
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa
File: bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa (raw, json)
Hash identifier: 0VXWmptilJp/NZdJSyteya06wYsuekGmJXgRcUTXwzQ=
Subject key identifier: 6C:E2:67:DC:2E:17:FC:76:D5:AB:58:7A:51:B3:E6:78:76:BC:F5:79
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0199CB222AE7F562BF8C3D749F4CCA4A191B
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa
Signing time: Thu 09 Oct 2025 22:40:37 +0000
ROA not before: Thu 09 Oct 2025 22:40:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31655
IP address blocks: 5.2.96.0/19 maxlen: 24
5.144.156.0/22 maxlen: 24
62.223.128.0/17 maxlen: 17
80.252.64.0/20 maxlen: 24
88.215.0.0/18 maxlen: 29
89.213.8.0/21 maxlen: 24
89.213.16.0/20 maxlen: 24
89.213.32.0/21 maxlen: 24
185.4.196.0/22 maxlen: 24
185.21.208.0/22 maxlen: 24
188.66.64.0/18 maxlen: 24
195.162.96.0/19 maxlen: 24
213.218.192.0/20 maxlen: 24
2a02:c1c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:22:2a:e7:f5:62:bf:8c:3d:74:9f:4c:ca:4a:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Oct 9 22:40:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce267dc2e17fc76d5ab587a51b3e67876bcf579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:77:5c:13:20:c5:89:65:b7:53:53:c0:f6:
7d:fd:a9:65:84:d4:69:4d:be:06:c7:8a:b0:c8:3d:
fc:a4:f5:88:2a:60:b7:1f:a4:9f:0d:a3:ac:5b:44:
d3:c7:7c:75:72:4b:72:15:50:d7:c3:5f:cf:50:e2:
13:56:0c:28:88:bf:05:4d:03:00:ac:37:cb:4c:21:
00:3c:cb:b9:12:c4:33:df:e5:9b:bb:8b:82:00:a9:
0a:66:8d:53:e6:89:ad:2c:e0:a4:11:ba:3f:13:0b:
ea:1d:aa:42:33:b3:7f:46:32:a4:7b:d4:5f:ed:bb:
a1:b4:88:0b:60:b0:4d:40:ec:37:4d:3e:eb:bd:ea:
3a:c6:2f:73:27:bf:e3:b7:03:cf:01:8c:0f:5d:28:
20:06:55:02:77:c4:85:83:29:8f:84:3f:9d:33:e6:
cd:d6:6e:b8:16:e6:a3:34:5e:d8:23:7b:0d:9c:0e:
f3:c8:c5:e5:0f:41:70:67:9d:e5:85:4e:21:17:06:
0d:26:2e:46:9b:99:e1:e2:b5:5b:20:51:30:d0:57:
30:54:79:fa:b3:96:a9:4f:04:d5:c4:ea:c9:24:23:
8b:1a:e9:bc:3e:0f:23:a6:9c:0e:93:c4:04:73:b9:
08:79:09:48:01:f4:ca:14:18:86:11:76:5a:c7:60:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:67:DC:2E:17:FC:76:D5:AB:58:7A:51:B3:E6:78:76:BC:F5:79
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.96.0/19
5.144.156.0/22
62.223.128.0/17
80.252.64.0/20
88.215.0.0/18
89.213.8.0-89.213.39.255
185.4.196.0/22
185.21.208.0/22
188.66.64.0/18
195.162.96.0/19
213.218.192.0/20
IPv6:
2a02:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:c7:f5:66:8d:a4:d1:2d:84:b8:51:c2:40:90:3a:26:4f:22:
e2:fd:fe:95:e0:2b:5f:41:7b:9b:d6:d8:97:22:c6:db:64:cb:
52:ce:7a:2f:b5:88:81:ed:60:2c:1a:21:f1:26:22:1a:f0:8a:
ed:0a:a3:8b:b8:26:b2:65:ce:24:04:63:da:1d:a5:6b:32:85:
d8:7f:5a:e9:80:77:8a:33:eb:05:c5:fd:a7:a4:48:22:65:2f:
b4:94:7d:b3:bd:55:d1:79:48:1d:b8:45:2c:f0:ab:a3:7a:47:
c8:e5:a9:8e:8b:53:06:07:3b:73:34:9b:04:a9:96:37:b4:fc:
4a:4d:72:8c:ae:52:81:b8:b6:68:05:db:7c:3a:93:42:ec:a1:
4b:9f:fb:a6:a3:cf:07:cd:7c:03:e1:9b:c8:94:42:9b:b1:7c:
02:ee:1a:c2:c6:5d:fc:dc:0e:57:18:7c:a1:b5:37:c7:18:38:
92:d3:aa:2b:8b:60:b0:6f:f4:d5:55:56:e7:67:f9:26:2f:60:
fe:29:ce:87:66:04:3d:75:33:1a:6a:3a:ac:ef:37:af:f2:9e:
66:59:ab:60:69:ba:58:ae:84:a1:95:8d:a8:c7:c0:57:10:2a:
bd:92:36:4a:93:11:f4:72:a8:c1:25:85:90:49:e7:3c:d8:66:
9c:17:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:25:10 2025 by rpki-client