Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/5kjETkXDgRN5AQgcYVTyCfHcaTs.roa
File: 5kjETkXDgRN5AQgcYVTyCfHcaTs.roa (raw, json)
Hash identifier: bOiEMOwDVjt7cP9F2mzpRd1dgn6o9/86wmrWhaYcqlc=
Subject key identifier: E6:48:C4:4E:45:C3:81:13:79:01:08:1C:61:54:F2:09:F1:DC:69:3B
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 0197C602CFEBAF822F3F36A23C1A91146261
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/5kjETkXDgRN5AQgcYVTyCfHcaTs.roa
Signing time: Tue 01 Jul 2025 12:42:42 +0000
ROA not before: Tue 01 Jul 2025 12:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5617
IP address blocks: 5.184.0.0/15 maxlen: 15
5.184.0.0/16 maxlen: 24
31.60.0.0/14 maxlen: 25
37.47.0.0/16 maxlen: 24
37.108.0.0/16 maxlen: 25
37.225.0.0/16 maxlen: 25
37.228.0.0/18 maxlen: 18
46.134.0.0/16 maxlen: 25
46.170.0.0/15 maxlen: 24
79.162.0.0/15 maxlen: 24
79.163.0.0/16 maxlen: 25
79.163.128.0/17 maxlen: 25
79.184.0.0/13 maxlen: 13
79.184.0.0/16 maxlen: 24
79.185.0.0/16 maxlen: 24
79.186.0.0/16 maxlen: 24
79.187.0.0/16 maxlen: 24
79.188.0.0/16 maxlen: 24
79.189.0.0/16 maxlen: 24
79.190.0.0/16 maxlen: 24
79.191.0.0/16 maxlen: 24
80.48.0.0/13 maxlen: 13
80.48.0.0/14 maxlen: 14
80.48.0.0/16 maxlen: 24
80.49.0.0/16 maxlen: 24
80.50.0.0/16 maxlen: 24
80.51.0.0/16 maxlen: 24
80.52.0.0/16 maxlen: 24
80.53.0.0/16 maxlen: 24
80.54.0.0/16 maxlen: 24
80.55.0.0/16 maxlen: 24
83.0.0.0/11 maxlen: 11
83.0.0.0/13 maxlen: 13
83.0.0.0/16 maxlen: 24
83.1.0.0/16 maxlen: 24
83.2.0.0/16 maxlen: 24
83.3.0.0/16 maxlen: 24
83.4.0.0/16 maxlen: 24
83.5.0.0/16 maxlen: 24
83.6.0.0/16 maxlen: 24
83.7.0.0/16 maxlen: 24
83.8.0.0/13 maxlen: 13
83.8.0.0/16 maxlen: 24
83.9.0.0/16 maxlen: 24
83.10.0.0/16 maxlen: 24
83.11.0.0/16 maxlen: 24
83.12.0.0/16 maxlen: 24
83.13.0.0/16 maxlen: 24
83.14.0.0/16 maxlen: 24
83.15.0.0/16 maxlen: 24
83.16.0.0/13 maxlen: 13
83.16.0.0/16 maxlen: 24
83.17.0.0/16 maxlen: 24
83.18.0.0/16 maxlen: 24
83.19.0.0/16 maxlen: 24
83.20.0.0/16 maxlen: 24
83.21.0.0/16 maxlen: 24
83.22.0.0/16 maxlen: 24
83.23.0.0/16 maxlen: 24
83.24.0.0/13 maxlen: 13
83.24.0.0/16 maxlen: 24
83.25.0.0/16 maxlen: 24
83.26.0.0/16 maxlen: 24
83.27.0.0/16 maxlen: 24
83.28.0.0/16 maxlen: 24
83.29.0.0/16 maxlen: 24
83.30.0.0/16 maxlen: 24
83.31.0.0/16 maxlen: 24
87.96.0.0/17 maxlen: 24
91.94.0.0/16 maxlen: 24
95.48.0.0/14 maxlen: 14
95.48.0.0/16 maxlen: 24
95.49.0.0/16 maxlen: 24
95.50.0.0/16 maxlen: 24
95.51.0.0/16 maxlen: 24
178.42.0.0/15 maxlen: 24
178.56.0.0/16 maxlen: 24
188.47.0.0/16 maxlen: 24
193.110.120.0/22 maxlen: 22
194.204.128.0/18 maxlen: 18
194.204.152.0/24 maxlen: 24
194.204.159.0/24 maxlen: 24
195.116.0.0/16 maxlen: 24
195.117.0.0/16 maxlen: 24
195.205.0.0/16 maxlen: 24
195.205.147.0/24 maxlen: 24
195.205.239.0/24 maxlen: 24
212.160.0.0/16 maxlen: 24
212.160.172.0/24 maxlen: 24
212.244.0.0/16 maxlen: 24
212.244.226.0/24 maxlen: 24
213.25.0.0/16 maxlen: 24
213.25.92.0/24 maxlen: 24
213.25.125.0/24 maxlen: 24
213.25.164.0/24 maxlen: 24
213.25.166.0/24 maxlen: 24
213.76.0.0/16 maxlen: 24
213.76.129.0/24 maxlen: 24
213.76.135.0/24 maxlen: 24
213.76.140.0/24 maxlen: 24
213.76.143.0/24 maxlen: 24
213.76.146.0/24 maxlen: 24
213.77.0.0/16 maxlen: 24
213.77.0.0/17 maxlen: 17
213.77.5.0/24 maxlen: 24
213.77.20.0/24 maxlen: 24
213.77.34.0/24 maxlen: 24
213.77.68.0/24 maxlen: 24
213.77.68.192/26 maxlen: 26
