Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa
File: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (raw, json)
Hash identifier: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=
Subject key identifier: BA:BE:89:63:A2:D3:B7:D6:D2:74:5C:B1:FF:6C:12:E8:42:EC:23:30
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0197A0066670A25AA1DDC360CE7FF39C604E
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa
Signing time: Tue 24 Jun 2025 03:41:03 +0000
ROA not before: Tue 24 Jun 2025 03:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64249
IP address blocks: 5.182.199.0/24 maxlen: 24
45.67.142.0/24 maxlen: 24
45.67.143.0/24 maxlen: 24
45.67.144.0/24 maxlen: 24
63.246.128.0/24 maxlen: 24
63.246.156.0/24 maxlen: 24
63.246.157.0/24 maxlen: 24
79.98.181.0/24 maxlen: 24
92.249.28.0/24 maxlen: 24
94.154.168.0/23 maxlen: 23
94.154.176.0/24 maxlen: 24
94.154.179.0/24 maxlen: 24
193.148.94.0/24 maxlen: 24
2a0c:3ac1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:06:66:70:a2:5a:a1:dd:c3:60:ce:7f:f3:9c:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 24 03:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=babe8963a2d3b7d6d2745cb1ff6c12e842ec2330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:06:81:19:98:2a:90:86:9c:83:f6:6a:d2:
3d:25:79:44:8d:f9:8a:a7:72:95:ff:f0:22:96:ee:
c0:25:62:03:2c:42:ee:55:74:d4:15:19:a3:7f:73:
e3:3b:c6:47:67:1d:fe:1b:4e:6e:be:ea:bb:59:f6:
5a:f1:42:4b:1c:c3:f3:8b:f4:5a:16:49:03:36:75:
c1:3a:57:3c:06:73:eb:d1:eb:32:60:bb:54:7f:b4:
c8:e5:e8:cb:22:82:45:a1:ac:aa:0a:51:8f:44:ed:
35:f5:9e:ac:d0:db:1b:65:ca:7a:23:fb:98:69:ee:
44:ff:e1:cf:d4:d4:03:1a:87:90:b7:20:1d:d7:21:
52:bb:cf:92:45:26:27:7c:42:06:d8:54:36:85:37:
b7:00:ad:f4:6d:e1:bb:49:e8:95:ae:03:98:59:de:
9b:51:d6:a0:d8:43:26:ac:4d:20:53:c5:40:dc:44:
21:0c:52:24:9b:cb:7c:7a:3b:f1:05:33:70:3e:69:
6e:72:a0:de:66:d9:30:c0:13:3f:55:ff:34:e7:52:
46:26:2d:44:90:1d:88:13:8f:b1:e1:28:7a:fa:da:
10:1f:a2:94:f3:e8:b9:c5:f1:27:4b:e8:28:16:49:
6d:14:37:d9:46:ef:62:7c:9f:c7:83:bc:1a:09:17:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:89:63:A2:D3:B7:D6:D2:74:5C:B1:FF:6C:12:E8:42:EC:23:30
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.199.0/24
45.67.142.0-45.67.144.255
63.246.128.0/24
63.246.156.0/23
79.98.181.0/24
92.249.28.0/24
94.154.168.0/23
94.154.176.0/24
94.154.179.0/24
193.148.94.0/24
IPv6:
2a0c:3ac1::/32
Signature Algorithm: sha256WithRSAEncryption
17:af:04:72:1a:c4:ea:66:f2:78:52:95:80:8d:18:37:dd:ce:
02:f0:08:f1:36:7b:5d:21:4b:c8:7f:c2:f5:cc:b4:aa:0c:76:
7c:85:51:ec:d8:f6:24:b7:4a:27:03:e5:bd:46:19:a5:82:61:
2b:28:f0:7b:1b:d0:95:24:f0:92:f0:76:90:66:af:64:e6:8b:
ee:82:ca:f5:60:9e:c0:2b:c9:f2:bf:c7:5f:6d:39:c2:50:d0:
e2:c5:1a:ac:41:0c:f3:6d:66:d9:22:1c:1c:8f:7f:d8:c4:b0:
9c:31:4d:f1:2d:bf:13:71:70:2b:62:3e:8d:5e:76:4c:af:a5:
25:9b:ba:dc:79:f7:97:47:47:d1:9d:ed:fc:51:2d:c0:58:61:
10:3b:70:c1:82:ce:e4:e4:75:30:9f:f9:95:29:4d:47:bf:a1:
bb:20:43:e8:16:17:7f:11:6e:ca:f5:67:a2:3c:94:24:66:12:
55:97:aa:df:13:d8:b4:b4:9b:11:21:72:d1:28:6a:42:a6:f4:
48:68:a9:8f:47:00:1b:79:9c:06:41:0c:d1:38:b6:28:5e:d4:
6a:cf:36:04:4f:06:61:ee:23:3c:7c:ea:7e:e1:f2:f7:3d:f4:
e2:df:e7:88:a6:63:2e:a2:76:91:ed:ea:33:52:52:a7:35:8e:
39:fa:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:39:05 2025 by rpki-client