Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/DMOHw3On5HR2cyuaQYUV_jeHZbQ.roa
File: DMOHw3On5HR2cyuaQYUV_jeHZbQ.roa (raw, json)
Hash identifier: /CdaWcLqCrYT7/PI/ZN/pSRqYVjJwaBASanynzH1LZQ=
Subject key identifier: 0C:C3:87:C3:73:A7:E4:74:76:73:2B:9A:41:85:15:FE:37:87:65:B4
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 019782ACE38FFBC51EE5994DD27452120337
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/DMOHw3On5HR2cyuaQYUV_jeHZbQ.roa
Signing time: Wed 18 Jun 2025 10:54:17 +0000
ROA not before: Wed 18 Jun 2025 10:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14061
IP address blocks: 5.101.96.0/20 maxlen: 24
37.139.0.0/19 maxlen: 22
46.101.0.0/16 maxlen: 22
80.240.128.0/20 maxlen: 22
82.196.0.0/20 maxlen: 22
95.85.0.0/18 maxlen: 22
146.185.128.0/19 maxlen: 22
146.185.160.0/19 maxlen: 22
167.172.0.0/16 maxlen: 22
178.62.0.0/16 maxlen: 22
178.128.0.0/17 maxlen: 22
178.128.128.0/17 maxlen: 22
185.14.184.0/22 maxlen: 22
188.166.0.0/16 maxlen: 22
188.226.128.0/17 maxlen: 22
2a03:b0c0::/32 maxlen: 48
2a12:1840::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:ac:e3:8f:fb:c5:1e:e5:99:4d:d2:74:52:12:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Jun 18 10:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cc387c373a7e47476732b9a418515fe378765b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:0f:ea:cc:3b:39:d0:2b:9f:54:79:c1:e0:
24:4c:43:7a:d1:c1:c8:56:fe:b7:47:ce:a4:90:82:
2a:82:64:38:54:70:2e:34:67:b4:a1:df:66:02:f1:
ae:29:2b:7a:05:20:66:c2:dd:33:81:08:c8:df:d2:
77:a9:53:a4:72:b3:f7:a1:8d:a3:4e:dc:ee:1e:75:
c1:e8:f6:4d:c6:4d:03:cd:94:67:cf:bd:cb:b6:e5:
45:4b:f3:73:98:3e:8f:5e:b4:a5:75:64:fb:84:16:
11:8b:ef:67:29:5d:0e:41:a9:dd:e3:c6:16:57:97:
89:b7:18:8b:97:3b:8b:d9:f4:5f:42:b2:58:6e:e8:
79:12:59:b9:6f:0a:d5:67:9e:82:fc:09:21:78:6b:
00:fb:8c:7e:ad:07:1d:59:8c:d4:49:a2:99:97:19:
d4:8b:8f:d7:53:7f:37:01:33:4b:6b:ee:8a:04:c1:
7c:70:bc:55:79:9b:3d:b8:b0:6d:b6:52:7d:7c:c7:
5e:2b:3f:61:a5:90:ad:6a:4b:80:bd:13:d5:36:35:
14:e6:25:fc:e0:b5:67:7d:c6:52:f5:ca:55:6d:4a:
29:48:82:8a:c2:82:ab:e8:5e:e9:7a:35:33:2a:24:
77:93:ad:da:86:2d:88:2f:5c:27:30:cd:87:a4:9b:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:87:C3:73:A7:E4:74:76:73:2B:9A:41:85:15:FE:37:87:65:B4
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/DMOHw3On5HR2cyuaQYUV_jeHZbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.96.0/20
37.139.0.0/19
46.101.0.0/16
80.240.128.0/20
82.196.0.0/20
95.85.0.0/18
