Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9yGgboNyRgFaYTffpclVuv_nOzc.roa
File: 9yGgboNyRgFaYTffpclVuv_nOzc.roa (raw, json)
Hash identifier: KZRWhcJK2xDt7FkVXYPsceeWA6TPUtgLeT/IvAB8J6Q=
Subject key identifier: F7:21:A0:6E:83:72:46:01:5A:61:37:DF:A5:C9:55:BA:FF:E7:3B:37
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197096C80C6845EA04E862523CCE1879C52
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9yGgboNyRgFaYTffpclVuv_nOzc.roa
Signing time: Sun 25 May 2025 21:49:55 +0000
ROA not before: Sun 25 May 2025 21:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.78.0/24 maxlen: 24
89.106.79.0/24 maxlen: 24
89.106.80.0/24 maxlen: 24
89.106.81.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.84.0/24 maxlen: 24
89.106.85.0/24 maxlen: 24
89.106.86.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:6c:80:c6:84:5e:a0:4e:86:25:23:cc:e1:87:9c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 25 21:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f721a06e837246015a6137dfa5c955baffe73b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:be:77:a1:11:2a:2c:58:dc:05:53:04:dc:
24:6c:45:e0:2f:42:4e:67:89:4b:b1:d6:18:ec:c2:
42:38:fc:a0:14:7d:15:41:75:09:f4:52:3f:5d:3a:
d2:fb:42:ee:e9:34:b8:9e:17:69:9a:2d:47:cf:ef:
22:9b:52:69:07:a1:45:cf:f2:24:66:82:49:82:41:
ba:74:58:3c:01:8e:32:fe:a7:66:be:ff:41:22:a2:
9c:83:85:47:88:4a:3a:49:33:61:23:ec:bb:ab:af:
8e:ee:ae:da:b0:78:10:b2:4c:c5:a9:41:35:20:07:
05:d4:d1:af:d7:09:98:d1:b0:d4:4b:b0:15:27:1f:
63:21:b2:da:61:16:60:6a:f3:45:3b:2b:50:57:bd:
8a:1c:d0:c0:82:2c:fa:88:7e:6d:e5:10:9b:bc:b4:
b8:00:ff:85:f1:14:0c:db:8b:f1:18:62:6b:a9:a5:
1b:7f:ee:ec:69:43:09:05:9b:49:18:48:2e:6d:b9:
9b:eb:72:74:94:5f:c7:9e:43:33:1b:19:2a:0c:4c:
9d:3c:4e:8c:c1:19:4a:be:f6:a6:60:fc:90:8b:d9:
32:2b:0d:48:98:73:3e:5a:42:de:ce:81:56:dc:48:
01:c5:03:07:55:e6:b4:be:46:da:54:25:87:8f:7e:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:A0:6E:83:72:46:01:5A:61:37:DF:A5:C9:55:BA:FF:E7:3B:37
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9yGgboNyRgFaYTffpclVuv_nOzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.106.78.0-89.106.87.255
89.106.92.0/23
89.106.95.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
Signature Algorithm: sha256WithRSAEncryption
3d:0c:eb:35:27:e0:ac:ed:48:2f:fd:dc:ca:75:fb:ea:e6:06:
90:97:31:d8:80:fb:3f:fb:dd:7f:ab:5f:7d:e8:51:54:5d:95:
a2:07:fb:2a:99:61:c6:79:5b:66:e7:d9:30:48:57:3d:fe:35:
19:9d:40:76:7b:ed:35:af:c4:78:aa:e8:2f:62:f6:1a:2f:a5:
33:1c:3f:37:84:a4:9d:e4:cf:df:99:e6:d2:86:f0:d6:2f:db:
2b:b4:a0:6f:ac:2b:97:52:33:9a:76:e3:98:88:a8:c3:20:d4:
4c:62:f4:fc:88:79:ae:67:e4:c1:23:73:b2:15:d8:6e:77:37:
fc:76:57:2c:5b:58:14:85:c2:ae:74:46:63:92:2f:d0:70:9b:
fa:d6:61:e5:06:4e:51:0d:0c:fd:99:12:27:5c:65:6c:5c:1a:
44:a3:4b:ed:77:b2:86:d8:1b:bc:ae:82:08:8f:e2:eb:77:19:
46:c2:22:1d:f0:2e:eb:f7:5c:b0:d0:5d:df:39:b7:3f:3c:12:
ff:c5:90:65:c8:06:e4:97:32:43:53:42:c0:86:e8:10:c4:62:
cb:0c:d6:c9:70:f9:c7:fc:4f:90:20:73:30:00:2f:35:fe:bd:
b9:66:86:cc:0a:f4:a9:1a:fa:18:5f:09:67:65:db:14:cc:d0:
cf:52:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:01 2025 by rpki-client