Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/81MEacBenBgmbO5jhDxF0nT9AY8.roa
File: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (raw, json)
Hash identifier: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=
Subject key identifier: F3:53:04:69:C0:5E:9C:18:26:6C:EE:63:84:3C:45:D2:74:FD:01:8F
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0197C53A50CA2D3018073740B9A41B507D02
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/81MEacBenBgmbO5jhDxF0nT9AY8.roa
Signing time: Tue 01 Jul 2025 09:03:42 +0000
ROA not before: Tue 01 Jul 2025 09:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57610
IP address blocks: 5.250.255.0/24 maxlen: 24
185.123.54.0/24 maxlen: 24
194.53.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:3a:50:ca:2d:30:18:07:37:40:b9:a4:1b:50:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jul 1 09:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3530469c05e9c18266cee63843c45d274fd018f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:01:37:92:df:bc:32:0b:8a:ad:dd:65:2f:
21:0a:cd:5d:dd:4e:59:02:0b:19:f9:31:3e:98:86:
e9:11:4e:78:2f:d4:11:42:b6:af:94:53:cb:7d:48:
03:2a:13:cf:e1:62:6b:40:d5:5b:2d:5e:ef:4c:5a:
43:d7:fe:22:0d:c6:8c:f5:63:72:f2:65:cc:45:28:
80:39:10:29:1c:f4:ce:ec:6a:dc:af:70:8b:3b:64:
61:0b:a3:f7:e0:ca:83:3b:bd:2d:39:1b:0d:01:79:
ba:30:3d:0b:74:bb:60:2f:3e:44:ec:3d:7d:09:d6:
2f:22:4b:dc:cf:70:33:20:9b:d1:ad:73:74:95:33:
1e:07:0d:99:9e:ef:1d:c8:f6:71:f5:99:26:20:7f:
62:25:03:95:9e:c8:88:df:e8:3f:3e:06:b8:3c:bf:
08:83:93:90:b3:c4:fe:f2:b3:c3:c4:a5:f6:10:af:
b6:0d:fd:bd:54:75:f6:75:3d:3d:44:0d:22:06:97:
c8:23:69:eb:56:16:77:ac:a9:a4:23:01:f2:7e:55:
d7:f7:d5:5c:92:97:f3:22:18:d9:91:02:ef:06:51:
f9:8a:b2:85:e8:59:3c:3e:85:4b:71:f1:79:52:33:
4b:8d:b1:1f:50:6c:43:0f:1b:08:df:a6:ea:24:00:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:04:69:C0:5E:9C:18:26:6C:EE:63:84:3C:45:D2:74:FD:01:8F
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/81MEacBenBgmbO5jhDxF0nT9AY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.255.0/24
185.123.54.0/24
194.53.138.0/24
Signature Algorithm: sha256WithRSAEncryption
21:74:c9:02:76:3b:df:3e:5a:d1:4d:0f:a7:bf:11:68:73:80:
9e:75:ae:83:29:27:46:41:8e:8f:fa:cd:44:7f:a2:57:40:55:
0a:58:ec:1e:50:db:2a:d4:82:ac:6d:fb:8d:78:ed:ea:f3:9d:
1c:58:81:31:36:e9:ba:c2:5d:3e:36:cd:a6:30:93:8e:a2:01:
5a:6b:a3:c7:40:af:c6:a5:24:93:a2:d8:46:dc:66:d8:41:41:
7e:17:bb:89:37:e3:67:41:55:a4:78:af:49:49:14:0a:e2:47:
85:4f:48:fa:cc:8b:ac:49:10:56:0f:bf:b0:a6:e2:1c:a6:6d:
64:37:3e:8c:ba:ef:0d:a3:f9:2d:dd:60:af:74:2e:e3:96:6f:
05:4a:1f:a1:22:e3:6a:33:59:ad:04:15:db:a8:f2:0e:f0:21:
84:28:77:6e:76:9d:7c:67:fd:c2:8f:ee:9c:4f:ef:fd:80:73:
72:79:2a:47:d8:bd:b9:28:dc:39:b6:90:fa:97:5b:2f:4a:fc:
ef:ae:44:91:ec:d7:3b:84:db:bf:6a:31:f9:ad:63:d0:7d:59:
74:8a:b6:e4:72:7b:b0:13:ae:68:9c:0a:00:39:98:3f:f3:c6:
65:02:23:1b:39:7f:48:da:de:3c:f2:ba:2d:78:91:63:70:62:
22:05:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:20:24 2025 by rpki-client