146.185.128.0/18
167.172.0.0/16
178.62.0.0/16
178.128.0.0/16
185.14.184.0/22
188.166.0.0/16
188.226.128.0/17
IPv6:
2a03:b0c0::/32
2a12:1840::/29
Signature Algorithm: sha256WithRSAEncryption
82:a6:36:52:dc:74:b5:68:74:5a:c6:41:57:af:5c:8c:cb:07:
a8:73:8c:20:a5:a2:6b:19:25:e2:1c:12:d2:5c:9a:7e:ac:4d:
c2:09:69:c3:b3:25:0f:a2:98:24:dc:65:9b:fd:a7:3f:1d:ee:
d7:10:ac:9a:1b:e0:61:b6:84:3d:23:38:17:b5:57:a9:c6:68:
4e:21:ce:32:7a:b8:21:5b:50:a7:82:23:bc:23:b8:ee:e2:17:
79:2f:5a:9d:b8:95:8f:82:65:c8:27:b8:9a:91:2b:cf:31:88:
ea:d8:96:ff:ea:24:9f:6e:74:86:0a:28:a7:26:55:5d:d2:2f:
07:50:d1:fe:09:db:7f:45:8c:b0:f7:02:26:39:36:08:b2:fc:
93:30:30:2c:ff:a1:9a:14:f1:fa:ae:7a:2e:bd:d7:21:60:df:
3a:b1:d3:0d:d4:c8:d6:7c:6d:3e:d3:01:6d:44:aa:6d:91:46:
cb:54:f5:1d:7a:40:9e:8a:ee:0e:7e:51:ab:00:84:dc:6e:62:
1e:ea:ff:58:5e:74:d2:86:39:7f:be:47:30:4e:b4:09:37:ba:
83:37:0d:94:d1:f4:08:8f:e4:4a:16:44:c2:8f:18:e5:dc:2a:
d5:b1:3a:b0:6f:75:c2:e6:17:a0:d2:ab:c2:1e:3a:b5:ae:4e:
6e:7a:8c:06
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZeCrOOP+8Ue5ZlN0nRSEgM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjUwNjE4MTA1NDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2MzODdjMzczYTdlNDc0NzY3MzJiOWE0MTg1MTVmZTM3ODc2NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNUP6sw7OdArn1R5weAkTEN60cHI
Vv63R86kkIIqgmQ4VHAuNGe0od9mAvGuKSt6BSBmwt0zgQjI39J3qVOkcrP3oY2j
TtzuHnXB6PZNxk0DzZRnz73LtuVFS/NzmD6PXrSldWT7hBYRi+9nKV0OQand48YW
V5eJtxiLlzuL2fRfQrJYbuh5Elm5bwrVZ56C/AkheGsA+4x+rQcdWYzUSaKZlxnU
i4/XU383ATNLa+6KBMF8cLxVeZs9uLBttlJ9fMdeKz9hpZCtakuAvRPVNjUU5iX8
4LVnfcZS9cpVbUopSIKKwoKr6F7pejUzKiR3k63ahi2IL1wnMM2HpJugjQIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFAzDh8Nzp+R0dnMrmkGFFf43h2W0MB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvRE1PSHczT241SFIyY3l1YVFZVVZfamVIWmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBPBAIAATBJAwQEBWVgAwQF
JYsAAwMALmUDBARQ8IADBARSxAADBAZfVQADBAaSuYADAwCnrAMDALI+AwMAsoAD
BAK5DrgDAwC8pgMEB7zigDAUBAIAAjAOAwUAKgOwwAMFAyoSGEAwDQYJKoZIhvcN
AQELBQADggEBAIKmNlLcdLVodFrGQVevXIzLB6hzjCClomsZJeIcEtJcmn6sTcIJ
acOzJQ+imCTcZZv9pz8d7tcQrJob4GG2hD0jOBe1V6nGaE4hzjJ6uCFbUKeCI7wj
uO7iF3kvWp24lY+CZcgnuJqRK88xiOrYlv/qJJ9udIYKKKcmVV3SLwdQ0f4J239F
jLD3AiY5Ngiy/JMwMCz/oZoU8fquei691yFg3zqx0w3UyNZ8bT7TAW1Eqm2RRstU
9R16QJ6K7g5+UasAhNxuYh7q/1hedNKGOX++RzBOtAk3uoM3DZTR9AiP5EoWRMKP
GOXcKtWxOrBvdcLmF6DSq8IeOrWuTm56jAY=
-----END CERTIFICATE-----
Generated at Thu Jun 19 13:52:54 2025 by rpki-client