Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/_U8BavI_5cQGo6TWiCd3BSOwLAs.roa
File: _U8BavI_5cQGo6TWiCd3BSOwLAs.roa (raw, json)
Hash identifier: rvSPW5xjRGu22miGVzHzcPGQFL3/KOA577Iof1RLE8w=
Subject key identifier: FD:4F:01:6A:F2:3F:E5:C4:06:A3:A4:D6:88:27:77:05:23:B0:2C:0B
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0199BD592C9BBB0023720CBFEAF84363E3B2
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/_U8BavI_5cQGo6TWiCd3BSOwLAs.roa
Signing time: Tue 07 Oct 2025 06:26:01 +0000
ROA not before: Tue 07 Oct 2025 06:26:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
155.212.245.0/24 maxlen: 24
155.212.246.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
194.5.79.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:59:2c:9b:bb:00:23:72:0c:bf:ea:f8:43:63:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 7 06:26:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd4f016af23fe5c406a3a4d68827770523b02c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ca:22:28:05:78:bf:2a:af:47:f8:92:25:97:
63:23:0d:f1:a4:c3:4b:2a:e3:00:2f:2d:5a:82:e7:
3d:7b:ff:98:ab:d7:98:aa:e8:d9:ea:75:a0:82:23:
e3:58:dd:80:14:32:10:54:d2:61:e3:32:46:3b:65:
ea:90:d0:12:7d:54:ae:e8:79:89:b8:c4:14:45:df:
ca:9e:61:1f:11:1c:37:29:33:51:d2:f6:72:fc:83:
e3:9d:02:cc:47:fb:40:a2:d6:e7:18:a8:82:37:3a:
2c:73:7e:61:5f:03:b4:21:7f:48:85:40:a0:b4:0b:
8a:57:8c:71:6a:7e:dc:bd:f4:99:dd:5e:b9:cc:09:
06:d4:5c:e8:9c:07:d5:50:f8:fa:18:6f:fd:0b:a2:
b9:99:ea:ba:8c:5e:7e:b2:b7:97:9e:5f:dd:f6:9d:
d7:66:d6:25:e5:55:39:f6:44:43:d4:fe:d0:df:8d:
ef:6f:59:c9:51:27:f3:9e:11:d7:73:65:ef:d7:43:
ea:82:3e:74:ee:6d:7c:56:a9:f1:94:9f:aa:1a:0d:
e6:90:a2:54:ec:0a:54:81:ae:e6:2f:dd:26:56:a7:
67:aa:84:88:27:29:b8:3d:14:30:93:f8:8a:34:55:
5f:11:12:fa:28:87:66:34:57:87:d7:84:e2:1a:8b:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:01:6A:F2:3F:E5:C4:06:A3:A4:D6:88:27:77:05:23:B0:2C:0B
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/_U8BavI_5cQGo6TWiCd3BSOwLAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
155.212.245.0-155.212.246.255
185.198.152.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/23
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
29:09:6f:e2:12:8e:79:54:64:cc:99:e8:48:e6:99:8b:68:a5:
84:b9:61:8b:96:1e:52:c8:84:12:34:b6:3f:98:3e:1f:c0:33:
56:5a:f7:04:f5:06:17:92:e1:19:70:05:44:a1:f8:52:c8:db:
eb:05:4a:11:57:3c:c2:29:d1:b9:47:ac:93:56:c2:67:63:27:
57:bf:47:03:b6:53:cc:23:fb:b8:43:99:fb:81:cb:dc:69:ec:
de:d5:96:8a:4f:1b:1b:a3:b3:9c:bf:95:ba:86:77:30:4b:b4:
69:3c:72:a6:c0:05:5a:35:33:7c:4d:79:5d:be:80:ed:ca:54:
18:e8:18:ad:00:9e:ea:a0:29:93:7b:98:4e:65:64:ec:f9:e9:
a6:29:f5:ea:f6:0c:b4:ac:93:38:7c:1e:a0:df:0d:22:23:5e:
79:a4:bc:60:15:23:dd:9a:03:ff:70:2c:92:4d:73:9c:43:72:
b1:70:b2:ee:3f:8f:a7:36:c9:3a:5d:2a:78:2c:84:93:63:a2:
87:ce:be:ce:06:31:23:82:8f:7f:45:bd:04:96:cf:cb:e6:22:
62:32:45:31:55:a8:c7:d7:72:da:ba:90:76:d5:c9:a9:8d:bd:
86:e7:f4:b7:d1:d9:22:e0:49:aa:8c:94:c1:d2:61:6f:57:56:
5a:b1:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:05 2025 by rpki-client