Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/SSI8dwqI7dLLZnkKofdbeqIpwAw.roa
File: SSI8dwqI7dLLZnkKofdbeqIpwAw.roa (raw, json)
Hash identifier: V8oFtPPMMVJpjeo0/zsMg1Km+/3IdAD2gZnS6mgf8pA=
Subject key identifier: 49:22:3C:77:0A:88:ED:D2:CB:66:79:0A:A1:F7:5B:7A:A2:29:C0:0C
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019A3908B4767A903A33C5A7E857776DA5F2
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/SSI8dwqI7dLLZnkKofdbeqIpwAw.roa
Signing time: Fri 31 Oct 2025 06:51:03 +0000
ROA not before: Fri 31 Oct 2025 06:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
155.212.245.0/24 maxlen: 24
155.212.246.0/24 maxlen: 24
155.212.247.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
194.5.79.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:08:b4:76:7a:90:3a:33:c5:a7:e8:57:77:6d:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 31 06:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49223c770a88edd2cb66790aa1f75b7aa229c00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:74:21:f7:26:ae:9f:cd:2f:a5:98:23:19:
3f:f5:f9:14:bc:4b:c4:4a:bb:c7:2b:10:18:db:cd:
d5:cb:c0:73:f7:77:cc:75:c8:0b:e7:23:69:f6:d6:
1f:9b:13:28:5f:ac:db:4f:0a:ef:c7:6b:e2:d5:49:
5b:31:06:b5:91:89:3d:ea:44:53:56:d1:67:36:ec:
df:c9:e6:1c:30:c4:cc:f3:c6:2d:fb:f9:e2:7a:9d:
95:36:2d:20:41:8c:82:a9:16:de:2b:ce:e5:38:e8:
e2:e0:ba:f1:69:5e:12:c9:5f:22:ef:e6:12:96:6d:
30:9d:77:12:b9:53:29:33:bc:e5:f2:b5:fd:b4:b0:
3b:6a:47:f3:f4:bc:6a:9e:0b:ef:f0:6e:42:56:c2:
d6:a0:55:f1:76:14:63:f7:d5:cf:19:2c:9b:06:a1:
1f:ed:86:b7:65:c0:3b:d2:8b:69:fc:1e:f4:ff:5b:
da:4e:32:69:ac:d5:5d:2a:55:98:c8:dc:d4:51:41:
13:f2:71:99:82:07:42:82:77:fe:19:b5:32:05:2e:
5f:96:1b:ca:40:4d:ef:43:b6:e2:5b:81:84:59:79:
e0:3d:50:e7:df:55:29:10:67:b5:f5:0e:fa:2c:26:
ad:f8:41:ee:54:c4:ea:84:46:89:21:d4:2b:2e:9f:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:3C:77:0A:88:ED:D2:CB:66:79:0A:A1:F7:5B:7A:A2:29:C0:0C
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/SSI8dwqI7dLLZnkKofdbeqIpwAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
155.212.245.0-155.212.247.255
185.198.152.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/23
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
46:32:14:6e:85:00:bc:02:c1:40:00:e2:4c:e5:81:24:9f:39:
d0:4c:00:a4:ca:03:6b:2d:0c:c3:9d:cb:97:c0:f2:b1:ec:63:
de:c3:10:bd:13:96:9b:90:8c:32:fd:56:4f:dc:e1:e3:11:93:
f3:f7:7b:81:ac:2a:b9:1d:a2:ba:d0:38:08:12:53:da:4f:3e:
cb:18:c4:ec:a3:a1:23:6a:36:7d:77:74:b3:70:3b:92:10:47:
61:78:6a:06:d5:c2:6e:b6:ca:f2:d7:30:c5:f8:32:44:11:91:
b6:71:ed:78:cf:04:da:2f:ab:93:58:65:61:ca:3d:99:9e:54:
3c:43:9a:8a:c6:3b:8c:5a:db:55:84:cd:4f:79:d1:05:96:83:
15:3e:47:db:5d:01:6e:06:25:22:93:42:d8:0d:12:31:8f:a2:
21:d2:cd:bc:f6:61:77:41:b0:32:de:73:d7:5e:e6:85:ad:f9:
db:86:a7:dd:d7:c0:a1:02:57:bb:cc:6c:5d:40:8b:ec:c5:13:
da:b9:7d:28:52:21:e6:30:84:81:83:a9:fd:ac:44:d7:2b:2d:
ab:db:a5:a9:1c:fe:a3:a1:54:9e:f6:c0:88:70:12:69:51:a9:
1b:9f:51:60:3d:9a:b1:94:44:3b:20:65:2b:86:5c:db:4a:5c:
ed:ce:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:44 2025 by rpki-client