Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa
File: 4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa (raw, json)
Hash identifier: lLEUdxQQ/ffC7NhoECBTe0Cnix1csYMCuJzl8ssByXo=
Subject key identifier: E1:18:B8:ED:5D:D6:1E:AE:2D:2A:80:C7:84:E9:75:AF:08:76:28:00
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0198BDD75BD1C9C5B3780CF032E0ACF9B087
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa
Signing time: Mon 18 Aug 2025 15:41:04 +0000
ROA not before: Mon 18 Aug 2025 15:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44709
IP address blocks: 5.100.248.0/24 maxlen: 24
5.100.249.0/24 maxlen: 24
5.100.250.0/24 maxlen: 24
5.100.251.0/24 maxlen: 24
5.100.252.0/24 maxlen: 24
5.100.253.0/24 maxlen: 24
5.100.254.0/24 maxlen: 24
5.100.255.0/24 maxlen: 24
31.133.100.0/24 maxlen: 24
31.133.102.0/24 maxlen: 24
31.133.103.0/24 maxlen: 24
45.83.40.0/24 maxlen: 24
45.83.42.0/24 maxlen: 24
45.83.43.0/24 maxlen: 24
45.93.92.0/24 maxlen: 24
45.93.93.0/24 maxlen: 24
45.93.94.0/24 maxlen: 24
45.93.95.0/24 maxlen: 24
63.250.61.0/24 maxlen: 24
63.250.62.0/24 maxlen: 24
63.250.63.0/24 maxlen: 24
81.28.7.0/24 maxlen: 24
83.229.70.0/24 maxlen: 24
83.229.71.0/24 maxlen: 24
83.229.72.0/24 maxlen: 24
83.229.73.0/24 maxlen: 24
83.229.74.0/24 maxlen: 24
91.202.168.0/24 maxlen: 24
91.202.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.202.171.0/24 maxlen: 24
91.223.106.0/24 maxlen: 24
91.226.72.0/24 maxlen: 24
91.226.76.0/24 maxlen: 24
91.228.126.0/23 maxlen: 23
103.45.244.0/24 maxlen: 24
109.207.76.0/24 maxlen: 24
109.207.79.0/24 maxlen: 24
185.28.152.0/24 maxlen: 24
185.28.153.0/24 maxlen: 24
185.28.154.0/24 maxlen: 24
185.28.155.0/24 maxlen: 24
185.47.173.0/24 maxlen: 24
185.47.175.0/24 maxlen: 24
185.56.72.0/22 maxlen: 22
185.139.231.0/24 maxlen: 24
185.159.72.0/24 maxlen: 24
185.159.73.0/24 maxlen: 24
185.159.74.0/24 maxlen: 24
185.162.124.0/24 maxlen: 24
185.162.125.0/24 maxlen: 24
185.162.126.0/24 maxlen: 24
185.220.207.0/24 maxlen: 24
185.241.4.0/24 maxlen: 24
185.241.5.0/24 maxlen: 24
185.241.6.0/24 maxlen: 24
185.241.7.0/24 maxlen: 24
185.253.72.0/24 maxlen: 24
185.253.73.0/24 maxlen: 24
185.253.75.0/24 maxlen: 24
188.191.147.0/24 maxlen: 24
194.36.89.0/24 maxlen: 24
194.36.90.0/24 maxlen: 24
194.36.91.0/24 maxlen: 24
195.28.180.0/24 maxlen: 24
195.28.181.0/24 maxlen: 24
195.238.120.0/24 maxlen: 24
212.80.204.0/24 maxlen: 24
212.80.205.0/24 maxlen: 24
212.80.206.0/24 maxlen: 24
212.80.207.0/24 maxlen: 24
2a06:c5c0::/48 maxlen: 48
2a06:c5c0:700::/48 maxlen: 48
