Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/P5MzNy0x1gvmaH41_oafqegxgds.roa
File: P5MzNy0x1gvmaH41_oafqegxgds.roa (raw, json)
Hash identifier: /umuztRlubmBtUw6EQNGjqlM2xkvy8SQEDOxlQV4IZM=
Subject key identifier: 3F:93:33:37:2D:31:D6:0B:E6:68:7E:35:FE:86:9F:A9:E8:31:81:DB
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0198564D932793C0BE61E7C1EC0FF4D97C4A
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/P5MzNy0x1gvmaH41_oafqegxgds.roa
Signing time: Tue 29 Jul 2025 13:09:41 +0000
ROA not before: Tue 29 Jul 2025 13:09:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
62.197.48.0/23 maxlen: 23
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:4d:93:27:93:c0:be:61:e7:c1:ec:0f:f4:d9:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 29 13:09:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f9333372d31d60be6687e35fe869fa9e83181db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:8f:0d:58:26:84:96:a9:d5:be:5c:11:4f:
f5:d9:24:d9:6f:72:c2:24:1e:f6:66:e1:9e:c0:48:
5d:04:0b:54:3f:38:7a:94:e8:67:a2:94:4e:29:db:
3f:bc:2b:73:c6:59:3a:48:a9:3d:f0:23:34:4a:53:
7a:4b:71:7d:00:37:fc:9b:b7:63:88:24:17:89:75:
f7:52:ef:23:84:75:69:cf:c2:9c:2b:2a:07:b9:f5:
ce:d0:c4:84:87:75:68:a3:fe:21:c0:dc:4c:b6:9e:
3e:2c:93:a4:0b:92:ea:f9:de:b4:7a:b2:85:ab:88:
7f:7d:83:ae:10:0e:27:e1:cb:fe:ff:d9:40:e5:c8:
88:cc:82:86:48:58:92:7e:ba:22:8c:b1:a2:04:cf:
ef:99:8e:30:ad:a6:df:ac:c4:00:0e:e1:bf:f6:23:
49:27:ed:8e:31:18:3c:4c:d0:1d:94:6e:52:ad:b5:
9d:82:97:fe:28:6e:4e:ce:36:b4:18:87:17:99:24:
02:c2:97:76:20:1d:fb:68:10:c5:36:c3:8a:0a:ca:
f2:d1:ea:cc:d2:4e:57:a7:66:37:03:30:b4:ca:16:
85:46:09:c3:ce:46:73:fc:92:8c:d3:6f:60:fd:6c:
12:3b:0e:85:68:4c:4c:07:2d:ef:75:55:13:de:9b:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:93:33:37:2D:31:D6:0B:E6:68:7E:35:FE:86:9F:A9:E8:31:81:DB
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/P5MzNy0x1gvmaH41_oafqegxgds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
45.137.212.0/22
46.102.106.0/24
62.197.45.0/24
62.197.48.0/23
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
92.63.224.0/24
176.97.79.0/24
176.98.40.0/24
185.109.48.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
a5:f8:9b:0c:bf:2f:77:67:39:5a:3d:ca:8d:34:67:71:b3:77:
63:68:47:d6:18:e9:3d:82:d6:c6:e7:f5:9e:88:5f:bf:da:b3:
cd:9d:72:cb:fa:d1:74:7d:20:0b:e2:dd:97:3c:e8:e6:1f:06:
fd:87:40:b6:9f:c5:fe:eb:e3:af:e9:ea:0a:84:8b:d0:95:f0:
7b:13:d2:a9:c7:fa:61:7b:b9:c8:7b:70:c5:a3:0d:ed:82:ac:
c0:5c:2b:71:1f:7f:0a:63:90:df:cb:7d:0b:4c:b8:74:58:cf:
cd:88:6e:db:ee:8d:ad:22:e5:46:4d:2b:64:dd:5a:53:7f:ff:
9b:74:3e:36:d7:4d:d1:84:d9:3a:f2:9d:ef:26:b3:b0:bf:1c:
a3:06:76:fb:6f:12:36:4e:7d:b9:44:d8:a8:f6:cf:2e:2d:5f:
29:16:48:58:14:9d:8d:87:bc:3a:33:7a:2c:03:a0:69:11:bf:
09:64:d1:5c:c7:52:20:1f:6c:42:b9:18:ce:c2:f0:7f:a9:27:
d8:c0:1a:7d:52:29:2d:a7:cc:59:8d:8b:e1:2f:bb:dd:23:01:
ff:61:1a:46:31:6d:90:23:89:a1:cc:23:33:ce:1b:6c:25:41:
a7:e8:5f:b7:a9:3b:34:1b:0f:aa:c1:95:4f:a5:bd:44:7e:d8:
44:8b:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:32 2025 by rpki-client