Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H5MsOy-sFDf0w6tuUF_gueiXJZ8.roa
File: H5MsOy-sFDf0w6tuUF_gueiXJZ8.roa (raw, json)
Hash identifier: vYnpff7e0cpk9V/TKNY0tWWCHfAgGP18W81vk6h/t9I=
Subject key identifier: 1F:93:2C:3B:2F:AC:14:37:F4:C3:AB:6E:50:5F:E0:B9:E8:97:25:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4B51CD344DB09BE9032070D96683F509
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H5MsOy-sFDf0w6tuUF_gueiXJZ8.roa
Signing time: Mon 03 Nov 2025 20:04:03 +0000
ROA not before: Mon 03 Nov 2025 20:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.203.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.106.73.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:51:cd:34:4d:b0:9b:e9:03:20:70:d9:66:83:f5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 20:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f932c3b2fac1437f4c3ab6e505fe0b9e897259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:8a:a1:7e:26:33:31:0c:8b:5b:70:9f:79:
8f:93:72:e4:30:43:88:67:97:da:cf:86:db:a0:e4:
98:04:ba:ff:83:20:17:8c:9f:a8:ec:01:75:d4:97:
44:a1:a5:88:c4:a4:f6:ab:95:29:04:12:f8:da:a0:
07:24:60:32:47:a5:28:08:b7:fe:8e:4a:6c:c6:0d:
ec:26:b6:97:3c:7f:e7:ff:54:6d:b6:5f:6e:7e:18:
e8:25:6e:a1:ba:7c:a3:60:fc:0f:7e:30:23:f9:f3:
f5:00:aa:cf:80:2c:74:7d:11:63:19:03:6b:a7:0c:
e4:84:a0:ed:7d:44:37:4e:c3:a9:56:3a:3d:3f:c4:
15:5d:cc:9a:ce:76:94:bb:72:8f:69:f3:51:14:4d:
4f:71:8c:6c:31:d1:53:26:99:f1:1f:7e:ca:e2:ed:
c1:15:5b:06:ca:37:4d:0f:0b:4a:9f:01:1b:bf:5c:
a1:a5:b8:11:10:1e:d9:9c:8e:ab:7c:cf:6a:45:a9:
4c:54:70:7e:8a:1c:2e:c5:3c:da:b7:74:a1:df:e7:
e9:68:94:08:1f:5b:22:33:5e:be:ff:35:93:e7:6f:
d5:8e:16:94:dc:dd:73:0c:c7:2e:6b:00:b5:a1:a5:
7a:00:4d:03:d2:cc:93:12:5f:92:ef:fa:70:a2:78:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:93:2C:3B:2F:AC:14:37:F4:C3:AB:6E:50:5F:E0:B9:E8:97:25:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H5MsOy-sFDf0w6tuUF_gueiXJZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.203.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
5.231.244.0-5.231.248.255
77.90.39.0/24
85.93.5.0/24
87.239.129.0/24
89.106.73.0/24
89.106.75.0-89.106.77.255
89.144.22.0/24
89.144.61.0/24
94.103.167.0/24
94.249.150.0/24
94.249.197.0/24
94.249.214.0/24
95.215.34.0/24
Signature Algorithm: sha256WithRSAEncryption
48:92:db:bd:db:10:82:20:75:21:67:53:a2:36:8a:dc:d6:0d:
e8:49:52:88:99:05:86:e6:d1:0d:12:54:fe:ce:77:07:c2:f2:
42:72:84:02:f3:ee:ad:b6:40:dd:ab:1b:cb:7e:05:bb:07:23:
51:50:1f:7e:df:82:a8:e6:8e:09:25:ff:bb:4d:b8:33:53:40:
38:5e:65:d5:24:4a:52:8b:5a:2d:fb:3f:f1:ce:86:87:c7:bf:
57:72:28:c3:00:86:a9:de:f6:bf:12:23:90:f0:2f:0e:45:77:
a6:f0:eb:fd:31:df:54:f7:d2:60:f8:7e:23:2d:3d:eb:b7:89:
67:50:25:bb:12:df:db:59:a2:4c:0c:88:3f:1e:d2:fa:28:4f:
73:e9:77:62:d6:5e:b9:85:3f:86:e8:38:5b:02:44:4f:b8:45:
d4:e8:2a:76:3b:6b:d0:75:09:43:44:f9:44:15:f7:51:54:8b:
a9:e6:cb:07:35:c2:27:30:00:9a:51:69:47:78:32:4f:70:12:
52:07:ab:a0:ed:21:f9:09:b7:d3:65:2e:11:57:54:fc:a5:d1:
6b:00:f4:44:91:9f:c1:bb:d5:fd:6c:9c:ca:28:4b:68:a6:7b:
09:d6:5f:1a:64:3a:26:52:e7:1f:b8:53:7a:24:d7:33:97:18:
43:01:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:45 2025 by rpki-client