Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/5fZS-1vlegGSSza-NXUVNMKn6lw.roa
File: 5fZS-1vlegGSSza-NXUVNMKn6lw.roa (raw, json)
Hash identifier: EXLfcBjq/06nP1jTvlP+wel0Uv7CTRQB78pj4Qkz7/g=
Subject key identifier: E5:F6:52:FB:5B:E5:7A:01:92:4B:36:BE:35:75:15:34:C2:A7:EA:5C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198612285C3840F70A698B250A186A213DA
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/5fZS-1vlegGSSza-NXUVNMKn6lw.roa
Signing time: Thu 31 Jul 2025 15:38:29 +0000
ROA not before: Thu 31 Jul 2025 15:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:22:85:c3:84:0f:70:a6:98:b2:50:a1:86:a2:13:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 31 15:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5f652fb5be57a01924b36be35751534c2a7ea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:3d:a1:cb:44:c3:d2:21:a0:a6:51:9c:df:
dd:fc:2d:30:0d:04:f7:9d:06:12:48:d7:f8:91:b2:
26:29:d7:da:ca:ff:b5:37:a1:f1:cd:1c:8b:9f:d2:
3d:0c:8b:83:0c:58:7c:49:4b:f5:ee:21:68:26:4b:
1b:b9:8f:65:62:94:35:02:0e:5c:a2:be:8c:29:18:
e9:ad:87:6b:66:66:da:9f:30:42:89:2f:56:4d:f3:
6a:32:48:2c:bc:89:9d:79:9d:1f:3d:3b:6e:e6:d9:
32:b0:65:18:b3:e6:07:69:74:3a:1d:8e:b9:e2:67:
34:f4:3b:4c:e1:10:71:1f:58:14:ad:c1:0e:d2:95:
88:1d:6a:ca:1d:06:15:cf:9c:f6:d3:a3:79:3d:e2:
f6:bc:ce:69:25:da:5f:ad:6c:ec:af:7c:2d:81:1d:
0e:5a:0c:99:8a:a7:3c:43:1c:93:a6:71:41:59:49:
72:27:0d:1a:70:b9:db:4a:55:f0:4c:4d:88:d0:df:
d5:b7:0a:f7:fd:7e:fa:b7:eb:01:d1:33:31:32:c5:
31:a2:6b:4c:82:99:38:1c:90:16:8d:f1:57:0a:8b:
46:50:78:a3:91:f2:34:d3:ab:10:9c:69:a1:8e:b8:
a9:33:1f:9e:cb:54:5b:8d:a4:5a:e9:78:e2:9a:d4:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F6:52:FB:5B:E5:7A:01:92:4B:36:BE:35:75:15:34:C2:A7:EA:5C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/5fZS-1vlegGSSza-NXUVNMKn6lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.12.0/24
92.62.119.0/24
94.232.248.0/24
95.81.114.0/23
95.81.123.0/24
109.69.60.0/24
IPv6:
2a06:ddc0::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
09:ac:e0:eb:73:63:15:cd:b0:5d:b1:45:6c:a8:f8:4a:0b:08:
c1:64:45:51:b5:a0:c8:66:d6:84:df:9f:8f:bb:bc:96:25:25:
05:70:1c:f4:fc:b3:3d:ad:11:44:e3:20:ff:67:42:4f:02:31:
84:8a:88:c3:1c:84:f8:d0:7a:fe:00:31:d9:84:3b:55:1f:55:
a8:6f:31:6a:1e:cb:aa:9d:e3:f7:4c:82:cf:18:5e:19:25:38:
bc:43:e9:61:29:d6:d2:d6:1d:23:c3:af:14:cb:fd:4c:7d:92:
b2:1b:aa:99:a3:0d:ca:ac:1c:dc:69:8f:de:d0:a6:fd:be:8a:
17:67:9d:3d:14:b4:59:5f:f7:64:60:04:a4:fc:cc:6a:ad:3f:
17:08:a3:13:ea:d9:4e:c2:ef:70:8e:36:ca:58:ef:42:bd:a5:
5d:59:1b:54:7e:38:23:9d:b3:ab:d3:8d:15:51:71:ee:2a:33:
94:cc:3f:77:f2:76:60:1e:29:05:b0:d6:68:85:d4:fe:ce:35:
b9:66:29:16:6b:ca:d5:82:8f:18:75:a5:b2:64:89:c8:e1:fd:
0c:e7:96:a9:dd:a1:f9:dd:b2:f0:b4:4a:ad:18:1b:01:92:66:
ba:f4:af:b1:b8:8b:b3:14:3d:8f:a1:ce:60:42:eb:8c:b5:16:
a9:33:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:54 2025 by rpki-client