Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bllwpSKa72UCZlcqM3TnKCKXFlY.roa
File: bllwpSKa72UCZlcqM3TnKCKXFlY.roa (raw, json)
Hash identifier: FmZsn3+lQB4Xl8zqWGLhGzFjrvBYUuIZ/eelRQ9WKd8=
Subject key identifier: 6E:59:70:A5:22:9A:EF:65:02:66:57:2A:33:74:E7:28:22:97:16:56
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0197443F71E124A471CBCB8DC130E6798FEE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bllwpSKa72UCZlcqM3TnKCKXFlY.roa
Signing time: Fri 06 Jun 2025 07:58:18 +0000
ROA not before: Fri 06 Jun 2025 07:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8439
IP address blocks: 5.28.16.0/20 maxlen: 20
31.28.32.0/19 maxlen: 19
37.9.144.0/20 maxlen: 20
62.106.96.0/20 maxlen: 20
62.106.112.0/21 maxlen: 21
62.106.120.0/21 maxlen: 21
81.28.160.0/19 maxlen: 19
85.114.160.0/19 maxlen: 19
92.240.128.0/20 maxlen: 20
95.128.160.0/21 maxlen: 21
95.128.160.0/22 maxlen: 22
95.128.164.0/22 maxlen: 22
109.226.64.0/18 maxlen: 18
185.10.180.0/22 maxlen: 22
185.50.8.0/22 maxlen: 22
188.122.224.0/19 maxlen: 19
193.106.240.0/22 maxlen: 22
213.178.32.0/19 maxlen: 19
213.178.32.0/21 maxlen: 21
213.178.40.0/21 maxlen: 21
213.178.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:3f:71:e1:24:a4:71:cb:cb:8d:c1:30:e6:79:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 6 07:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e5970a5229aef650266572a3374e72822971656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:66:74:7b:29:bd:a2:d9:86:c1:35:dd:d7:
64:9e:bd:73:9f:fe:b3:25:7d:53:17:48:fa:9e:5f:
aa:af:7a:85:68:29:ee:79:01:04:b9:9f:d2:05:1b:
e9:20:56:7f:34:d5:75:a1:dd:81:4f:b0:0b:29:59:
6c:59:34:37:ac:ba:15:02:ca:35:d9:2d:8a:89:b1:
20:f0:05:8d:e5:95:f3:76:dd:a2:1b:91:4a:61:f3:
51:05:71:19:86:ae:61:4c:d9:53:ab:01:75:6c:63:
fa:7a:f4:61:75:99:21:53:55:65:f4:46:c0:91:70:
52:a6:14:df:77:80:95:a1:5f:a0:89:01:89:d5:7a:
49:d7:d1:a8:07:59:aa:4b:5e:76:0c:d9:5b:4e:80:
34:6b:f8:54:b1:35:a9:c4:85:e3:40:46:a8:e5:6a:
81:75:e1:a0:36:b2:fd:47:f0:eb:1e:27:86:ea:6b:
48:d8:6c:c7:d1:d2:b7:4f:ca:33:a6:02:39:0c:cc:
ff:23:74:2b:6c:b2:da:4b:62:f1:a6:4d:13:32:d0:
35:55:0a:48:13:90:fc:16:0e:b1:88:8f:56:08:a6:
73:87:ca:d0:a6:92:64:9b:98:d5:c5:70:25:39:0d:
62:88:15:8f:c5:dc:fc:ba:f9:27:6a:54:8b:e8:11:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:70:A5:22:9A:EF:65:02:66:57:2A:33:74:E7:28:22:97:16:56
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bllwpSKa72UCZlcqM3TnKCKXFlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.16.0/20
31.28.32.0/19
37.9.144.0/20
62.106.96.0/19
81.28.160.0/19
85.114.160.0/19
92.240.128.0/20
95.128.160.0/21
109.226.64.0/18
185.10.180.0/22
185.50.8.0/22
188.122.224.0/19
193.106.240.0/22
213.178.32.0/19
Signature Algorithm: sha256WithRSAEncryption
89:64:e2:a3:af:9b:47:cf:60:96:8d:fb:3c:22:c6:0e:b5:ca:
c9:9f:4d:3f:26:69:26:cb:97:6f:b2:11:4e:d3:85:99:63:a4:
3d:4b:b9:25:87:cb:9d:1d:e4:16:c3:d7:d8:8d:84:aa:72:ab:
05:f1:11:31:dc:e2:28:84:7c:dc:c6:05:90:46:52:09:f2:21:
98:51:cc:06:d9:c9:b9:2d:1d:da:13:d0:d7:41:b8:05:2f:00:
b9:08:ed:7e:16:b0:50:a7:fc:fe:c1:ff:a0:2c:5e:30:f2:16:
54:43:b2:e6:39:2f:08:17:c3:50:c0:6f:7b:11:10:9a:44:39:
1e:ab:a3:38:a5:5b:1e:46:83:93:5a:7d:ab:a7:25:89:75:9c:
24:39:24:75:3b:6f:38:bc:4c:c3:f7:32:a9:e1:ca:22:d9:97:
5a:fe:f0:42:f5:d2:2c:1a:9f:3e:73:9b:ca:46:6d:86:67:5a:
a8:b9:57:28:80:50:05:fc:b9:de:17:10:c0:d3:6c:96:3b:bf:
0d:b6:3b:e8:6d:15:c1:37:ba:75:d3:63:68:e5:d9:e5:56:77:
00:16:2e:3e:48:e4:5c:b9:74:bc:9f:fe:56:97:a1:3e:30:2d:
13:3f:dc:16:c4:ca:4e:1b:4b:99:bf:32:12:0d:8d:c9:4d:08:
40:a8:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:26:47 2025 by rpki-client