Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5g4-EKRMry5fzkYj-nPv62_iQEo.roa
File: 5g4-EKRMry5fzkYj-nPv62_iQEo.roa (raw, json)
Hash identifier: xuRrHJB+v6Tw4UHaOC7u6vFwgpvVUU4qtXmCyj3kzjs=
Subject key identifier: E6:0E:3E:10:A4:4C:AF:2E:5F:CE:46:23:FA:73:EF:EB:6F:E2:40:4A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019841571E7EB01FC64E940C3006EAE4EF20
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5g4-EKRMry5fzkYj-nPv62_iQEo.roa
Signing time: Fri 25 Jul 2025 11:28:05 +0000
ROA not before: Fri 25 Jul 2025 11:28:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:57:1e:7e:b0:1f:c6:4e:94:0c:30:06:ea:e4:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 25 11:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60e3e10a44caf2e5fce4623fa73efeb6fe2404a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:af:54:2b:0e:f1:96:3c:97:3a:8e:98:57:
3f:99:7c:d7:9b:6c:d5:bf:bf:bf:7b:d5:3f:02:a9:
32:c5:98:c4:e0:a1:11:47:a5:f0:7f:9e:b0:ae:e0:
d3:f4:6e:71:f2:e8:55:25:0e:25:f6:22:22:62:bc:
f2:85:50:64:cc:ca:71:09:37:02:1a:70:52:d9:99:
e9:a2:4c:3b:e1:75:a0:57:6a:d6:11:8c:55:d0:6f:
7e:25:cc:ea:13:26:be:8a:2b:a5:11:fc:74:79:94:
b9:23:42:28:c0:a1:0f:85:f0:dd:4a:e9:0d:aa:e7:
e1:07:94:43:17:95:f9:bb:1d:3e:3c:7d:45:79:8b:
3b:ad:98:61:a3:8f:19:9c:9a:6a:18:72:bc:73:9a:
dd:a1:82:15:7b:c6:bf:40:4c:c3:5a:ec:8a:c8:c0:
83:e1:a3:65:6e:e1:85:75:f6:95:a1:a5:09:5b:cf:
c2:d2:33:6f:8c:fe:d9:d0:46:26:f8:f8:78:a2:6a:
d4:6c:c0:b1:56:bd:ea:ac:7c:f4:f1:43:71:4a:a4:
40:68:77:00:bf:ba:5d:f4:bf:8b:81:9f:0e:19:f1:
d6:32:78:b8:46:a2:0e:a1:d7:58:0c:1b:b8:70:c3:
f8:67:2e:63:2c:82:8d:a6:0b:e1:94:54:9b:b6:ba:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:3E:10:A4:4C:AF:2E:5F:CE:46:23:FA:73:EF:EB:6F:E2:40:4A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5g4-EKRMry5fzkYj-nPv62_iQEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.144.33.0/24
89.144.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:fa:4d:e9:8c:97:30:57:2d:63:9e:61:0a:8c:60:b9:1e:e5:
5a:40:34:e5:52:3e:81:71:92:f3:7b:41:c6:5f:09:88:25:85:
2f:75:d5:57:35:e8:19:42:49:b4:3e:2c:85:4a:db:c1:e1:aa:
8c:6e:9f:03:40:0f:52:64:cc:c2:97:91:fb:d7:2d:e8:64:3d:
61:5f:59:34:13:60:fc:d2:d4:1b:31:cc:a3:21:74:3e:48:d4:
b6:92:8a:73:91:49:fb:bc:68:b0:da:8b:e2:99:d8:f9:64:1f:
eb:9b:dd:ce:96:10:bb:51:2a:d6:04:58:42:86:e1:1f:12:f8:
37:92:bb:29:65:05:0a:fb:af:0f:32:65:fe:12:3f:8b:a4:2e:
73:70:70:0c:3c:49:c9:ba:2f:b6:8d:cf:df:62:e0:d9:1a:2a:
a8:97:a8:bb:d0:20:1e:dd:57:43:c6:e5:aa:6a:a3:93:72:47:
79:78:53:f0:14:83:85:99:db:f0:5d:65:13:d2:2f:48:31:9b:
6b:ec:31:94:88:8f:d8:12:53:04:02:e1:bd:fb:9e:e9:7f:d7:
e0:ba:48:d8:e6:0e:a3:8e:3a:86:7e:0a:86:33:5e:5f:f5:bd:
4f:ef:d0:11:b6:44:d9:84:2e:85:12:54:f0:dd:ab:33:4d:1e:
53:b2:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:58 2025 by rpki-client