Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nC8J_mjGrOZz2d8fJxUNth3mUsI.roa
File: nC8J_mjGrOZz2d8fJxUNth3mUsI.roa (raw, json)
Hash identifier: D7d6nPKo6U8ZELOml+zIdcJdJb5RJHfM5Ejoo9wd/iI=
Subject key identifier: 9C:2F:09:FE:68:C6:AC:E6:73:D9:DF:1F:27:15:0D:B6:1D:E6:52:C2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01976CA27F68936871B501A5E5156692E40D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nC8J_mjGrOZz2d8fJxUNth3mUsI.roa
Signing time: Sat 14 Jun 2025 04:11:18 +0000
ROA not before: Sat 14 Jun 2025 04:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.200.0/24 maxlen: 24
5.175.201.0/24 maxlen: 24
5.175.205.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:a2:7f:68:93:68:71:b5:01:a5:e5:15:66:92:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 14 04:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c2f09fe68c6ace673d9df1f27150db61de652c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:59:ec:31:a2:00:38:38:8a:8d:38:3c:01:
ae:93:c5:9e:a0:67:e3:f9:b8:a6:39:8f:07:6d:c7:
66:73:c4:31:bd:20:eb:2b:8b:3e:64:dc:22:04:2e:
7c:d2:57:7f:b6:63:b8:a8:03:f1:d2:9e:3b:34:d1:
66:11:61:a5:e7:bc:3c:82:68:0e:7e:3d:1c:fc:6a:
11:bf:5f:27:f4:c3:0a:e5:09:17:95:49:db:ba:d8:
46:54:ba:60:3a:2f:51:31:bd:3a:2e:0a:42:68:e1:
a4:af:4f:5c:2e:fa:26:49:6e:71:1a:65:84:4f:ad:
43:94:19:eb:10:07:d9:58:e5:47:4b:d9:38:54:c2:
1d:16:47:2e:f1:6c:54:98:7b:1a:a2:d7:75:80:aa:
40:af:34:43:a9:fe:50:47:5e:d1:10:7c:1a:40:bf:
eb:78:89:15:27:60:39:74:74:ce:e3:df:8d:74:76:
12:52:50:47:18:d0:e8:3a:d5:94:4a:60:c7:14:27:
29:64:1d:04:94:c9:66:4f:08:ea:f5:d2:8e:ad:d6:
2e:dd:16:db:b8:b4:34:89:49:ec:ae:7d:35:fc:62:
67:d6:d1:5d:9b:62:ee:6f:6b:24:6e:10:b5:1a:d5:
3f:85:5a:72:1d:04:25:f8:dd:84:25:ea:30:4a:b0:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:09:FE:68:C6:AC:E6:73:D9:DF:1F:27:15:0D:B6:1D:E6:52:C2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nC8J_mjGrOZz2d8fJxUNth3mUsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.200.0/23
5.175.205.0/24
5.175.238.0/24
5.231.61.0/24
5.231.79.0/24
5.231.92.0/24
85.93.5.0/24
85.93.21.0/24
85.93.31.0/24
89.106.70.0/24
89.144.5.0/24
89.144.34.0/24
89.144.39.0/24
94.249.168.0/23
94.249.229.0/24
94.249.237.0/24
94.249.244.0/24
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2c:94:25:a1:34:1f:4b:d2:8d:d3:5a:60:1f:d6:42:72:ad:
f4:e2:c8:62:eb:32:4a:55:5d:bd:ef:4d:88:1c:90:46:17:db:
e0:6d:72:20:bf:6f:bd:56:67:8a:c0:eb:68:82:ca:16:ee:c5:
75:fb:fe:ee:18:c2:20:ae:8d:45:1e:77:40:0c:e5:a7:9e:ec:
23:a2:56:8e:f7:ef:b1:12:89:d6:02:6b:df:41:64:83:a8:27:
4f:a5:b4:f5:ec:7a:01:12:14:d3:db:b3:e7:b5:cb:82:26:c1:
f4:45:b4:48:33:34:98:f7:e6:d7:da:15:67:41:b4:e2:37:03:
f4:71:77:da:22:85:b7:9e:74:31:5a:dc:65:d7:4d:87:5d:8e:
06:84:2a:a8:9a:02:7f:da:a5:9e:7a:8e:96:c2:3f:28:2c:ca:
f9:a7:50:3d:85:35:cf:61:67:dc:6b:4c:2c:0a:30:b4:4f:fd:
ea:6f:2a:9e:35:74:d5:fa:06:a2:bb:98:db:a8:29:11:3e:34:
88:e0:8c:a5:b7:f9:29:d5:8b:94:91:8f:94:20:b9:84:ab:a5:
4c:f2:1b:c0:c6:18:5e:fa:9a:a3:9a:64:9d:ec:1e:a3:be:28:
fe:ac:d9:d9:fa:c9:0c:de:08:d7:c3:a7:0c:9d:ea:dc:d2:fb:
d1:65:49:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:29:36 2025 by rpki-client