Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/W2JvQeJsn6sgqGIrZ408H97qioo.roa
File: W2JvQeJsn6sgqGIrZ408H97qioo.roa (raw, json)
Hash identifier: Qz+vWtvmQAoEF3URoltR78Ia49dnDg7/98XNY7BmHc8=
Subject key identifier: 5B:62:6F:41:E2:6C:9F:AB:20:A8:62:2B:67:8D:3C:1F:DE:EA:8A:8A
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 0197AC315959BE33933DBBBF9C0931D6B7D7
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/W2JvQeJsn6sgqGIrZ408H97qioo.roa
Signing time: Thu 26 Jun 2025 12:23:24 +0000
ROA not before: Thu 26 Jun 2025 12:23:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206316
IP address blocks: 5.183.96.0/22 maxlen: 22
5.183.96.0/24 maxlen: 24
5.183.97.0/24 maxlen: 24
5.183.98.0/24 maxlen: 24
5.183.99.0/24 maxlen: 24
185.219.128.0/22 maxlen: 22
185.219.128.0/24 maxlen: 24
185.219.129.0/24 maxlen: 24
185.219.130.0/24 maxlen: 24
185.219.131.0/24 maxlen: 24
195.238.252.0/24 maxlen: 24
2a0b:e640::/29 maxlen: 29
2a0e:bc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:31:59:59:be:33:93:3d:bb:bf:9c:09:31:d6:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Jun 26 12:23:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b626f41e26c9fab20a8622b678d3c1fdeea8a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:b9:89:22:b2:98:1a:2b:94:3a:ac:35:90:
3e:2e:b4:cd:5f:79:47:f5:f6:ae:7b:d1:b0:a7:5e:
94:85:e1:cd:ea:69:4b:1d:cc:0b:62:b6:00:8d:96:
18:45:63:94:b7:af:04:7d:8d:bb:d4:bf:fe:35:bf:
07:c7:6f:90:9a:a6:fb:d1:07:2b:c5:6b:21:88:3b:
c1:1b:0a:63:aa:a4:5d:f6:1b:1c:3d:e5:1b:80:e0:
1c:12:0c:4e:ee:1d:d8:97:f5:c3:ca:7f:9e:c4:4e:
97:af:7a:e8:2e:fd:99:d9:61:62:54:09:b2:ff:b8:
8c:e5:47:f7:34:4e:ce:48:e0:38:02:45:6c:52:11:
a2:9f:eb:38:ce:4f:68:8b:c9:24:79:b7:c5:2c:84:
25:38:94:5b:f3:4b:25:6d:c1:2d:d2:75:99:33:a5:
0e:f4:b6:48:e7:98:96:be:60:c0:a9:5e:1b:1c:c2:
96:92:04:d3:23:46:ad:27:91:d0:c1:9d:7e:d0:39:
9f:bd:c1:10:69:53:7c:95:30:b1:b1:66:b9:a4:f9:
92:d7:ce:71:f1:bb:63:10:24:c4:61:6d:2c:2a:4b:
f4:6c:08:33:b8:61:73:1c:9a:47:a5:a0:5e:7b:d8:
aa:36:1a:d8:ef:13:1b:91:75:98:c2:f4:1e:ec:c3:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:6F:41:E2:6C:9F:AB:20:A8:62:2B:67:8D:3C:1F:DE:EA:8A:8A
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/W2JvQeJsn6sgqGIrZ408H97qioo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.96.0/22
185.219.128.0/22
195.238.252.0/24
IPv6:
2a0b:e640::/29
2a0e:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
69:f8:c8:0b:7b:1a:71:5d:b6:2a:81:64:54:22:00:ed:4b:e4:
72:85:fa:65:9e:e6:04:95:8d:57:97:f1:6e:6a:16:be:42:8d:
eb:c5:8b:9d:d5:e1:fd:56:6d:d7:f3:4e:1b:a8:63:b7:5f:8e:
12:cd:19:2f:56:60:ed:26:0d:a3:79:a4:3a:1e:3a:06:cc:61:
f2:a1:4d:e9:0b:bb:83:1e:c5:5f:43:69:da:dc:0d:db:18:93:
ae:00:13:52:19:e3:34:a0:e7:21:b7:e1:6a:e8:58:2e:c6:af:
87:59:2c:53:45:4c:70:2c:1d:4b:fe:23:ff:e5:4c:69:b4:c9:
e0:e2:87:4b:25:9b:43:19:31:3f:66:b0:d1:ca:b3:5f:7c:9e:
ed:d1:33:6f:4d:00:c1:c5:24:8b:61:4e:f4:2b:3e:73:ab:31:
85:62:e9:1d:32:30:6d:58:e4:7b:b3:f6:8f:54:04:e0:9a:84:
35:74:1a:9b:43:dd:70:1d:02:de:b3:75:4f:4d:06:05:86:b1:
4d:4d:bf:48:55:68:5a:55:89:50:4e:3d:15:5e:d7:59:bf:dd:
89:b0:d7:0b:d5:b8:e5:de:9a:3c:bf:3d:23:b2:70:b5:c6:1c:
1e:b2:95:6b:eb:e5:10:e0:52:56:d8:f7:f1:3a:ec:dd:4e:c1:
11:d6:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:43:37 2025 by rpki-client