Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QrUcBZkO8fup9UFzqnLnkw3Gr9Y.roa
File: QrUcBZkO8fup9UFzqnLnkw3Gr9Y.roa (raw, json)
Hash identifier: 9vlmhXDQ78CTHFNoi5j9ITlySGCYCui4L+mTybR8sJE=
Subject key identifier: 42:B5:1C:05:99:0E:F1:FB:A9:F5:41:73:AA:72:E7:93:0D:C6:AF:D6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019700143B263AADEDD073EF4D8C16523916
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QrUcBZkO8fup9UFzqnLnkw3Gr9Y.roa
Signing time: Sat 24 May 2025 02:16:55 +0000
ROA not before: Sat 24 May 2025 02:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
185.119.18.0/24 maxlen: 24
185.119.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:14:3b:26:3a:ad:ed:d0:73:ef:4d:8c:16:52:39:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 24 02:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b51c05990ef1fba9f54173aa72e7930dc6afd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:da:c9:8e:9e:47:15:64:36:3b:55:9a:57:
04:8c:9a:45:3a:18:99:d7:23:14:5e:55:ba:78:2b:
ba:67:ed:b0:93:24:90:30:2d:28:82:69:68:0f:a3:
e6:8d:49:b8:6b:b8:3c:03:3c:b4:b6:3f:88:ce:d7:
e5:f8:99:51:6d:a7:94:97:7e:97:a6:9d:a6:9c:01:
70:e5:cb:0d:8e:04:c4:8e:4f:04:bb:9b:41:01:8e:
d2:6e:f8:29:19:bf:bf:f9:c3:f5:53:18:a8:fc:b5:
4b:41:f8:3c:dd:4a:3b:02:24:8c:65:69:43:ca:00:
48:31:91:db:4d:5f:12:bf:46:55:20:f2:02:c7:a1:
73:65:ed:d8:f8:75:9d:c5:66:ff:9d:c5:c5:df:a2:
65:3c:12:39:1d:41:99:c5:32:18:a0:af:05:d2:1a:
54:ac:13:f7:61:a5:8b:51:71:2b:53:fc:bf:d1:b6:
59:18:99:d9:93:af:25:8f:02:0b:35:9d:e1:f5:8c:
a7:03:7b:ad:bf:4d:e1:5a:10:3c:21:32:2e:88:91:
cc:71:ac:0e:76:d3:be:be:c4:59:49:fd:9e:5c:95:
5f:b3:e7:74:c2:89:66:80:e5:23:4a:31:b5:ae:45:
2e:ea:be:d6:4b:de:9d:72:a0:d6:7a:a7:b0:d0:83:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:1C:05:99:0E:F1:FB:A9:F5:41:73:AA:72:E7:93:0D:C6:AF:D6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QrUcBZkO8fup9UFzqnLnkw3Gr9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
185.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:35:28:36:23:46:11:61:23:e6:55:0b:e5:80:0b:04:a3:e3:
a9:d4:3d:75:22:c3:60:6c:62:a2:ad:7f:90:be:73:b8:6b:a0:
b8:77:fc:d8:7e:30:ce:b7:8f:7a:c9:b0:cb:96:ff:49:16:f7:
14:4b:17:85:ac:7e:f8:3e:e7:7a:5d:48:02:1f:a2:c6:d8:81:
bb:5c:f2:91:37:72:9b:d0:28:e8:78:ca:02:0f:b5:ce:32:cd:
ff:b5:06:b3:38:ea:e6:b1:c9:47:4c:ed:f4:1a:5a:2b:af:a5:
91:8b:58:e6:8b:a7:14:4b:d3:37:c7:7d:2e:59:ed:54:ca:9f:
de:7f:2d:73:40:81:2c:81:d8:6b:06:ab:0a:8c:2a:e4:8a:e5:
99:0a:00:86:10:bc:e2:e1:a0:5f:5e:01:ad:b0:21:d9:1c:53:
af:04:23:bb:58:c9:1b:fa:b9:69:37:d5:e6:e5:b2:b6:7b:9d:
aa:4e:18:c4:d3:00:0d:de:cb:e7:e9:dc:5b:b4:ec:27:77:50:
81:59:b7:03:07:ec:75:c1:54:e3:1a:58:ca:ab:b1:bd:bb:b1:
64:bb:a1:c5:be:c3:f6:41:d1:a0:4b:fd:1d:55:4e:16:41:6c:
25:95:a1:9d:41:58:45:07:fc:a1:2e:4d:b6:7f:b8:4c:71:6b:
93:3e:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:46 2025 by rpki-client