Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/GWLdQp63HdvOf4msAVGTJwa7Pc0.roa
File: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (raw, json)
Hash identifier: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=
Subject key identifier: 19:62:DD:42:9E:B7:1D:DB:CE:7F:89:AC:01:51:93:27:06:BB:3D:CD
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019777A82563C9793FDC0794EE6BCDE21933
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/GWLdQp63HdvOf4msAVGTJwa7Pc0.roa
Signing time: Mon 16 Jun 2025 07:33:17 +0000
ROA not before: Mon 16 Jun 2025 07:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56902
IP address blocks: 5.100.240.0/24 maxlen: 24
5.100.241.0/24 maxlen: 24
5.100.242.0/24 maxlen: 24
5.100.243.0/24 maxlen: 24
45.142.136.0/24 maxlen: 24
45.142.137.0/24 maxlen: 24
45.142.138.0/24 maxlen: 24
45.142.139.0/24 maxlen: 24
185.128.124.0/24 maxlen: 24
185.128.125.0/24 maxlen: 24
185.187.128.0/24 maxlen: 24
185.187.129.0/24 maxlen: 24
185.187.130.0/24 maxlen: 24
185.187.131.0/24 maxlen: 24
185.222.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:a8:25:63:c9:79:3f:dc:07:94:ee:6b:cd:e2:19:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jun 16 07:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1962dd429eb71ddbce7f89ac0151932706bb3dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:3c:52:d3:83:5d:38:48:c7:c4:af:d0:32:
86:8f:11:e2:90:37:de:69:68:6c:cd:7f:4e:fc:d1:
a5:4a:8d:65:ff:ad:29:97:4e:a1:5b:7a:07:e0:df:
00:0d:b5:e3:48:c6:5c:10:f8:af:c8:c9:3c:37:1d:
c2:c4:de:44:5e:c4:1b:2d:3d:18:c4:b6:b4:d4:04:
32:99:fb:fb:d3:4d:58:0c:57:6f:4f:ed:84:42:94:
99:b1:fb:38:f7:1b:bb:1f:91:75:be:ab:0a:81:1d:
d0:9d:2b:37:b5:3d:46:ae:c9:67:71:18:af:9f:ea:
c5:ee:dd:4b:eb:28:56:00:a8:4e:01:04:c1:76:13:
bc:75:9c:8c:e8:e9:55:ff:85:6c:48:83:e5:2d:d3:
7a:c3:f2:02:30:3b:e9:f2:9e:7d:4b:78:07:d7:86:
56:e2:64:f8:bc:eb:f5:36:1d:1a:9a:bc:73:ce:d4:
fa:57:c4:71:a6:3a:13:ba:c2:06:69:d8:bc:28:11:
68:91:4f:be:74:b8:7f:d4:97:fc:c3:0d:b2:36:94:
da:24:7c:f2:83:94:2e:b6:d2:4c:36:2c:be:f3:2c:
e6:a5:38:45:67:bd:87:8c:67:ca:93:82:50:9e:23:
5e:19:a1:68:eb:99:04:a9:e1:de:92:b5:5e:1f:3b:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:DD:42:9E:B7:1D:DB:CE:7F:89:AC:01:51:93:27:06:BB:3D:CD
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/GWLdQp63HdvOf4msAVGTJwa7Pc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.240.0/22
45.142.136.0/22
185.128.124.0/23
185.187.128.0/22
185.222.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5c:7e:6e:37:d4:4f:a8:21:1a:40:69:4d:74:e5:62:ba:57:
78:2a:39:7a:e8:7f:58:3e:a9:a8:5e:ac:8b:fa:d0:f6:c8:eb:
ec:3e:9f:74:91:14:e7:38:23:f2:80:3a:e3:89:8c:c2:4c:f4:
1b:ee:cf:75:ec:17:99:21:4d:35:4b:89:ad:44:41:0b:13:aa:
38:f0:bc:59:93:57:65:14:68:da:85:fe:98:7d:2a:1b:6f:7f:
50:4f:27:1a:f7:ef:c6:a1:cd:8c:bc:b6:7d:66:3a:45:31:be:
6a:d2:a2:ea:ab:b3:8f:49:21:84:c0:18:ea:1e:c2:d1:c4:4a:
b8:29:d7:24:c3:98:73:20:21:47:75:9c:16:0b:0b:3c:9e:f6:
85:5b:d4:7a:dd:32:1e:d8:64:05:3a:ac:aa:51:ae:27:81:09:
a1:d2:da:38:f5:84:e1:94:ba:4a:e0:9b:96:13:cd:21:63:d6:
95:5b:fc:d1:b6:97:67:da:f9:f0:13:d8:7b:99:4e:e2:ab:d4:
92:f4:94:3f:0d:4b:b9:99:a0:a1:bb:52:67:6e:ec:55:44:53:
cd:ec:4e:e8:54:3e:5d:1b:bd:78:2e:06:10:22:30:3d:22:ae:
aa:23:93:3e:43:4a:b9:e1:ea:6a:ca:48:db:94:cc:f2:d0:b2:
d3:92:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:43:23 2025 by rpki-client