Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CoFhJ3VGHc9RH5deVGdavGDSMtk.roa
File: CoFhJ3VGHc9RH5deVGdavGDSMtk.roa (raw, json)
Hash identifier: E+i3RKp2nb4A31FXxnKHtXZGW3B9V7er7/L+Lw2swVA=
Subject key identifier: 0A:81:61:27:75:46:1D:CF:51:1F:97:5E:54:67:5A:BC:60:D2:32:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01985AF56C2B97F578C328D6C1C398EB1C96
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CoFhJ3VGHc9RH5deVGdavGDSMtk.roa
Signing time: Wed 30 Jul 2025 10:51:30 +0000
ROA not before: Wed 30 Jul 2025 10:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 5.253.56.0/24 maxlen: 24
5.253.57.0/24 maxlen: 24
5.253.58.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.216.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
185.207.14.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.186.0/24 maxlen: 24
193.8.187.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:f5:6c:2b:97:f5:78:c3:28:d6:c1:c3:98:eb:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 30 10:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a81612775461dcf511f975e54675abc60d232d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:a6:c6:97:64:f3:9a:e5:7c:af:75:8f:53:
8e:df:94:ce:95:26:50:78:44:ff:6a:71:29:2f:07:
9b:24:f0:4d:16:ed:fe:02:b9:c9:5a:50:36:0f:bd:
cc:5f:89:84:b3:1e:2c:72:9e:2a:be:62:fe:a4:cb:
c7:93:e2:41:b9:a9:b2:bd:d5:48:43:9d:17:c1:bb:
2d:b2:85:84:0d:ad:68:ba:17:e4:16:fd:6b:84:30:
32:e0:ce:78:b1:74:79:56:39:4f:74:30:c8:e6:b6:
80:35:7c:3e:7b:53:a6:90:db:8c:6c:10:c6:73:5f:
4e:fb:2e:b7:07:75:59:7e:05:14:4a:91:33:51:d4:
14:77:62:6f:a2:b5:73:a2:0b:26:61:70:ee:21:36:
eb:e5:7f:16:9d:d0:4c:c4:f7:cf:e2:32:ff:2e:cd:
ca:b4:28:c8:41:85:c9:4a:29:7d:51:d8:64:17:41:
42:0d:23:c1:a6:6e:4e:b3:9c:ed:0d:0d:cc:f7:21:
b3:d8:d1:6a:5b:41:c6:4f:37:3d:a6:e6:a8:f7:5c:
a2:82:64:19:5c:e4:28:14:d2:10:20:7c:71:c6:60:
1b:79:5a:55:2a:3e:05:d9:58:88:4c:48:49:62:08:
de:47:d3:50:e7:a2:f1:d8:18:a4:f3:67:66:a5:fc:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:61:27:75:46:1D:CF:51:1F:97:5E:54:67:5A:BC:60:D2:32:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CoFhJ3VGHc9RH5deVGdavGDSMtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0-5.253.58.255
45.88.66.0/24
87.120.108.0/24
87.120.196.0/24
87.121.216.0/24
93.123.31.0/24
94.125.102.0/23
185.207.14.0/23
185.252.179.0/24
193.8.186.0/23
193.47.61.0/24
193.148.56.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:36:63:f4:f6:05:51:9e:95:12:77:37:48:ef:be:08:3d:78:
9e:6a:57:b2:90:d0:ca:94:15:95:d8:a6:e0:d8:9a:ae:39:df:
45:53:5f:bd:98:b8:ba:ac:7b:01:b4:4f:75:64:d4:f1:90:3d:
40:7e:9e:22:27:5a:02:d0:8b:26:84:16:37:5e:55:a2:1f:cc:
e7:c6:cf:7a:1c:1e:c8:59:ee:39:e4:b1:e3:f3:8a:4a:84:f5:
5a:46:a5:97:23:cc:7b:1e:e0:8b:5f:4c:ee:58:77:32:5f:9b:
ad:1b:19:cf:82:7b:54:f3:76:b2:2f:12:8d:94:45:db:62:ff:
04:4f:b1:5e:a9:98:6a:d9:10:c8:f1:58:17:f4:7d:73:47:06:
83:4f:1c:7d:64:dc:59:30:ff:e0:d7:ee:17:f6:e0:b8:40:de:
d3:e0:d1:b8:e3:1a:08:78:ac:7e:dc:9c:42:f8:73:47:da:92:
93:24:55:fc:15:77:13:e5:e2:de:49:bf:5a:43:8a:1c:87:81:
05:29:87:9f:c4:d8:5d:0e:38:f4:1a:e3:ab:b0:e0:6c:ed:6f:
83:f6:71:e8:34:b4:27:b2:11:cb:eb:67:22:0e:a6:1a:b9:67:
d1:e9:50:f8:6a:e4:0a:8e:27:e6:13:5a:5b:c8:bd:ad:b4:5e:
c3:74:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:37:53 2025 by rpki-client