Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/fU80OsVtjHUcYFzJWtlJs69eD_g.roa
File: fU80OsVtjHUcYFzJWtlJs69eD_g.roa (raw, json)
Hash identifier: HvQM/fxcMSZwx7rz3J1gO6JjkLyJY0laHos/X8/ejmw=
Subject key identifier: 7D:4F:34:3A:C5:6D:8C:75:1C:60:5C:C9:5A:D9:49:B3:AF:5E:0F:F8
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0196AA831A6375A4ADF4877B57C0B6E40271
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/fU80OsVtjHUcYFzJWtlJs69eD_g.roa
Signing time: Wed 07 May 2025 11:30:40 +0000
ROA not before: Wed 07 May 2025 11:30:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198193
IP address blocks: 5.61.208.0/23 maxlen: 23
5.181.96.0/23 maxlen: 23
5.187.36.0/23 maxlen: 23
31.214.155.0/24 maxlen: 24
37.252.98.0/24 maxlen: 24
37.252.100.0/24 maxlen: 24
37.252.101.0/24 maxlen: 24
46.251.250.0/24 maxlen: 24
46.253.139.0/24 maxlen: 24
84.247.19.0/24 maxlen: 24
89.32.64.0/24 maxlen: 24
89.32.65.0/24 maxlen: 24
89.32.66.0/24 maxlen: 24
89.32.67.0/24 maxlen: 24
158.255.239.0/24 maxlen: 24
162.33.200.0/22 maxlen: 22
162.33.204.0/22 maxlen: 22
162.33.204.0/24 maxlen: 24
162.33.205.0/24 maxlen: 24
162.33.206.0/24 maxlen: 24
162.33.207.0/24 maxlen: 24
185.66.172.0/24 maxlen: 24
185.66.174.0/24 maxlen: 24
185.75.22.0/23 maxlen: 23
185.86.208.0/23 maxlen: 23
185.88.200.0/23 maxlen: 23
185.88.202.0/23 maxlen: 23
185.193.241.0/24 maxlen: 24
185.206.121.0/24 maxlen: 24
185.212.114.0/24 maxlen: 24
185.225.8.0/24 maxlen: 24
217.61.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:83:1a:63:75:a4:ad:f4:87:7b:57:c0:b6:e4:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: May 7 11:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4f343ac56d8c751c605cc95ad949b3af5e0ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:44:7f:ef:8a:42:fd:0e:de:10:6c:8b:e4:
41:c9:9e:ad:fe:c4:cd:3e:b6:87:8d:14:cc:c2:52:
8f:cc:80:ee:b4:38:93:4d:83:a6:23:5d:81:8b:c7:
6a:99:4b:ac:94:19:0c:24:80:d7:b8:0a:ee:1e:32:
f7:3b:c4:84:c7:f9:43:29:d5:3f:da:22:18:ce:e1:
cb:37:e6:3d:66:ce:0d:9c:ef:c8:35:9e:42:5f:f2:
9a:06:1d:c5:62:ff:19:b7:b3:c6:35:64:62:36:8d:
04:b4:53:1d:3d:ce:ab:b8:b1:cd:3b:4a:fe:45:ab:
36:d7:d7:fe:ed:00:a1:d0:70:81:46:a4:88:f7:8b:
4d:08:7d:81:0b:dc:4a:b6:eb:5c:b0:e7:45:7e:ac:
01:a1:b2:e1:ba:88:68:4f:8a:c9:9c:10:a2:0a:98:
51:3d:4e:d3:c3:0f:99:04:28:04:74:ac:5e:75:03:
db:b7:be:50:f0:a9:13:06:ab:7d:33:65:b6:d1:88:
56:5f:d6:1c:e0:78:76:a6:82:4e:ee:a6:6e:47:65:
c4:cc:b5:f0:08:4e:1c:cc:9a:4f:6e:cc:ff:90:c6:
d5:02:a2:be:bf:cc:62:55:d8:28:0b:b0:e2:6d:d7:
1f:87:0a:7b:80:d3:97:47:6d:a7:64:fa:07:33:fa:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:34:3A:C5:6D:8C:75:1C:60:5C:C9:5A:D9:49:B3:AF:5E:0F:F8
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/fU80OsVtjHUcYFzJWtlJs69eD_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.208.0/23
5.181.96.0/23
5.187.36.0/23
31.214.155.0/24
37.252.98.0/24
37.252.100.0/23
46.251.250.0/24
46.253.139.0/24
84.247.19.0/24
89.32.64.0/22
158.255.239.0/24
162.33.200.0/21
185.66.172.0/24
185.66.174.0/24
185.75.22.0/23
185.86.208.0/23
185.88.200.0/22
185.193.241.0/24
185.206.121.0/24
185.212.114.0/24
185.225.8.0/24
217.61.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:16:25:7a:d5:72:eb:35:f3:74:bb:8e:82:71:84:8d:36:2b:
bd:ec:d2:47:37:45:ec:84:e6:9a:26:27:14:ed:43:93:20:78:
fb:3b:1e:50:37:59:73:54:8c:39:92:fe:5c:0d:2c:60:53:a9:
15:de:81:f8:00:9c:e3:0a:88:a5:9b:2f:be:fe:57:00:f9:89:
49:6a:eb:d3:75:8e:23:3b:f2:af:9f:03:94:61:43:86:ad:32:
94:af:cc:fb:99:ea:3f:33:c8:c1:f8:8f:55:c5:6a:76:83:9e:
ce:25:21:54:25:29:3d:db:c6:b5:a1:83:ab:4c:14:02:0a:25:
14:91:74:dc:d1:2e:a3:88:fe:ce:8b:94:f9:09:8b:08:53:55:
ac:55:85:3d:74:5a:72:d6:b6:4c:2b:37:76:1f:aa:0c:c9:69:
41:9c:f0:d8:2d:f8:a1:fe:1a:13:4d:5e:29:89:af:79:4e:46:
56:b3:04:40:a0:cc:8a:fb:70:72:ef:4a:0c:32:90:79:81:73:
c2:2c:71:c1:f8:d4:ad:e0:b7:e2:6f:28:71:17:87:71:2e:cd:
ff:f1:fc:03:5f:79:ea:6e:4c:06:f8:75:2a:b6:51:d2:6c:b8:
52:7c:ac:5b:07:47:3e:47:99:84:2f:da:31:a8:ae:c6:0e:57:
bb:8f:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:12:58 2025 by rpki-client