Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa
File: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (raw, json)
Hash identifier: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=
Subject key identifier: 63:BC:E4:60:7E:C0:C3:B3:D5:B2:3D:74:44:F6:FE:32:47:6E:81:49
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 01987444983F3A8B9641C9D598BDF0553501
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa
Signing time: Mon 04 Aug 2025 08:48:29 +0000
ROA not before: Mon 04 Aug 2025 08:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 5.129.192.0/24 maxlen: 24
5.129.207.0/24 maxlen: 24
5.129.211.0/24 maxlen: 24
5.129.212.0/24 maxlen: 24
5.129.213.0/24 maxlen: 24
5.129.215.0/24 maxlen: 24
5.129.220.0/24 maxlen: 24
5.129.221.0/24 maxlen: 24
5.129.222.0/24 maxlen: 24
5.129.223.0/24 maxlen: 24
5.129.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:44:98:3f:3a:8b:96:41:c9:d5:98:bd:f0:55:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Aug 4 08:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63bce4607ec0c3b3d5b23d7444f6fe32476e8149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:7e:57:42:48:97:62:bc:b1:6f:ed:d2:4c:
a6:3d:c7:4b:b4:45:ec:20:42:dd:66:47:06:0e:9a:
4e:35:30:83:2f:7d:d3:50:50:f9:9c:8c:92:71:6d:
15:73:d6:de:4a:9a:17:80:49:7e:8f:a7:f7:b1:37:
43:de:ab:dc:82:8c:66:f4:11:1b:7a:63:b7:e0:06:
71:e2:18:11:21:06:98:d6:8b:10:0e:35:ef:07:12:
14:28:1b:27:4d:19:91:6f:f1:57:e8:d5:70:89:8f:
c9:2b:47:5a:d9:c5:86:24:24:ea:ef:9c:b8:43:06:
3e:0a:c2:e2:fc:4a:76:94:bf:d4:c5:0b:22:a3:cc:
2d:08:bf:ae:c1:b3:cf:77:bb:a2:2f:18:c2:97:3d:
be:db:2c:c4:da:9b:7b:27:d9:b2:76:8f:e2:bb:0b:
10:b4:b0:8c:9c:07:74:95:87:61:9a:b9:a8:08:63:
4e:25:c4:af:75:b9:fe:d2:f1:d3:5f:4e:d7:67:6a:
14:6a:8d:b9:99:83:2a:fc:8c:84:5f:43:1c:9e:6a:
f0:00:2c:22:3e:5e:2d:02:91:f9:04:69:eb:4c:1a:
05:0f:43:b5:14:40:14:23:a2:69:a7:77:96:83:2a:
45:e4:8b:f1:e4:f7:c9:29:54:d7:fe:4c:ca:02:eb:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BC:E4:60:7E:C0:C3:B3:D5:B2:3D:74:44:F6:FE:32:47:6E:81:49
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.192.0/24
5.129.207.0/24
5.129.211.0-5.129.213.255
5.129.215.0/24
5.129.220.0/22
5.129.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:86:c9:2f:28:ba:53:33:c2:23:c3:fa:cf:24:c9:0e:fe:5d:
57:4c:cd:d6:0a:7e:d2:37:e1:26:f4:b1:47:1e:88:8b:bf:d0:
8a:f2:2a:91:8d:30:66:0e:cf:8c:41:69:7f:8e:e3:7d:03:73:
34:5f:3d:93:59:ca:73:d0:7b:68:08:6b:fe:92:45:41:5f:bd:
96:53:3d:eb:55:a0:46:36:95:d9:ce:b9:a7:df:3a:b9:26:81:
96:5e:7a:d3:95:a5:9f:a5:c7:27:fb:30:ad:b9:96:03:00:94:
1e:c3:38:57:3c:91:95:47:d9:cf:df:5a:17:e1:02:7b:61:b4:
78:a3:87:1a:88:86:80:5e:93:cf:7d:86:46:e8:20:1e:c6:08:
07:25:16:7d:c1:89:99:d0:da:56:4b:88:be:ae:59:f8:ff:fe:
cc:af:30:34:bb:df:7a:71:04:64:ce:fe:6e:ec:6b:f5:8b:68:
4c:7f:0b:7c:b5:f7:28:83:0f:77:8a:cc:10:2a:e0:78:d9:67:
cf:2f:10:bc:0c:10:f3:4f:83:4a:5b:f4:ec:d2:de:55:8a:0a:
b3:04:88:2a:43:97:d5:57:a2:c1:9d:bc:2b:89:30:64:3c:66:
97:19:3a:74:6a:0a:07:93:94:0c:b6:0f:1c:2e:35:ef:f2:a4:
ef:ad:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:09 2025 by rpki-client