Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/DIuSabtBbR2nQm3WZSy9ze7IVZg.roa
File: DIuSabtBbR2nQm3WZSy9ze7IVZg.roa (raw, json)
Hash identifier: 2rVX0GGpPvWmCFxQ7xML0aabrAFCH5UZoizKMnJ47/I=
Subject key identifier: 0C:8B:92:69:BB:41:6D:1D:A7:42:6D:D6:65:2C:BD:CD:EE:C8:55:98
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0197631D5B7314BE189846AB8296FDD55ABE
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/DIuSabtBbR2nQm3WZSy9ze7IVZg.roa
Signing time: Thu 12 Jun 2025 07:49:17 +0000
ROA not before: Thu 12 Jun 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3302
IP address blocks: 5.150.128.0/20 maxlen: 20
62.94.0.0/16 maxlen: 24
81.92.32.0/20 maxlen: 20
83.211.0.0/16 maxlen: 24
128.65.112.0/20 maxlen: 20
185.58.44.0/22 maxlen: 22
185.82.0.0/22 maxlen: 22
185.168.24.0/22 maxlen: 24
194.20.0.0/16 maxlen: 24
194.21.0.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
194.153.208.0/22 maxlen: 24
195.62.224.0/19 maxlen: 24
212.90.0.0/19 maxlen: 24
212.110.0.0/19 maxlen: 24
213.136.128.0/18 maxlen: 24
213.149.192.0/19 maxlen: 19
213.183.128.0/19 maxlen: 19
213.198.128.0/18 maxlen: 24
217.15.208.0/20 maxlen: 24
217.29.160.0/20 maxlen: 20
2001:750::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:1d:5b:73:14:be:18:98:46:ab:82:96:fd:d5:5a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jun 12 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c8b9269bb416d1da7426dd6652cbdcdeec85598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:83:63:a2:7b:3b:bd:71:b6:88:7a:8f:1c:
13:f8:4f:d9:2e:9b:69:71:98:23:32:65:97:ef:c6:
ea:f9:ee:27:ae:96:64:a5:d6:8f:19:5f:40:4b:99:
2e:cf:27:b6:2d:67:1e:d3:bb:b8:d5:92:7b:c8:56:
48:66:21:9f:09:f8:ed:af:9b:30:8d:31:61:25:af:
4f:5d:6d:c6:0f:1b:70:4c:c8:ff:7e:0a:6a:1c:7b:
04:6a:d3:76:8d:7c:55:38:b3:a6:f3:1d:1e:fd:41:
f6:f9:05:d5:9f:0f:33:68:9f:8f:f8:5d:4d:be:fb:
e2:9b:3c:b7:55:cb:22:c0:88:02:40:eb:5e:91:0e:
22:a7:ea:1d:23:76:70:0f:3d:d4:86:c0:7e:23:37:
f2:9c:14:14:d6:c0:00:0f:27:30:24:1d:5c:7a:40:
20:21:14:a3:6a:07:91:a9:5d:6e:15:bd:70:b0:dc:
79:de:51:2e:a8:7f:74:69:c7:33:bb:82:74:bc:42:
97:ed:01:ce:2b:7b:15:0f:6c:45:e1:b5:04:66:fb:
e2:6f:5d:18:32:a0:37:8f:fb:82:9a:91:7a:c8:18:
ed:36:7b:4b:39:06:c3:fa:5b:f1:a5:24:35:67:dc:
d7:28:22:15:24:ea:fe:98:00:a3:23:2e:16:45:6e:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:92:69:BB:41:6D:1D:A7:42:6D:D6:65:2C:BD:CD:EE:C8:55:98
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/DIuSabtBbR2nQm3WZSy9ze7IVZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.128.0/20
62.94.0.0/16
81.92.32.0/20
83.211.0.0/16
128.65.112.0/20
185.58.44.0/22
185.82.0.0/22
185.168.24.0/22
194.20.0.0-194.21.63.255
194.153.192.0-194.153.211.255
195.62.224.0/19
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.149.192.0/19
213.183.128.0/19
213.198.128.0/18
217.15.208.0/20
217.29.160.0/20
IPv6:
2001:750::/29
Signature Algorithm: sha256WithRSAEncryption
33:ac:38:3f:3f:30:c5:fc:13:aa:6c:cd:c8:bf:28:f8:aa:7f:
6c:a4:e7:aa:55:29:8e:3d:21:ad:82:16:0d:2a:94:e7:e9:d6:
61:ff:d3:93:91:03:0c:d8:37:9c:4d:87:ea:de:3a:17:54:c6:
25:7e:d1:a9:ee:20:7e:64:0f:05:40:9f:e6:12:be:ec:ca:30:
b3:61:d8:fb:25:1f:c0:3b:e4:5e:a4:87:39:2a:8d:92:4d:90:
57:25:c2:8e:86:2f:a0:cc:06:3e:c9:db:d1:d1:b4:40:fe:e7:
e5:24:14:db:4f:f7:3c:24:05:1a:e7:a9:4c:28:34:18:e4:96:
17:89:e2:58:8c:56:c6:03:45:ae:c6:16:e2:ec:58:c5:c8:ab:
7b:c6:7d:49:5f:48:32:bc:b2:5c:f1:1a:cb:65:73:39:02:f3:
94:3f:a5:d9:2b:22:6b:7a:58:f1:60:c8:fb:c3:fe:e1:e3:61:
32:23:b5:30:bc:6a:8e:93:86:78:d6:15:2d:24:2d:e8:dc:22:
94:cb:1c:d7:39:ac:0d:74:27:6b:e3:96:4f:27:a8:cc:72:29:
40:99:d8:57:3f:51:46:d2:4f:1d:6b:be:e4:d5:7e:26:e4:85:
dc:a5:ef:29:19:9f:57:43:ce:29:5b:9a:f1:83:d5:ee:3b:b3:
7d:01:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:16:45 2025 by rpki-client