Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/FscYqFjraHvELbE2bDX_GeV2HSM.roa
File: FscYqFjraHvELbE2bDX_GeV2HSM.roa (raw, json)
Hash identifier: nEqjDMKGSyCyu7mJaJDlkbmcQx/bLcYMyZ0fzhn9wcE=
Subject key identifier: 16:C7:18:A8:58:EB:68:7B:C4:2D:B1:36:6C:35:FF:19:E5:76:1D:23
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019935918E4DF02F7FCE161B0314792413D5
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/FscYqFjraHvELbE2bDX_GeV2HSM.roa
Signing time: Wed 10 Sep 2025 21:39:15 +0000
ROA not before: Wed 10 Sep 2025 21:39:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33651
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
36.255.215.0/24 maxlen: 24
45.67.141.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
103.216.197.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:91:8e:4d:f0:2f:7f:ce:16:1b:03:14:79:24:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 10 21:39:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c718a858eb687bc42db1366c35ff19e5761d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:0a:bb:5c:6e:43:83:f2:42:00:43:e6:4c:
7a:fa:70:52:90:0e:fc:2d:88:df:3a:7f:32:20:20:
a9:b6:12:83:90:42:b3:6f:4f:d8:72:8f:9a:68:a4:
c9:07:05:fc:23:98:e2:9e:a7:32:5e:76:ed:4b:c8:
3f:d9:7e:90:1b:f0:45:95:3e:6a:b0:d9:ac:fa:f1:
41:67:23:b6:fe:76:ce:bd:6d:06:5a:73:95:35:93:
80:70:79:bb:b3:09:f4:3e:4a:29:30:10:d9:16:31:
e6:0b:eb:af:94:a5:84:9c:0b:ae:d6:d0:35:9f:a3:
8c:53:e2:6d:03:29:f9:45:10:84:73:b2:f1:8e:60:
5d:54:e2:8b:59:b0:71:e1:a4:6b:85:41:c9:46:05:
32:ad:55:b4:4c:2b:cc:fb:52:fd:1a:ee:88:79:97:
bc:ff:5f:41:d2:aa:d7:f4:fe:2b:94:2f:48:61:09:
6e:63:e9:c1:fc:ae:8a:fc:b9:ab:23:2c:e1:1b:9b:
f4:4a:a4:9b:43:10:eb:57:0c:82:41:de:67:ad:77:
22:46:fa:d8:9b:9d:f8:3a:49:1b:e4:42:ab:cf:81:
c9:9b:9c:14:5f:18:e0:ec:15:41:8c:d9:01:0c:02:
a0:f7:6b:88:aa:1c:a9:dd:84:34:55:43:03:98:55:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:18:A8:58:EB:68:7B:C4:2D:B1:36:6C:35:FF:19:E5:76:1D:23
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/FscYqFjraHvELbE2bDX_GeV2HSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/24
5.182.193.0-5.182.195.255
36.255.215.0/24
45.67.141.0/24
63.246.129.0/24
63.246.148.0/24
63.246.152.0/24
63.246.159.0/24
78.31.206.0/24
103.216.197.0/24
149.126.13.0/24
162.218.89.0/24
185.201.41.0/24
185.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b3:2b:85:2c:34:e0:03:1c:33:c4:e9:3f:84:fc:8a:39:ba:
79:5f:54:02:4e:34:1d:8c:c2:88:4e:9c:2c:1f:ce:54:fc:42:
76:e0:c8:94:3c:02:d4:29:f7:44:a2:60:d3:15:02:33:01:51:
bd:8c:9f:d8:68:0f:2a:c6:aa:70:bb:b2:66:ff:05:06:36:44:
44:ed:1e:96:64:55:ae:f7:69:80:61:73:7b:9c:5a:00:61:b7:
00:d9:20:57:d7:5a:f6:80:2a:bd:67:82:a9:c5:8d:eb:90:2d:
07:87:bd:db:09:09:c9:c2:72:5f:f6:10:2a:19:a9:4d:72:d4:
40:24:2f:0a:89:f6:9e:d7:be:55:e5:c8:61:4a:df:76:48:9a:
ae:11:52:dd:9f:27:c5:63:8e:11:d5:cd:c6:ba:6f:87:33:cf:
a0:3a:9b:ce:2b:e1:c5:57:1f:2e:26:f1:17:c9:e5:70:4e:9b:
8b:ab:35:96:de:a4:39:1b:3a:d9:30:ac:87:c1:e9:07:27:21:
9e:08:cd:cd:a9:f1:13:8d:59:0d:73:b9:81:15:19:76:0a:a2:
8e:61:69:c2:6b:80:4d:6b:92:07:4f:e6:5a:22:70:68:a1:f5:
bc:21:92:7a:0c:fe:30:c8:3b:64:d3:a9:c1:21:4f:a7:32:7b:
f3:73:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:56 2025 by rpki-client