Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/Glr6u_s5CXtQU33JFdKRNodC1Uw.roa
File: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (raw, json)
Hash identifier: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=
Subject key identifier: 1A:5A:FA:BB:FB:39:09:7B:50:53:7D:C9:15:D2:91:36:87:42:D5:4C
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 0197A6F5416F8DF8F1DA398929B6CE62B8E1
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/Glr6u_s5CXtQU33JFdKRNodC1Uw.roa
Signing time: Wed 25 Jun 2025 11:59:40 +0000
ROA not before: Wed 25 Jun 2025 11:59:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42947
IP address blocks: 5.181.236.0/24 maxlen: 24
5.181.237.0/24 maxlen: 24
5.181.238.0/24 maxlen: 24
5.181.239.0/24 maxlen: 24
45.95.76.0/24 maxlen: 24
45.95.77.0/24 maxlen: 24
45.95.78.0/24 maxlen: 24
45.95.79.0/24 maxlen: 24
89.34.28.0/22 maxlen: 24
91.213.74.0/24 maxlen: 24
91.213.75.0/24 maxlen: 24
94.154.3.0/24 maxlen: 24
176.101.72.0/21 maxlen: 24
185.50.116.0/22 maxlen: 24
185.88.232.0/22 maxlen: 24
185.110.224.0/22 maxlen: 24
185.152.108.0/23 maxlen: 24
185.152.110.0/24 maxlen: 24
185.213.108.0/24 maxlen: 24
185.213.109.0/24 maxlen: 24
185.213.110.0/24 maxlen: 24
193.31.96.0/22 maxlen: 24
193.32.72.0/21 maxlen: 24
193.150.16.0/22 maxlen: 24
193.187.184.0/22 maxlen: 24
194.36.200.0/22 maxlen: 24
2a02:2b60::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:f5:41:6f:8d:f8:f1:da:39:89:29:b6:ce:62:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Jun 25 11:59:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a5afabbfb39097b50537dc915d291368742d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:9f:7f:3b:5e:15:ee:13:9d:f8:3e:b3:bb:
b3:79:7e:ee:24:f6:7a:99:77:69:78:d6:e1:ed:4d:
e2:70:33:4c:37:b4:1f:e1:9c:2b:02:4e:06:72:06:
27:09:f7:e1:28:a2:29:95:53:6c:be:ee:47:2f:dd:
eb:b4:86:a3:9c:45:34:71:70:0d:09:ec:16:e8:1e:
ec:a4:56:27:64:cb:5a:51:95:c0:e1:1a:a1:8f:0c:
7a:ed:9d:19:ca:64:e4:da:b8:14:a3:52:1f:de:1f:
3e:cd:0e:b6:5c:5f:9a:d8:a3:cc:fe:74:74:a3:6e:
91:1b:8a:22:ad:e3:26:76:5e:e0:3c:fa:75:09:06:
6b:a5:87:34:9e:73:04:1d:7c:5b:8b:cd:84:6b:11:
73:cc:6a:f1:fb:d2:7d:b4:07:13:e9:7a:7d:1a:79:
49:b8:23:3a:d8:f6:52:a9:76:87:b0:3f:9f:40:7a:
ad:93:ce:26:ac:44:50:73:35:0d:31:e5:31:bc:25:
34:41:5e:1c:73:d8:d4:51:93:96:ff:42:9d:88:d8:
fa:66:4e:d8:cc:61:0b:0f:36:0d:fc:04:d8:07:a4:
84:ca:fb:1a:7b:58:80:8a:a8:97:a3:aa:9a:e9:87:
d2:f5:78:b5:db:49:69:ac:f1:ff:27:fc:e8:4a:85:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:FA:BB:FB:39:09:7B:50:53:7D:C9:15:D2:91:36:87:42:D5:4C
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/Glr6u_s5CXtQU33JFdKRNodC1Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.236.0/22
45.95.76.0/22
