b1:6a:48:9e:34:06:5a:db:51:c3:
6d:5a:f7:dc:cc:96:36:c5:33:9f:4e:1a:75:7e:65:
4b:36:06:6f:78:57:f3:07:58:b1:96:4a:ea:83:df:
e9:e9:8f:95:53:d4:56:4e:f9:bf:c9:bd:c4:9d:c6:
68:8a:5d:b9:b6:56:8d:5b:8d:94:85:36:8b:e8:e5:
9d:e0:7b:59:ec:9a:49:81:32:e3:5c:de:86:1a:ed:
f6:63:b9:2c:cf:27:00:07:cd:2b:e7:60:a4:30:4b:
ce:b8:ab:57:56:84:45:cb:2c:19:f8:df:82:2c:cd:
3b:21:67:04:3a:2b:f2:9a:0f:10:f1:dc:4e:a6:28:
8d:d2:25:7a:9e:28:dd:5e:80:5d:cc:ac:32:31:58:
fb:14:d0:a1:88:7b:e6:0c:55:4a:e0:c3:cf:dd:6b:
54:4b:e4:43:ab:64:c1:9d:e3:48:ff:ea:19:9e:22:
b4:ba:cc:b9:52:b6:c6:e7:c8:04:b1:2c:6b:86:b0:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EA:52:61:9E:66:B1:8C:46:BA:1C:C6:31:86:72:33:31:3B:51:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5upSYZ5msYxGuhzGMYZyMzE7Uac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0/23
151.243.107.0-151.243.110.255
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.97.0/24
151.244.101.0/24
151.244.105.0/24
151.244.110.0/24
151.244.114.0/24
151.244.118.0/24
151.244.124.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fb:db:9b:bf:dd:b1:35:62:2d:e5:0c:5a:33:89:f2:f0:47:
61:47:9f:a3:4a:4e:3c:7a:08:ab:2c:37:99:6c:f7:dd:2f:98:
07:78:2a:72:34:e0:0d:ce:e2:8e:05:37:2b:c3:a5:de:37:91:
88:a0:5f:97:8a:e9:6d:02:b9:0e:8f:c1:91:32:54:57:2f:a6:
d7:5c:a6:49:d0:3f:9e:f6:06:f1:e5:63:42:b8:da:26:f1:ed:
af:bd:57:09:69:ab:67:6c:af:e0:44:d7:c7:19:3e:d8:04:bb:
a6:2c:ac:0c:69:ba:48:2b:9d:16:03:59:0c:16:90:52:a7:c6:
59:9d:9f:e6:c9:c5:0c:0b:20:48:2c:c1:4f:9e:50:0c:46:c8:
ca:4d:3c:65:c6:90:05:52:d1:c8:03:10:b8:62:14:5d:bd:67:
3a:da:98:ed:24:61:5b:2b:32:84:50:76:2e:42:75:a7:73:90:
ed:a2:9e:ed:84:bb:9c:73:77:a7:9b:2e:be:ba:c1:e7:f0:b0:
5b:4a:25:b7:f1:96:e9:29:59:4e:ce:f0:99:d8:b1:de:ff:98:
d0:1b:67:4e:12:c5:15:ba:4f:de:a2:1a:23:d2:d9:77:22:71:
ea:69:26:7a:41:92:82:0c:49:29:66:5c:f8:19:23:92:b7:c7:
30:17:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:43:59 2025 by rpki-client