Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2bFCPXGP_XHrM79cMZKV5jX0hzg.roa
File: 2bFCPXGP_XHrM79cMZKV5jX0hzg.roa (raw, json)
Hash identifier: kBpSv9Ti/aedEsi3/EMrAAVapeyR8NbWy711ruORZvU=
Subject key identifier: D9:B1:42:3D:71:8F:FD:71:EB:33:BF:5C:31:92:95:E6:35:F4:87:38
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198698DAF39336CDBE845F4240CB3E1D804
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2bFCPXGP_XHrM79cMZKV5jX0hzg.roa
Signing time: Sat 02 Aug 2025 06:52:29 +0000
ROA not before: Sat 02 Aug 2025 06:52:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.175.218.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:8d:af:39:33:6c:db:e8:45:f4:24:0c:b3:e1:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 06:52:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9b1423d718ffd71eb33bf5c319295e635f48738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:ce:67:fb:36:f8:5a:84:f7:47:6e:90:4d:
f0:82:27:12:59:73:b3:1f:33:34:fd:31:bf:3c:1e:
79:97:2b:84:5c:7b:36:ed:2e:4d:19:d7:02:93:93:
07:92:6a:2b:a7:79:8e:ef:d8:aa:b7:a7:87:17:23:
ec:80:1e:16:d0:b4:bb:18:df:23:5d:3f:67:2a:c5:
69:e3:6c:7e:a1:55:25:6b:7b:7a:bc:68:1a:29:1f:
73:0c:17:f0:cb:e5:e1:b7:11:dc:5a:5b:a9:54:15:
ad:27:2f:ea:81:8b:bf:6d:95:db:26:28:42:55:84:
d6:5d:97:cc:02:15:26:c5:37:86:75:94:a0:f2:50:
1d:1d:d5:6e:42:df:1f:e6:05:15:32:c5:cd:88:9a:
43:83:34:fc:e0:38:eb:91:4c:93:f0:21:89:18:1c:
4c:e9:75:bd:f9:67:d7:09:39:8f:b5:65:d2:16:49:
51:df:cb:a4:cc:68:c9:e5:a1:4e:3b:41:56:77:20:
03:a0:54:19:4e:95:82:5b:f1:7e:fe:e4:f5:85:61:
79:25:c9:23:a2:bd:a8:73:44:df:9b:da:0a:d2:52:
1f:41:06:89:a8:1c:7a:8c:2d:60:5c:d3:25:fb:b4:
1d:91:fc:37:5c:7c:0d:4b:56:cf:0d:8c:b0:37:53:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:42:3D:71:8F:FD:71:EB:33:BF:5C:31:92:95:E6:35:F4:87:38
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2bFCPXGP_XHrM79cMZKV5jX0hzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.218.0/24
5.231.70.0/24
5.231.115.0/24
5.231.234.0/24
77.90.22.0/24
77.90.41.0/24
77.90.52.0/24
85.93.1.0/24
89.144.17.0-89.144.18.255
89.144.44.0/24
89.144.46.0/24
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:22:03:60:32:9a:bf:90:63:38:4f:da:55:45:a4:bd:bd:68:
ba:de:b0:6c:96:94:dd:1b:1c:db:e5:2a:e6:4e:11:55:78:91:
fe:2f:0e:6d:0b:5f:3a:6a:05:82:56:cf:4a:56:e7:c3:12:75:
cc:65:a5:13:11:ac:49:3a:e2:51:34:9a:54:a4:79:64:34:0b:
3c:dd:e3:b3:d6:f3:50:ae:3f:79:ce:42:8a:07:d9:d3:d4:d2:
77:58:64:b0:73:3d:c5:c8:16:cf:62:17:cb:9b:be:e3:ff:e7:
a5:83:c2:9d:fe:f9:ca:52:76:4b:ec:a0:3c:35:c2:cd:98:16:
55:3e:97:20:ac:de:b1:22:1a:35:78:e1:78:9d:d3:91:f5:73:
6e:ad:5a:2b:56:2f:53:ac:b1:fb:fa:e9:37:e9:6c:8f:c3:23:
67:db:6d:f1:34:36:38:4a:91:de:1d:1f:f3:ba:30:76:ab:cb:
8d:27:eb:a1:e8:db:07:f3:fb:77:5c:0b:8f:56:b9:bc:84:b2:
93:94:4c:cc:87:fa:a6:aa:91:28:4e:32:f6:96:0e:3f:50:f7:
57:75:70:59:3f:95:04:9b:60:8b:68:e4:ee:0f:70:ea:16:c3:
c0:6b:19:33:b2:52:4a:71:bd:c5:a6:77:23:53:96:7d:a2:d0:
75:5a:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:48 2025 by rpki-client