89.34.28.0/22
91.213.74.0/23
94.154.3.0/24
176.101.72.0/21
185.50.116.0/22
185.88.232.0/22
185.110.224.0/22
185.152.108.0-185.152.110.255
185.213.108.0-185.213.110.255
193.31.96.0/22
193.32.72.0/21
193.150.16.0/22
193.187.184.0/22
194.36.200.0/22
IPv6:
2a02:2b60::/32
Signature Algorithm: sha256WithRSAEncryption
16:ec:27:ed:6b:05:cc:bc:4f:51:33:9d:ea:72:8d:06:96:28:
12:e7:a2:1b:97:9e:38:e9:7c:9c:2b:41:81:bd:bd:e2:fa:59:
c1:12:1f:23:72:42:ff:c5:e5:6f:c8:f0:e0:14:9a:3a:56:e8:
61:5b:a4:5f:41:3f:d6:f2:16:f6:91:3c:d1:ed:f9:f3:af:31:
da:0b:a8:f9:f8:75:e3:44:4a:79:e1:4a:c6:7c:17:6e:86:a5:
18:ef:70:6b:da:2a:d2:40:0a:91:8d:be:79:42:65:4d:02:b4:
6c:fc:92:e9:9b:a3:35:0d:e5:0d:ab:a2:ca:5e:23:45:d0:40:
18:bc:fb:3b:71:d9:f9:58:12:31:75:ac:96:c1:5c:43:6f:02:
31:8f:d1:63:eb:e6:70:a5:8b:7c:6d:6f:f9:e6:bd:dd:05:dc:
3a:33:16:ce:aa:3e:37:a9:d1:13:00:f0:f7:56:97:c2:69:f2:
24:ff:41:d7:4a:1f:6f:91:2e:ed:dd:5c:6c:06:f0:71:4d:65:
a9:d1:72:0c:d5:e3:79:7c:51:ab:61:da:c3:11:fc:59:45:39:
44:6c:49:ff:4a:cc:ef:1e:77:e6:00:c2:df:b7:48:b3:4e:db:
68:19:08:bb:30:2e:44:66:41:3a:f9:c8:2a:cd:7a:63:3d:d3:
f4:3a:58:f1
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZem9UFvjfjx2jmJKbbOYrjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3
ZWYxNjYwHhcNMjUwNjI1MTE1OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTVhZmFiYmZiMzkwOTdiNTA1MzdkYzkxNWQyOTEzNjg3NDJkNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohSffzteFe4Tnfg+s7uzeX7uJPZ6
mXdpeNbh7U3icDNMN7Qf4ZwrAk4GcgYnCffhKKIplVNsvu5HL93rtIajnEU0cXAN
CewW6B7spFYnZMtaUZXA4Rqhjwx67Z0ZymTk2rgUo1If3h8+zQ62XF+a2KPM/nR0
o26RG4oireMmdl7gPPp1CQZrpYc0nnMEHXxbi82EaxFzzGrx+9J9tAcT6Xp9GnlJ
uCM62PZSqXaHsD+fQHqtk84mrERQczUNMeUxvCU0QV4cc9jUUZOW/0KdiNj6Zk7Y
zGELDzYN/ATYB6SEyvsae1iAiqiXo6qa6YfS9Xi120lprPH/J/zoSoWT5wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFBpa+rv7OQl7UFN9yRXSkTaHQtVMMB8GA1UdIwQY
MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt
NDY5MzVmY2M4NTVlLzEvR2xyNnVfczVDWHRRVTMzSkZkS1JOb2RDMVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl
LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwAwQCBbXs
AwQCLV9MAwQCWSIcAwQBW9VKAwQAXpoDAwQDsGVIAwQCuTJ0AwQCuVjoAwQCuW7g
MAwDBAK5mGwDBAC5mG4wDAMEArnVbAMEALnVbgMEAsEfYAMEA8EgSAMEAsGWEAME
AsG7uAMEAsIkyDANBAIAAjAHAwUAKgIrYDANBgkqhkiG9w0BAQsFAAOCAQEAFuwn
7WsFzLxPUTOd6nKNBpYoEueiG5eeOOl8nCtBgb294vpZwRIfI3JC/8Xlb8jw4BSa
OlboYVukX0E/1vIW9pE80e35868x2guo+fh140RKeeFKxnwXboalGO9wa9oq0kAK
kY2+eUJlTQK0bPyS6ZujNQ3lDauiyl4jRdBAGLz7O3HZ+VgSMXWslsFcQ28CMY/R
Y+vmcKWLfG1v+ea93QXcOjMWzqo+N6nREwDw91aXwmnyJP9B10ofb5Eu7d1cbAbw
cU1lqdFyDNXjeXxRq2HawxH8WUU5RGxJ/0rM7x535gDC37dIs07baBkIuzAuRGZB
OvnIKs16Yz3T9DpY8Q==
-----END CERTIFICATE-----
Generated at Fri Jul 4 15:18:00 2025 by rpki-client