Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Idxg_WiqnQ5z7a1AWZhBBpr3d0o.roa
File: Idxg_WiqnQ5z7a1AWZhBBpr3d0o.roa (raw, json)
Hash identifier: 7UHbsVvn5Ys5iN7EIcL0ZbXVx08urNpR/8wxUpFwdH8=
Subject key identifier: 21:DC:60:FD:68:AA:9D:0E:73:ED:AD:40:59:98:41:06:9A:F7:77:4A
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0197B398C42E0CBBA5EAD927DEFDB49A4ECC
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Idxg_WiqnQ5z7a1AWZhBBpr3d0o.roa
Signing time: Fri 27 Jun 2025 22:53:42 +0000
ROA not before: Fri 27 Jun 2025 22:53:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
45.248.52.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
94.154.182.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
162.218.90.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b3:98:c4:2e:0c:bb:a5:ea:d9:27:de:fd:b4:9a:4e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 27 22:53:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21dc60fd68aa9d0e73edad40599841069af7774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:b7:a1:a8:d3:7a:67:b0:7d:93:5c:b9:e8:
09:77:75:65:26:a8:20:a1:09:cb:f3:3c:b1:1f:4c:
86:e0:8a:9a:3b:d7:d8:c5:a3:f2:e5:40:b6:9b:7b:
61:64:63:8b:6f:03:ee:c9:21:e3:56:c8:ff:3f:a4:
b2:af:59:5c:2c:6f:f2:26:13:ec:63:b3:11:7e:22:
02:c2:a3:a6:a7:ce:dc:20:20:eb:4d:0d:88:7c:79:
fa:1f:4f:57:7c:24:6c:0e:ec:7e:97:49:3f:8d:55:
e2:1e:73:1a:9d:07:4c:8f:a0:72:c1:f6:2d:bc:43:
6c:3a:6e:50:53:be:3b:ce:f1:25:72:ba:aa:32:3e:
99:78:c0:e1:c1:b4:67:40:31:f6:c0:a0:62:02:44:
50:4b:07:86:42:ab:86:c0:dd:f7:6d:a2:f9:31:fd:
26:5a:ff:ec:bb:8d:4f:b7:5b:43:18:75:86:c1:44:
b4:d4:2c:1c:4d:4c:16:8f:15:c0:0c:dd:01:1a:4f:
19:36:31:52:12:69:4c:5f:fb:1b:24:db:4a:b2:cd:
2b:a0:cd:d8:6a:2f:34:80:38:a2:f7:d5:18:13:ec:
4a:28:db:79:09:ba:0f:d0:7c:8b:fd:a8:cf:13:b8:
db:48:42:5a:c6:03:a9:95:37:3d:1a:34:5a:c0:b7:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:60:FD:68:AA:9D:0E:73:ED:AD:40:59:98:41:06:9A:F7:77:4A
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Idxg_WiqnQ5z7a1AWZhBBpr3d0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.248.52.0/24
92.249.31.0/24
94.154.182.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
185.187.212.0/24
185.205.205.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fa:4e:e1:87:fc:d1:39:47:be:a3:e4:ee:c1:e9:88:46:a5:
78:18:32:3a:f5:56:42:c2:ba:b1:45:eb:1f:a6:e9:6c:1f:ad:
b7:5d:d2:30:d8:57:7b:6f:20:55:cc:31:c1:1e:36:47:61:c7:
c8:d0:9d:6a:f8:9a:f5:86:60:28:cd:a6:44:d1:e9:f4:8f:1c:
48:15:57:27:40:d2:88:ed:71:c1:ab:4b:32:7a:66:2e:39:da:
1d:08:c8:35:8a:bf:3e:a3:e6:33:dc:a3:95:c9:77:aa:fe:c3:
ea:0b:38:bf:f7:86:d2:64:c4:80:ad:b2:d0:b2:e0:9e:95:eb:
ba:e5:23:05:a6:7d:b7:66:48:9a:37:17:83:60:51:22:23:cb:
d2:c9:93:c4:4f:d3:c8:55:2d:a7:e7:b7:47:d0:81:74:95:28:
1b:d2:eb:32:d7:3a:0c:58:ee:8b:70:c0:49:34:85:65:b3:08:
88:60:94:8d:6b:90:b5:b8:f9:91:9c:a3:6b:b9:5e:50:99:5e:
d1:e7:28:7e:ea:08:de:eb:2f:e7:db:8c:29:8a:94:e9:85:5e:
8e:c3:12:68:41:2b:5e:b4:5b:55:5c:07:42:63:6f:af:40:1e:
62:07:77:d4:a7:8b:ac:f9:85:9c:f7:ba:f8:55:a5:1e:88:d2:
9e:c8:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:20:23 2025 by rpki-client