Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/l3YYWfaE2euZnHi3DHzJFb0zkNc.roa
File: l3YYWfaE2euZnHi3DHzJFb0zkNc.roa (raw, json)
Hash identifier: CEhkDjCjPBchYXQIojh2cQ/Iu0nRg9fvpQAFV+rgW6I=
Subject key identifier: 97:76:18:59:F6:84:D9:EB:99:9C:78:B7:0C:7C:C9:15:BD:33:90:D7
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 0197D0B80BC904BE9C8BC528AC7B604687F8
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/l3YYWfaE2euZnHi3DHzJFb0zkNc.roa
Signing time: Thu 03 Jul 2025 14:36:51 +0000
ROA not before: Thu 03 Jul 2025 14:36:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62370
IP address blocks: 5.104.224.0/21 maxlen: 21
5.104.224.0/24 maxlen: 24
5.104.225.0/24 maxlen: 24
5.104.226.0/24 maxlen: 24
5.104.228.0/24 maxlen: 24
37.148.160.0/21 maxlen: 21
37.148.160.0/24 maxlen: 24
37.148.161.0/24 maxlen: 24
37.148.162.0/24 maxlen: 24
37.148.163.0/24 maxlen: 24
37.148.165.0/24 maxlen: 24
77.95.224.0/21 maxlen: 21
77.95.225.0/24 maxlen: 24
77.95.228.0/24 maxlen: 24
77.95.229.0/24 maxlen: 24
77.95.231.0/24 maxlen: 24
78.41.200.0/21 maxlen: 21
78.41.201.0/24 maxlen: 24
78.41.203.0/24 maxlen: 24
78.41.204.0/24 maxlen: 24
78.41.205.0/24 maxlen: 24
78.41.206.0/24 maxlen: 24
78.41.207.0/24 maxlen: 24
89.207.128.0/21 maxlen: 21
89.207.128.0/24 maxlen: 24
89.207.129.0/24 maxlen: 24
89.207.130.0/24 maxlen: 24
89.207.131.0/24 maxlen: 24
89.207.132.0/24 maxlen: 24
89.207.134.0/24 maxlen: 24
89.207.135.0/24 maxlen: 24
128.204.192.0/20 maxlen: 20
128.204.192.0/24 maxlen: 24
128.204.194.0/24 maxlen: 24
128.204.197.0/24 maxlen: 24
128.204.199.0/24 maxlen: 24
128.204.205.0/24 maxlen: 24
185.62.56.0/22 maxlen: 22
185.62.56.0/24 maxlen: 24
185.62.57.0/24 maxlen: 24
185.62.58.0/24 maxlen: 24
185.62.59.0/24 maxlen: 24
193.33.60.0/23 maxlen: 23
193.33.60.0/24 maxlen: 24
193.33.61.0/24 maxlen: 24
193.34.166.0/23 maxlen: 23
193.34.166.0/24 maxlen: 24
193.34.167.0/24 maxlen: 24
2a00:7b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:b8:0b:c9:04:be:9c:8b:c5:28:ac:7b:60:46:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jul 3 14:36:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97761859f684d9eb999c78b70c7cc915bd3390d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:c7:ef:51:02:2c:97:0c:06:1e:77:e4:da:
46:fa:f1:2c:d3:fb:b1:60:7a:90:b9:bc:0a:2f:bf:
2f:73:23:ef:39:f5:c0:a6:fb:cd:6c:dd:30:fc:d3:
d1:d5:27:e0:f1:7e:a4:90:b4:55:2b:a7:3c:54:11:
a0:99:76:3d:52:ea:cd:30:d4:5d:a9:7f:9f:75:32:
51:33:86:96:14:99:93:e7:ca:67:31:b9:f1:c9:42:
05:f2:1e:f0:79:b8:78:b9:f3:a3:e2:a4:63:b1:96:
94:9e:aa:15:89:b2:4f:60:e2:e7:3e:b1:a4:f1:40:
3f:46:81:32:1c:3b:a3:79:e0:52:d5:22:3c:1f:65:
d7:db:5d:5b:5b:1d:d0:6b:cb:7d:50:6e:fb:2d:c9:
7b:84:00:0f:ad:5f:85:00:2d:a3:11:6c:e4:6e:bd:
59:86:08:89:62:0f:48:82:1d:42:64:6a:91:7a:71:
c5:a6:1b:8a:1f:be:74:23:3b:25:d7:56:89:55:49:
bd:e9:ee:9c:a9:31:90:f8:ba:10:2b:7b:5c:dd:51:
fa:b2:54:b4:6b:99:82:ae:5b:5c:de:18:90:c7:d4:
67:ef:cd:8d:a4:be:9a:22:1a:44:f8:9c:25:cc:00:
a6:85:e4:39:75:36:d1:9a:77:79:3e:8b:c1:5c:28:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:18:59:F6:84:D9:EB:99:9C:78:B7:0C:7C:C9:15:BD:33:90:D7
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/l3YYWfaE2euZnHi3DHzJFb0zkNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.224.0/21
37.148.160.0/21
77.95.224.0/21
78.41.200.0/21
89.207.128.0/21
128.204.192.0/20
185.62.56.0/22
193.33.60.0/23
193.34.166.0/23
IPv6:
2a00:7b80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:6f:d1:05:a8:ce:ff:e7:aa:ee:b9:71:f5:bc:64:8a:ed:21:
f3:d9:73:bf:a2:94:42:f0:88:27:67:b5:61:e3:93:6c:8d:d5:
e3:9d:f0:f7:78:5e:ac:52:31:17:17:41:b0:bc:60:19:a7:c0:
46:6f:5b:7e:e8:28:f8:e5:c1:9c:15:2c:38:2a:dd:2b:ca:c1:
aa:a3:38:e4:cc:2d:a8:51:fb:30:f8:03:44:2b:f1:21:ab:ff:
fb:e9:16:d1:53:ba:1d:27:0e:40:3e:64:63:91:4a:ca:5f:78:
03:3d:bc:f9:c4:e8:2a:28:b6:95:0d:61:69:98:31:b9:99:e8:
ab:49:ef:7c:c4:e3:07:36:0d:7c:7f:b8:1f:a5:65:c4:82:94:
c5:17:ea:83:47:8b:ae:43:12:d4:fe:bf:53:92:40:34:fa:3f:
b2:ed:81:2a:19:ce:dd:d3:6e:a1:01:2c:7e:10:b4:5e:9d:7d:
a9:b0:01:b3:59:5a:c8:9e:24:1a:da:0b:87:73:5a:70:7e:80:
4f:23:d3:49:12:d8:92:de:db:e6:f4:e4:55:b4:86:b2:bb:53:
15:fa:ac:20:df:41:0f:28:62:93:39:f7:61:03:08:7a:1d:12:
1d:29:8a:3e:e2:d9:88:7f:74:ef:5f:dd:d1:c6:d0:d0:d6:26:
a9:bf:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:46:38 2025 by rpki-client