Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/ySA9OBac-fQMA-n315rMATvrw4o.roa
File: ySA9OBac-fQMA-n315rMATvrw4o.roa (raw, json)
Hash identifier: efmzH5mmFGq+U88ULHZimpaXnJqSKGJ9lGj0vmroSJc=
Subject key identifier: C9:20:3D:38:16:9C:F9:F4:0C:03:E9:F7:D7:9A:CC:01:3B:EB:C3:8A
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 0197A6B8D52661AA8B6D5281265E695ACCC5
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/ySA9OBac-fQMA-n315rMATvrw4o.roa
Signing time: Wed 25 Jun 2025 10:53:40 +0000
ROA not before: Wed 25 Jun 2025 10:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 5.249.160.0/24 maxlen: 24
5.249.161.0/24 maxlen: 24
5.249.162.0/24 maxlen: 24
5.249.163.0/24 maxlen: 24
5.249.164.0/24 maxlen: 24
45.141.36.0/24 maxlen: 24
45.141.37.0/24 maxlen: 24
45.146.252.0/24 maxlen: 24
45.146.253.0/24 maxlen: 24
45.146.254.0/24 maxlen: 24
45.146.255.0/24 maxlen: 24
88.214.56.0/24 maxlen: 24
88.214.57.0/24 maxlen: 24
88.214.58.0/24 maxlen: 24
92.42.44.0/22 maxlen: 22
92.42.44.0/24 maxlen: 24
92.42.45.0/24 maxlen: 24
92.42.46.0/24 maxlen: 24
92.42.47.0/24 maxlen: 24
134.255.216.0/24 maxlen: 24
134.255.217.0/24 maxlen: 24
134.255.218.0/24 maxlen: 24
134.255.219.0/24 maxlen: 24
147.189.168.0/24 maxlen: 24
147.189.169.0/24 maxlen: 24
147.189.170.0/24 maxlen: 24
147.189.171.0/24 maxlen: 24
147.189.172.0/24 maxlen: 24
147.189.173.0/24 maxlen: 24
147.189.174.0/24 maxlen: 24
147.189.175.0/24 maxlen: 24
185.223.28.0/24 maxlen: 24
185.223.29.0/24 maxlen: 24
185.223.30.0/24 maxlen: 24
185.223.31.0/24 maxlen: 24
185.239.236.0/24 maxlen: 24
185.239.237.0/24 maxlen: 24
185.239.238.0/24 maxlen: 24
185.239.239.0/24 maxlen: 24
185.249.197.0/24 maxlen: 24
185.249.198.0/24 maxlen: 24
185.249.199.0/24 maxlen: 24
193.23.126.0/24 maxlen: 24
193.23.127.0/24 maxlen: 24
193.23.160.0/24 maxlen: 24
193.23.161.0/24 maxlen: 24
193.203.238.0/24 maxlen: 24
194.156.88.0/24 maxlen: 24
194.156.90.0/24 maxlen: 24
194.156.91.0/24 maxlen: 24
2a0c:3580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:b8:d5:26:61:aa:8b:6d:52:81:26:5e:69:5a:cc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jun 25 10:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9203d38169cf9f40c03e9f7d79acc013bebc38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:bd:94:71:af:0b:9a:8d:5e:3a:b8:95:ac:
11:f6:f0:a9:bc:62:9f:94:06:6d:cb:2e:19:ba:0f:
c4:26:f7:96:e2:ed:d5:a9:f3:95:7b:29:2a:5b:c7:
15:5a:f7:ae:2e:fb:08:d9:09:b8:96:01:c3:da:04:
43:57:4e:ec:7c:25:10:2b:fc:ec:96:1b:74:a9:7b:
c8:48:54:d1:b7:bb:af:33:3d:21:35:6c:c1:dd:ce:
f0:5b:ce:5b:6c:50:ff:90:9b:4d:2e:2f:90:6d:a6:
ef:23:bd:b2:43:db:bd:1a:6d:28:a6:02:84:96:6b:
1d:7b:9a:f9:74:c6:fd:89:31:90:e7:27:4c:04:bb:
22:dc:3b:ff:68:7e:e6:ee:b1:5f:68:fc:61:68:ef:
ae:ea:5f:11:ba:88:ff:0b:64:da:e1:3a:e6:9f:c3:
cb:55:82:22:e2:4d:fd:e5:b7:53:a1:3e:51:db:05:
3a:ff:0a:3c:68:d7:e3:93:26:9c:c5:17:d1:6e:03:
2b:5d:1c:d6:0f:5e:a9:9b:43:51:e2:8b:5c:49:80:
2d:70:7a:88:47:3d:60:d7:d9:4e:61:b7:fe:de:ee:
cf:15:19:ee:32:84:e9:e2:7a:36:6d:9b:48:15:07:
67:03:e7:b1:11:e4:4b:21:f7:ac:bd:5f:33:85:d1:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:3D:38:16:9C:F9:F4:0C:03:E9:F7:D7:9A:CC:01:3B:EB:C3:8A
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/ySA9OBac-fQMA-n315rMATvrw4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.160.0-5.249.164.255
45.141.36.0/23
45.146.252.0/22
88.214.56.0-88.214.58.255
92.42.44.0/22
134.255.216.0/22
147.189.168.0/21
185.223.28.0/22
185.239.236.0/22
185.249.197.0-185.249.199.255
193.23.126.0/23
193.23.160.0/23
193.203.238.0/24
194.156.88.0/24
194.156.90.0/23
IPv6:
2a0c:3580::/29
Signature Algorithm: sha256WithRSAEncryption
93:4c:f5:7c:9a:5c:c4:ab:57:29:02:97:8d:64:dd:1b:69:b9:
6e:7c:fa:f0:bf:29:c5:29:4f:0f:d0:03:c5:fe:26:ca:4a:b5:
06:3b:85:b2:ce:ec:d6:db:e5:f5:75:67:db:e4:5d:7b:1d:85:
47:fa:d0:a2:f4:bc:81:14:d1:50:e0:83:38:be:9f:57:41:46:
dd:44:05:ef:ac:f7:f3:17:3d:0d:40:8d:f5:07:fe:d2:d8:bd:
95:bb:11:63:8d:71:1a:d4:8f:8c:71:f0:2b:6b:6f:67:0d:2e:
5f:37:26:53:20:8f:df:84:f1:c2:c3:16:4c:72:1b:90:89:76:
dc:24:e7:1d:ed:f8:36:76:df:fa:67:de:ff:bb:f8:4f:96:ff:
49:6f:de:8d:25:8c:56:8b:bc:91:93:c3:51:50:54:53:c5:75:
2b:13:55:42:95:03:e0:17:c8:58:a1:5a:32:f1:30:e6:61:b6:
3a:b2:8a:e5:c0:18:d6:83:b0:ba:f9:d8:e4:1b:1f:b3:49:f0:
ea:be:04:3f:62:b0:f8:39:5c:92:77:a6:c3:6d:62:ba:93:1a:
12:3d:02:87:9d:1a:96:a3:ca:bf:94:cc:1a:4c:d4:c2:4e:e4:
b6:d7:05:3e:c4:10:c0:25:87:56:65:89:62:e7:7e:35:55:35:
67:56:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:45 2025 by rpki-client