Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/0l0FRi1gOGd0TS4FZSN0Y79Cp9A.roa
File: 0l0FRi1gOGd0TS4FZSN0Y79Cp9A.roa (raw, json)
Hash identifier: 86dCUtTfvoVch56QFLTlRl27DwnhOkUYBn6k7s/V1lA=
Subject key identifier: D2:5D:05:46:2D:60:38:67:74:4D:2E:05:65:23:74:63:BF:42:A7:D0
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 0198790F19EF34CFFADE6FDA248F4731C82E
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/0l0FRi1gOGd0TS4FZSN0Y79Cp9A.roa
Signing time: Tue 05 Aug 2025 07:08:09 +0000
ROA not before: Tue 05 Aug 2025 07:08:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34397
IP address blocks: 79.172.128.0/18 maxlen: 18
85.129.128.0/17 maxlen: 17
85.129.164.0/22 maxlen: 22
88.213.0.0/18 maxlen: 18
88.213.6.0/24 maxlen: 24
88.213.64.0/18 maxlen: 18
88.213.64.0/21 maxlen: 21
88.213.64.0/22 maxlen: 22
88.213.72.0/21 maxlen: 21
88.213.78.0/24 maxlen: 24
88.213.80.0/20 maxlen: 20
88.213.126.0/23 maxlen: 23
89.4.0.0/15 maxlen: 15
89.5.220.0/23 maxlen: 23
89.5.220.0/24 maxlen: 24
93.98.0.0/16 maxlen: 16
93.98.127.0/24 maxlen: 24
212.71.32.0/19 maxlen: 19
212.71.32.0/24 maxlen: 24
212.71.33.0/24 maxlen: 24
212.71.35.0/24 maxlen: 24
212.71.37.0/24 maxlen: 24
212.71.41.0/24 maxlen: 24
212.71.42.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.71.53.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.97.0/24 maxlen: 24
212.107.99.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.115.0/24 maxlen: 24
212.118.117.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.119.64.0/20 maxlen: 20
212.119.64.0/24 maxlen: 24
212.119.69.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
212.119.80.0/21 maxlen: 21
212.119.81.0/24 maxlen: 24
212.119.82.0/24 maxlen: 24
212.119.88.0/22 maxlen: 22
212.119.92.0/23 maxlen: 23
212.119.92.0/24 maxlen: 24
212.119.93.0/24 maxlen: 24
213.181.160.0/19 maxlen: 19
213.181.160.0/23 maxlen: 23
213.181.160.0/24 maxlen: 24
213.181.161.0/24 maxlen: 24
213.181.163.0/24 maxlen: 24
213.181.166.0/24 maxlen: 24
213.181.190.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.195.0/24 maxlen: 24
213.210.196.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
213.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:0f:19:ef:34:cf:fa:de:6f:da:24:8f:47:31:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Aug 5 07:08:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d25d05462d603867744d2e0565237463bf42a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:65:aa:b3:5a:cf:c5:11:b2:ee:ba:83:94:
a2:66:64:cf:03:ad:5f:02:98:dd:5e:11:12:33:72:
d6:53:d1:61:dc:b7:ce:ec:d5:25:17:4a:3d:98:36:
2d:15:4d:55:2e:52:f4:ee:0e:13:a1:54:e2:ef:80:
40:aa:f5:4c:c2:6b:af:68:66:47:9a:d5:6e:35:f8:
48:28:be:11:61:7e:5d:6b:2b:bb:be:8f:32:96:b9:
8d:6f:f3:e2:a3:e3:fc:07:20:be:25:70:c4:45:34:
3b:08:4a:2c:22:26:e4:02:f9:82:bb:75:59:d3:94:
ce:38:b2:96:98:a8:e5:db:45:bb:7b:8e:9c:43:46:
9b:0e:ce:d6:7d:a3:ef:97:9f:12:d8:bb:dc:12:a9:
e4:fd:6b:1f:6a:05:3a:76:3a:69:63:39:1c:ff:5b:
20:1e:4e:28:ee:70:9b:a5:6b:5e:14:59:2a:d1:a7:
a0:a6:c4:6c:dc:ab:a9:22:ab:98:8c:b1:de:11:3f:
87:36:11:74:88:6c:dc:0b:28:17:35:7c:f7:4b:4c:
77:62:ca:de:fd:b0:0b:cc:59:60:e7:d0:ee:f4:d5:
3c:0f:0f:2e:7a:f1:5c:7a:c3:d7:21:d3:27:cb:0a:
9a:77:e2:97:53:8f:a9:21:18:cf:eb:4d:aa:f0:63:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:05:46:2D:60:38:67:74:4D:2E:05:65:23:74:63:BF:42:A7:D0
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/0l0FRi1gOGd0TS4FZSN0Y79Cp9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.128.0/18
85.129.128.0/17
88.213.0.0/17
89.4.0.0/15
93.98.0.0/16
212.71.32.0/19
212.107.96.0/19
212.118.96.0/19
212.119.64.0-212.119.93.255
213.181.160.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
62:99:07:59:39:f8:5c:c1:7e:39:d1:b8:2f:c3:8a:77:cb:b2:
db:37:f9:69:a8:c9:4d:f0:9a:82:8c:e8:e6:aa:d2:f3:02:fb:
68:2f:34:38:66:d3:ed:7b:c6:58:e5:48:38:ae:1e:d2:8f:23:
79:d9:a9:e2:0b:1c:e1:75:b2:0b:5c:e9:9d:f0:a0:53:a2:04:
87:ac:e8:35:71:91:20:81:8c:80:55:6d:16:aa:5b:93:0a:89:
97:96:ef:1c:27:ae:5d:41:ce:a9:87:c4:1f:bb:85:60:24:7a:
df:1b:8d:b5:64:3d:60:aa:35:20:a1:e0:9f:d9:5b:b6:35:31:
46:57:15:1f:34:1b:88:4d:ad:ba:6e:39:bf:75:47:21:9e:ba:
42:b5:c9:dd:23:63:54:47:2e:eb:94:de:af:4d:3b:2a:e4:65:
78:a8:ac:3f:5a:3d:a0:fc:4e:59:a8:ed:d0:a8:97:b0:f4:74:
41:94:37:6a:92:6a:9c:bd:a7:cc:b3:aa:da:77:83:0a:39:9e:
06:6e:65:6c:44:33:7b:11:75:7b:d4:57:f1:66:56:d3:20:f0:
d7:f5:86:d2:f2:0d:f1:53:bc:86:75:e4:e0:32:39:60:f0:a3:
58:e0:bb:14:b6:5d:ee:17:12:ae:1b:c5:ee:73:2c:1c:4e:f9:
43:dd:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:02:04 2025 by rpki-client