2a06:c5c0:900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:d7:5b:d1:c9:c5:b3:78:0c:f0:32:e0:ac:f9:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Aug 18 15:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e118b8ed5dd61eae2d2a80c784e975af08762800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:01:01:bf:58:98:40:a4:13:07:4d:73:51:
c5:94:7c:22:84:4f:db:5c:ca:c6:04:47:b3:2a:b4:
7e:e5:21:4f:b6:ed:67:6c:30:5a:ab:8c:02:6e:5d:
bc:93:3b:b3:fc:41:cc:4e:94:76:f1:04:79:b0:0d:
23:5b:5f:fc:4b:7a:e7:f5:9c:ff:3d:01:98:f1:e6:
b1:58:c5:c4:27:0d:a2:1f:cc:4a:10:cc:f0:e2:81:
ea:58:9f:30:c0:1f:7a:85:09:d7:f2:c1:64:b8:19:
dd:4d:a0:61:a5:67:14:e2:48:b2:af:1a:6c:a6:d0:
b5:37:52:20:13:c3:8d:05:4d:72:9d:6c:36:80:94:
51:b2:9e:be:6e:38:79:c1:bb:49:73:5a:c6:93:b7:
b4:55:b1:81:37:96:30:31:86:a4:b8:cb:07:5f:4e:
bc:93:45:ef:f7:78:04:40:22:d7:54:49:82:0c:98:
83:01:6f:f7:8e:f4:e2:e0:36:26:0c:bd:f6:dc:c2:
d7:71:af:4d:71:f3:81:08:0e:be:e6:c8:da:bd:8c:
e2:e9:9f:c4:7b:2b:8b:f5:b2:9d:d8:8b:4b:b5:7b:
c2:3e:66:8b:fa:6f:fc:f8:5d:3e:bd:68:d5:eb:75:
c1:a2:cb:49:a5:94:a9:1c:db:24:03:94:90:1f:37:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:18:B8:ED:5D:D6:1E:AE:2D:2A:80:C7:84:E9:75:AF:08:76:28:00
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.248.0/21
31.133.100.0/24
31.133.102.0/23
45.83.40.0/24
45.83.42.0/23
45.93.92.0/22
63.250.61.0-63.250.63.255
81.28.7.0/24
83.229.70.0-83.229.74.255
91.202.168.0/22
91.223.106.0/24
91.226.72.0/24
91.226.76.0/24
91.228.126.0/23
103.45.244.0/24
109.207.76.0/24
109.207.79.0/24
185.28.152.0/22
185.47.173.0/24
185.47.175.0/24
185.56.72.0/22
185.139.231.0/24
185.159.72.0-185.159.74.255
185.162.124.0-185.162.126.255
185.220.207.0/24
185.241.4.0/22
185.253.72.0/23
185.253.75.0/24
188.191.147.0/24
194.36.89.0-194.36.91.255
195.28.180.0/23
195.238.120.0/24
212.80.204.0/22
IPv6:
2a06:c5c0::/48
2a06:c5c0:700::/48
2a06:c5c0:900::/48
Signature Algorithm: sha256WithRSAEncryption
b6:a6:cd:ca:02:b0:a6:81:bb:d2:50:d5:93:b8:1e:d1:54:d4:
ca:50:48:cb:f0:05:ba:26:76:92:44:8a:50:06:40:e6:bb:5a:
47:e7:b6:dd:5a:71:20:ae:5f:06:7e:0a:c4:06:b6:48:aa:59:
e2:76:fa:7a:7a:d0:10:ca:27:84:14:3c:2c:68:4e:09:c4:80:
08:17:7c:37:c0:c2:84:3e:93:0b:e4:2f:e6:c6:a1:61:a9:c9:
a1:83:c7:8e:d6:f8:6e:95:5d:aa:3a:07:a4:d9:83:b7:2a:ce:
73:0c:8d:a4:5b:8d:55:78:ea:b6:39:44:82:44:1e:5f:9f:c8:
d2:86:ff:1f:35:db:ac:7c:a6:1c:0a:5e:34:ac:34:ae:20:2d:
86:e6:3d:cb:05:a4:49:78:21:da:32:9f:fa:74:bb:a3:50:d8:
35:8f:0d:f1:d4:ba:52:eb:dd:55:ea:ce:1d:12:da:cc:0b:88:
95:6a:69:56:e0:0e:cf:8b:fb:0f:2b:f1:e8:90:86:e0:bd:bd:
fa:4e:d9:3d:fd:4c:96:df:52:74:42:73:d0:b1:17:60:f7:a9:
c3:52:a7:74:d8:d4:c4:f7:6a:0d:39:ba:25:94:b8:77:3f:8e:
41:6b:2a:c2:b4:97:fe:c9:b5:0e:53:da:a5:84:a9:c9:29:5c:
f2:91:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:21 2025 by rpki-client