Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/2sbBAO7ATxHzEchFAB6gArPRZZY.roa
File: 2sbBAO7ATxHzEchFAB6gArPRZZY.roa (raw, json)
Hash identifier: UDJGL7lU9D2x+NFmBhQK2JHOpnmQvd/reJ4wMgvIZq8=
Subject key identifier: DA:C6:C1:00:EE:C0:4F:11:F3:11:C8:45:00:1E:A0:02:B3:D1:65:96
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 019936E9CA905FF20853F77F1EE5AD9AFABA
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/2sbBAO7ATxHzEchFAB6gArPRZZY.roa
Signing time: Thu 11 Sep 2025 03:55:15 +0000
ROA not before: Thu 11 Sep 2025 03:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60609
IP address blocks: 5.181.96.0/23 maxlen: 23
5.181.96.0/24 maxlen: 24
5.181.97.0/24 maxlen: 24
5.181.98.0/24 maxlen: 24
5.183.148.0/23 maxlen: 23
5.183.149.0/24 maxlen: 24
37.16.77.0/24 maxlen: 24
45.10.130.0/24 maxlen: 24
46.254.104.0/24 maxlen: 24
134.255.250.0/24 maxlen: 24
185.204.186.0/24 maxlen: 24
194.63.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:e9:ca:90:5f:f2:08:53:f7:7f:1e:e5:ad:9a:fa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Sep 11 03:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac6c100eec04f11f311c845001ea002b3d16596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:15:cc:9d:b2:5b:7b:c8:2f:f0:b5:24:2e:
00:96:64:b9:e6:38:2c:28:b1:80:a2:7b:e0:17:f8:
f0:7c:cf:62:76:ef:a2:27:8c:38:e3:7a:f9:55:34:
71:4d:58:64:98:d0:be:f8:df:94:b9:60:e8:99:a1:
5e:e5:c8:03:b2:97:41:3e:3c:45:b7:c6:74:96:32:
68:87:e8:03:bd:f9:50:74:23:c3:5c:77:3e:76:36:
c8:28:c4:0a:d2:fa:9d:3c:f2:ef:0a:ad:cf:7e:01:
5c:88:2c:1e:9b:5d:5d:3d:3b:13:3c:93:8d:62:3d:
bb:4e:b7:78:cc:92:3c:81:d9:bf:70:12:26:c7:80:
c9:a1:ca:02:10:87:0c:50:f6:58:fe:c6:29:59:f2:
92:7d:e2:42:da:80:34:18:9e:3d:5b:2a:d2:b2:9a:
64:61:a0:d2:26:38:a1:07:7f:27:df:b9:bd:3d:d5:
69:fb:15:af:65:d3:47:0d:47:74:cf:11:25:e9:0c:
74:e6:b7:cf:c4:80:9f:07:a5:b2:91:77:d7:47:3b:
60:6d:5d:e5:1d:22:97:cb:4c:da:ba:92:fe:eb:3b:
78:cd:ae:4f:4f:a3:c1:a6:aa:d0:de:f8:c6:e5:22:
e8:13:e3:b4:a1:d4:50:4f:e1:68:24:bf:85:9b:1a:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:C1:00:EE:C0:4F:11:F3:11:C8:45:00:1E:A0:02:B3:D1:65:96
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/2sbBAO7ATxHzEchFAB6gArPRZZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.96.0-5.181.98.255
5.183.148.0/23
37.16.77.0/24
45.10.130.0/24
46.254.104.0/24
134.255.250.0/24
185.204.186.0/24
194.63.147.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f2:03:d1:f0:c6:05:73:50:52:52:eb:ab:4f:b4:6c:04:76:
e7:21:30:aa:d7:c3:13:10:45:5b:9c:69:71:db:55:ba:de:4c:
b3:7a:d7:05:36:26:7d:9c:70:a0:76:3d:8b:96:5e:0f:d8:25:
bc:4d:3f:23:f0:52:df:2e:4b:17:b7:0b:8e:7d:22:11:73:4f:
5f:d6:39:44:5e:dd:fe:db:0a:34:59:c3:82:86:fa:a1:ca:63:
c1:b8:92:db:51:7c:d4:d1:31:b8:88:37:40:59:a7:38:59:f7:
35:da:5f:6b:39:5d:b5:ba:ff:c3:f9:22:53:33:37:41:d8:7b:
68:85:8d:73:e8:28:09:15:70:e2:8e:69:6c:d5:b7:59:59:e9:
a5:80:52:a6:a6:b9:f1:11:91:8a:5c:88:40:4e:46:e9:1d:d2:
77:30:ea:30:e3:9f:ed:70:6f:fa:72:a6:6c:14:5d:a7:32:6a:
f5:7d:61:b4:6e:ad:ec:71:13:dc:e7:c4:0c:5b:8f:f2:f3:fb:
dc:59:cb:0a:1c:ec:dd:98:f5:45:d9:2a:7a:93:7b:39:7b:cb:
17:11:22:89:c3:9f:d0:bb:53:2a:1b:04:9f:9f:9c:31:e4:c8:
82:fd:75:fc:f6:fb:f4:56:e6:c9:21:7f:d8:8c:f8:67:b8:87:
9c:15:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:27 2025 by rpki-client