217.96.0.0/14 maxlen: 14
217.96.0.0/16 maxlen: 24
217.97.0.0/16 maxlen: 24
217.98.0.0/16 maxlen: 24
217.99.0.0/16 maxlen: 24
217.116.96.0/20 maxlen: 20
217.116.100.0/22 maxlen: 22
2a00:f40::/29 maxlen: 29
2a01:1000::/21 maxlen: 21
2a01:1100::/28 maxlen: 28
2a01:1110::/28 maxlen: 28
2a01:1120::/28 maxlen: 28
2a01:1130::/28 maxlen: 28
2a01:1140::/28 maxlen: 28
2a01:1150::/28 maxlen: 28
2a01:1160::/28 maxlen: 28
2a01:1170::/28 maxlen: 28
2a01:1180::/28 maxlen: 28
2a01:1190::/28 maxlen: 28
2a01:11a0::/28 maxlen: 28
2a01:11b0::/28 maxlen: 28
2a01:11c0::/28 maxlen: 28
2a01:11d0::/28 maxlen: 28
2a01:1700:2::/48 maxlen: 48
2a01:1700:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 04:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:02:cf:eb:af:82:2f:3f:36:a2:3c:1a:91:14:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jul 1 12:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e648c44e45c381137901081c6154f209f1dc693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:4f:71:19:10:4c:1e:b7:be:12:22:8f:03:
41:91:f0:04:a7:3b:c0:ab:ab:75:76:20:40:eb:35:
f0:a1:40:07:28:1a:8f:3c:94:22:1a:36:d9:f9:14:
26:4e:59:fc:20:8a:93:b3:25:17:4d:ba:4f:58:85:
fb:b1:a1:de:5e:15:a1:b4:c0:d6:e5:d3:63:19:03:
3c:27:5e:8b:58:bb:3b:6b:88:06:93:3a:df:43:ed:
40:2e:c5:5b:e3:30:4b:6b:6d:2e:93:d6:e5:3e:a0:
ee:3b:a2:e0:27:d7:eb:35:90:e2:e2:0f:7e:fa:d0:
24:d9:e6:0b:d5:9d:5b:58:5d:dc:ef:6e:f3:79:e1:
e0:6d:a7:f1:21:69:39:9d:ff:34:41:dd:87:03:80:
42:9b:36:7e:ce:14:20:10:25:9b:36:80:80:11:2f:
48:da:de:9c:eb:fb:75:f3:f0:b8:bc:ad:b1:e1:e5:
1b:7e:93:fa:2c:e4:2e:a2:6d:b3:c5:c6:4b:12:15:
aa:42:18:91:5b:e7:e2:0a:a2:7c:b8:5e:0c:87:4d:
ef:e6:0f:9e:41:bc:18:32:19:30:6d:73:fd:84:e5:
ab:71:b8:ff:bb:27:e2:2b:d3:6d:f0:8e:6d:1e:e7:
82:61:e2:0f:00:51:37:8a:86:8f:4e:78:cf:9e:90:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:C4:4E:45:C3:81:13:79:01:08:1C:61:54:F2:09:F1:DC:69:3B
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/5kjETkXDgRN5AQgcYVTyCfHcaTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.184.0.0/15
31.60.0.0/14
37.47.0.0/16
37.108.0.0/16
37.225.0.0/16
37.228.0.0/18
46.134.0.0/16
46.170.0.0/15
79.162.0.0/15
79.184.0.0/13
80.48.0.0/13
83.0.0.0/11
87.96.0.0/17
91.94.0.0/16
95.48.0.0/14
178.42.0.0/15
178.56.0.0/16
188.47.0.0/16
193.110.120.0/22
194.204.128.0/18
195.116.0.0/15
195.205.0.0/16
212.160.0.0/16
212.244.0.0/16
213.25.0.0/16
213.76.0.0/15
217.96.0.0/14
217.116.96.0/20
IPv6:
2a00:f40::/29
2a01:1000::/21
Signature Algorithm: sha256WithRSAEncryption
1b:79:8d:82:cd:22:31:e8:87:f2:4b:72:4a:5c:be:b4:82:c1:
72:d1:47:c6:bd:85:8f:92:5c:97:c3:ad:29:17:be:6a:56:f2:
3f:f2:81:97:65:c8:82:bb:be:df:4e:63:9c:6f:40:73:15:2d:
fa:8c:6f:06:1e:70:86:ad:6a:ed:f0:2a:56:db:d4:81:89:ba:
90:a9:bc:31:3d:71:0c:26:bb:a3:86:1d:23:13:50:80:b4:37:
f9:dd:fc:03:a2:fa:90:75:6e:07:95:a9:f6:8f:cb:86:cc:2b:
e0:32:b2:0b:00:39:32:fe:30:00:44:d6:67:23:22:46:29:c9:
91:4e:2f:d4:e1:1c:26:55:59:11:2b:0f:1f:bb:71:60:fc:a3:
37:9e:60:3b:1a:8f:62:ab:27:eb:98:97:3a:25:e6:85:ff:80:
32:72:f8:36:7f:31:30:da:ec:aa:92:50:3d:ec:e3:cb:7b:e9:
ec:e7:a6:b9:79:78:7e:aa:dd:aa:c4:0d:32:44:93:4c:48:53:
67:37:a8:fc:9b:e8:af:db:d4:16:f6:26:25:4c:cc:99:01:40:
a0:5e:77:3d:34:e6:4f:0a:73:99:f1:39:99:80:2e:08:ea:ab:
6c:99:aa:ad:4d:cc:f5:b3:31:a0:57:eb:e4:35:30:d0:84:97:
7c:af:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:18:39 2025 by rpki-client