Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/7W1MYcFrXPQMuHGvZxJB_Ksb6ro.roa
File: 7W1MYcFrXPQMuHGvZxJB_Ksb6ro.roa (raw, json)
Hash identifier: ly2c1hXdgi0m05sws7pc1y7F2/mwaZro2tBmU2P/9ow=
Subject key identifier: ED:6D:4C:61:C1:6B:5C:F4:0C:B8:71:AF:67:12:41:FC:AB:1B:EA:BA
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 01984C92C9461E0E8ABCA3A42299259ED5FE
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/7W1MYcFrXPQMuHGvZxJB_Ksb6ro.roa
Signing time: Sun 27 Jul 2025 15:49:04 +0000
ROA not before: Sun 27 Jul 2025 15:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212136
IP address blocks: 5.172.178.0/24 maxlen: 24
5.181.12.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
81.22.47.0/24 maxlen: 24
91.214.116.0/24 maxlen: 24
176.56.32.0/24 maxlen: 24
176.111.174.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
194.31.9.0/24 maxlen: 24
213.232.254.0/24 maxlen: 24
2a10:aa80::/30 maxlen: 30
2a10:aa84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:92:c9:46:1e:0e:8a:bc:a3:a4:22:99:25:9e:d5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jul 27 15:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed6d4c61c16b5cf40cb871af671241fcab1beaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:1f:a6:fd:41:54:79:da:c4:08:01:cc:5c:
0c:e3:38:a3:53:1f:76:99:82:45:25:5a:00:73:3c:
cb:ff:5e:e1:43:c6:c7:16:82:ef:5e:0f:60:89:66:
79:22:ad:7d:17:dc:fb:d6:b6:fb:3c:7d:16:87:8d:
d5:8d:d9:df:dd:d7:c0:6e:b0:8b:b0:89:a7:a9:0a:
28:7b:cc:62:c9:83:09:fe:a1:50:40:b7:47:dd:54:
ba:be:3c:28:2a:3a:a5:f9:ce:00:bd:90:20:6d:5e:
c8:17:a4:6f:3f:a7:95:15:52:80:8c:19:1b:67:27:
a4:61:b4:7b:8e:73:71:69:7c:a1:12:c9:cb:82:0a:
9e:15:be:8d:64:e6:15:49:92:d8:b2:35:ab:8a:41:
a0:96:3e:00:22:05:a8:e7:05:29:94:8e:e7:d0:9a:
38:a9:3f:60:35:b0:53:3e:89:42:c9:84:d4:1a:da:
e2:8d:c8:67:7d:7a:81:70:fd:16:67:55:64:54:82:
d3:80:15:0b:52:eb:22:18:0f:b1:b8:d7:49:dd:68:
cb:05:a1:b6:09:7e:b8:23:9f:5a:9e:54:59:45:9a:
83:75:40:92:23:b7:d6:60:db:3c:38:3d:61:45:f5:
18:64:66:82:dd:56:94:53:bd:19:24:a6:8a:af:0b:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6D:4C:61:C1:6B:5C:F4:0C:B8:71:AF:67:12:41:FC:AB:1B:EA:BA
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/7W1MYcFrXPQMuHGvZxJB_Ksb6ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
5.181.12.0/24
81.22.46.0/23
91.214.116.0/24
176.56.32.0/24
176.111.174.0/24
185.228.248.0/24
185.247.187.0/24
194.31.9.0/24
213.232.254.0/24
IPv6:
2a10:aa80::/29
Signature Algorithm: sha256WithRSAEncryption
96:ae:a0:f6:61:53:46:d1:cb:11:03:42:c8:53:42:2e:7c:b9:
a0:b3:50:d0:49:09:64:48:4d:d9:e9:24:d9:00:b3:64:dc:01:
b4:9f:45:7a:fa:87:ab:1c:a2:08:1c:f4:11:d2:f1:e6:8a:25:
41:b8:53:e2:d6:25:3f:d8:63:2c:32:1a:26:68:d5:d7:70:f0:
28:36:ed:ec:71:5e:70:d6:33:b9:35:6c:50:74:61:1e:13:8f:
2a:8c:a8:aa:17:7b:1f:af:01:20:a3:7a:de:57:8a:77:7b:8f:
fd:f0:58:64:f7:79:30:cb:f6:07:73:cd:a9:6f:74:ca:d8:f0:
3f:4d:a5:63:f2:86:17:90:5b:bb:64:33:c7:df:39:00:26:8e:
3b:12:97:29:08:8b:26:5e:60:74:af:ac:2a:84:14:5d:61:77:
cb:6a:ef:21:c1:1a:a8:f5:63:3f:51:97:56:fa:c6:90:95:bb:
0c:44:30:0f:db:ef:a8:81:b6:81:66:44:b9:93:e1:82:d7:07:
9b:3e:39:f7:58:e2:06:26:fc:1f:15:2a:b1:a2:37:39:c6:a7:
20:16:cb:2f:13:3d:cf:f6:6d:eb:59:74:b1:b8:15:9a:65:a0:
4d:d4:a9:82:cd:86:ab:c8:74:85:d4:02:a9:8d:46:db:1c:e7:
12:c2:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:00 2025 by rpki-client