Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa
File: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (raw, json)
Hash identifier: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=
Subject key identifier: B6:66:74:A3:A7:E0:EE:0D:99:00:58:D8:D1:A6:9B:5A:E2:5E:98:66
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0197CA31148C79CB51277B6B266726CD1F51
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa
Signing time: Wed 02 Jul 2025 08:11:43 +0000
ROA not before: Wed 02 Jul 2025 08:11:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 5.62.21.0/24 maxlen: 24
109.68.56.0/21 maxlen: 21
193.151.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:31:14:8c:79:cb:51:27:7b:6b:26:67:26:cd:1f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jul 2 08:11:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b66674a3a7e0ee0d990058d8d1a69b5ae25e9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:2e:9f:d2:c7:af:58:37:72:0d:ce:f2:df:
20:29:ab:8b:85:45:31:dd:1e:e0:fd:0d:a8:9f:c2:
ea:04:e6:b8:f1:cd:2a:ac:2c:91:3b:18:db:73:2d:
35:0b:49:e7:d6:fc:d7:e0:3e:18:db:6d:bd:a4:f9:
f3:af:5c:5d:96:2f:71:de:f2:57:60:f1:45:b6:d4:
d3:36:48:3f:6c:39:5b:34:25:d0:c3:dc:fa:e5:d5:
a3:e2:df:bc:bf:10:fc:9d:40:c4:55:f0:aa:2b:d1:
e3:b2:8a:6e:7a:92:a1:44:03:36:2d:cb:d7:e6:75:
6c:8c:bf:43:56:6d:da:88:5a:dd:25:fb:fb:57:91:
4c:f9:99:35:08:28:89:46:9d:c7:6b:f0:f8:34:5e:
f9:db:17:5f:90:ed:b2:ba:b9:cd:cf:79:2f:1b:6c:
0c:65:13:02:83:b0:8b:52:43:cf:89:ad:a8:05:c4:
b8:15:dc:ac:36:c9:db:62:6b:ba:f9:71:8e:3e:7e:
0b:e1:cf:b0:0e:8d:9b:87:6d:6c:38:57:47:fa:38:
da:1f:ae:e8:ec:92:1a:b9:1d:41:75:1f:3d:15:ab:
30:a9:64:fe:de:30:32:e9:48:fb:52:97:56:33:71:
5e:9c:4c:4d:67:00:bc:2a:50:c4:1e:7f:e8:cf:39:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:74:A3:A7:E0:EE:0D:99:00:58:D8:D1:A6:9B:5A:E2:5E:98:66
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.21.0/24
109.68.56.0/21
193.151.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a7:16:a6:9c:57:46:0b:d7:ee:5e:f5:a2:8f:5d:3b:3c:e2:
f3:f3:ac:4d:8d:81:e6:fb:28:d2:4c:f7:97:21:db:fd:6c:45:
92:eb:69:60:5d:c1:b7:66:21:84:81:11:37:58:06:13:ca:d9:
98:02:9a:c2:29:01:a3:a8:d7:1d:9c:62:a0:ce:6f:02:45:d9:
90:9d:cf:e8:21:af:a3:b9:0f:2f:47:c2:de:fd:25:33:8b:e9:
88:98:f9:ae:2f:93:ad:30:86:f8:ad:1e:59:c8:0d:04:4e:86:
f1:86:eb:41:84:44:a9:a6:bd:b5:c3:e5:3e:3c:d5:bf:3d:71:
77:e7:5f:4d:f2:4c:9e:2a:e1:9e:4f:d6:8a:d0:60:af:6e:dc:
87:ce:3b:b1:60:73:a9:84:6d:51:72:fc:1d:52:fa:be:8e:c1:
2b:2c:ef:8e:2b:f1:db:a9:7c:1f:71:3d:0d:8d:df:cf:f3:cb:
9d:e5:29:d5:de:93:b2:b9:b1:5d:a7:37:2e:38:ad:bd:5d:47:
0d:4f:7a:41:f1:a7:ae:92:95:fe:3c:ee:d0:d5:4c:89:5a:4d:
d8:34:e5:c6:c1:e2:f9:e6:a1:86:1a:58:da:58:7a:77:8c:89:
09:a3:80:f2:80:30:3e:4a:53:f5:e1:1d:62:1c:02:1e:64:98:
84:4d:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:12 2025 by rpki-client