Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/5lrGfq58aTW_pE055xCJWqbwHHI.roa
File: 5lrGfq58aTW_pE055xCJWqbwHHI.roa (raw, json)
Hash identifier: HZ/ABKHtPjzdW+3khr3PKfbOq8CHBTNqQUp9BotDJOM=
Subject key identifier: E6:5A:C6:7E:AE:7C:69:35:BF:A4:4D:39:E7:10:89:5A:A6:F0:1C:72
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019839370999E648B9464408267BE1E46EB3
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/5lrGfq58aTW_pE055xCJWqbwHHI.roa
Signing time: Wed 23 Jul 2025 21:36:04 +0000
ROA not before: Wed 23 Jul 2025 21:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216067
IP address blocks: 104.167.26.0/23 maxlen: 23
176.116.4.0/24 maxlen: 24
185.77.23.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
217.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:37:09:99:e6:48:b9:46:44:08:26:7b:e1:e4:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Jul 23 21:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65ac67eae7c6935bfa44d39e710895aa6f01c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:f8:7e:c9:e9:8e:ee:71:8d:c4:52:76:a1:
8b:3e:dc:c8:71:56:b9:0f:7c:6b:d8:28:57:da:1d:
a4:ae:1a:54:48:e3:68:79:0e:c8:0c:90:b8:99:0a:
b1:5c:4b:4d:97:5d:e8:08:c1:3a:f5:0d:a7:7c:8e:
ee:ac:f7:99:55:37:49:79:39:cd:6b:d7:ce:dc:1e:
c8:63:c9:ad:f8:9d:4c:cd:b3:b7:b6:78:e8:44:07:
b9:96:9b:b3:2b:26:f6:f5:39:56:fa:b6:66:d6:95:
c5:67:e7:f1:16:15:5e:25:1b:4f:9e:60:b4:eb:19:
70:a4:d0:d4:8a:df:ca:aa:ea:fe:46:1c:cc:f4:03:
68:dc:bb:3c:a7:60:83:fb:c7:6a:71:81:68:31:ed:
31:b6:8e:1a:5c:c5:a8:c0:2b:19:d4:ce:ee:13:6c:
1c:60:0f:af:7d:2e:bb:7b:30:63:83:22:d1:b1:2b:
b2:b1:f8:69:a8:bd:fa:a6:e5:52:59:e9:5d:31:aa:
e4:92:1c:3e:e4:30:33:33:ce:e2:4e:a4:32:5e:ff:
62:dc:3a:83:45:a9:2c:5f:34:b3:51:46:0c:89:9e:
2a:c1:73:fd:db:af:e6:e9:ed:32:44:c9:54:ae:f9:
6a:10:d8:e3:77:a1:c6:1e:42:96:86:aa:bd:25:c6:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5A:C6:7E:AE:7C:69:35:BF:A4:4D:39:E7:10:89:5A:A6:F0:1C:72
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/5lrGfq58aTW_pE055xCJWqbwHHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.26.0/23
176.116.4.0/24
185.77.23.0/24
185.188.16.0/24
217.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e4:4b:c0:57:df:f7:9e:a8:77:1f:80:43:3d:83:4a:46:b0:
30:4d:20:7b:9c:14:7b:fd:43:25:62:c7:b6:57:89:55:cc:60:
2c:9b:af:31:32:83:9d:63:ae:4e:9f:b5:ef:ae:72:55:e3:92:
9d:36:47:b4:86:47:b9:53:c5:1f:cb:70:58:a8:bf:01:26:c5:
a1:b1:ac:f7:21:0f:21:a4:25:8a:c6:8f:c3:76:69:61:18:c2:
44:8e:e8:db:0f:43:5e:e4:19:cd:06:27:7a:20:8c:0b:90:38:
58:e5:e8:c7:4e:59:fe:bb:ac:ff:81:19:50:a0:2b:28:58:b1:
5b:46:06:57:2f:5a:c4:b7:a1:17:89:1a:7e:ff:26:69:73:25:
68:b9:8e:aa:ff:51:f6:56:f1:f8:df:d8:c6:ea:97:44:cb:37:
bb:c0:2f:3a:32:5c:bd:9c:a3:42:15:bf:88:6a:75:00:08:aa:
53:04:c8:5e:65:ac:61:06:30:8b:97:33:58:d2:4b:45:51:47:
fe:90:df:41:07:90:38:f0:73:60:7b:35:55:45:61:6b:e5:19:
66:1f:85:ca:69:34:21:e7:15:dc:61:71:2b:a3:ad:5b:f6:ff:
76:1a:d0:95:45:46:7b:97:18:4c:d5:41:e6:e2:b7:d5:01:b8:
b9:6d:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:20 2025 by rpki-client