Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/tMAaAfLlucpLRUqgXI0SENiZBPg.roa
File: tMAaAfLlucpLRUqgXI0SENiZBPg.roa (raw, json)
Hash identifier: f4cNgUh5hxgZxKy+m185e12Dxpodo6iR/S/aAPvG/9k=
Subject key identifier: B4:C0:1A:01:F2:E5:B9:CA:4B:45:4A:A0:5C:8D:12:10:D8:99:04:F8
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 01978C8432E195B5D26A829E206B9A27173B
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/tMAaAfLlucpLRUqgXI0SENiZBPg.roa
Signing time: Fri 20 Jun 2025 08:46:03 +0000
ROA not before: Fri 20 Jun 2025 08:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39442
IP address blocks: 92.39.104.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
185.183.48.0/23 maxlen: 23
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.54.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.16.0/21 maxlen: 21
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/21 maxlen: 21
217.149.176.0/22 maxlen: 22
217.149.176.0/24 maxlen: 24
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:84:32:e1:95:b5:d2:6a:82:9e:20:6b:9a:27:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jun 20 08:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4c01a01f2e5b9ca4b454aa05c8d1210d89904f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:8e:90:cd:e9:7c:1c:17:00:df:43:ae:a8:
4c:97:70:22:68:e9:ee:0e:45:e0:65:00:46:23:8f:
21:fd:d2:5f:4a:75:51:7b:a1:21:8b:77:20:e4:95:
32:a7:06:62:3c:e1:44:34:56:ea:0a:1f:36:d3:c4:
25:85:d7:c5:df:f7:64:40:16:49:51:a2:1a:2a:59:
79:cf:13:05:c4:43:32:92:36:6c:a9:88:05:bc:7e:
44:b5:94:8b:6f:2c:84:9a:02:54:57:8a:09:87:2e:
d7:9c:11:45:f6:7c:ec:b3:ee:f9:b4:0a:45:db:4a:
15:1e:9d:2d:35:af:26:4d:4b:90:ea:6e:be:63:47:
9d:83:8f:d1:26:2c:d2:11:9e:57:3b:a7:a1:29:d3:
c6:6c:14:79:5d:9e:f0:4c:47:2e:bc:a5:56:43:6c:
85:ac:a1:c9:79:d0:7c:82:9a:14:c5:8d:f9:21:78:
28:0b:e9:26:9d:f7:7e:a9:0d:9e:2a:3a:4f:05:19:
2a:57:10:1a:46:8b:d5:8b:40:a0:cb:f5:5b:04:a2:
72:d6:5a:5e:f8:95:7a:64:7b:7e:cf:a2:a7:53:6a:
43:a4:02:05:7d:c4:87:a0:8f:ad:a0:c1:c9:fd:17:
75:cc:e1:00:33:6d:3e:c9:59:0e:5f:55:58:5c:cf:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:1A:01:F2:E5:B9:CA:4B:45:4A:A0:5C:8D:12:10:D8:99:04:F8
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/tMAaAfLlucpLRUqgXI0SENiZBPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.104.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.23.255
217.149.176.0/20
Signature Algorithm: sha256WithRSAEncryption
45:b1:f6:25:86:35:11:00:05:3b:2d:b9:b2:5d:39:e1:ba:bf:
28:a3:82:01:94:f5:de:73:99:2d:df:27:f9:c7:7b:b3:cb:52:
25:4f:4d:b9:26:48:e4:d4:3b:a0:cf:c2:9a:4e:13:8c:f2:d0:
e9:9f:33:80:0a:a1:89:05:1a:46:90:cc:64:33:72:09:62:58:
7c:b4:f4:42:c2:1d:0f:f3:4e:e5:30:f6:fa:86:c0:d0:73:18:
75:a3:88:d3:f8:ea:ab:ec:00:7b:59:a4:a6:72:53:77:98:58:
74:e9:ab:32:50:42:2b:97:df:b0:a8:e8:e1:18:2f:c1:2f:6a:
d6:39:1e:ab:ec:eb:bb:ab:64:f9:b9:d5:36:ad:3e:e2:9d:44:
f0:86:28:bd:17:b8:ad:05:c0:62:b3:85:13:6b:c6:7b:9f:55:
e5:33:1a:5c:71:58:92:8c:eb:d7:4b:c7:26:83:1c:20:ba:a9:
da:87:b3:14:9d:68:69:15:c6:6b:c9:3a:b3:55:51:2d:c8:2c:
aa:45:7f:75:38:f2:9b:43:41:df:81:29:fe:b1:6e:b3:4a:67:
3e:e8:1c:cc:8d:11:30:75:f3:b9:81:0b:03:f7:7b:b9:57:23:
94:58:bb:43:f6:1a:69:ce:5d:a3:53:e7:c4:09:59:c7:bf:f4:
70:9d:85:75
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZeMhDLhlbXSaoKeIGuaJxc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjUwNjIwMDg0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGMwMWEwMWYyZTViOWNhNGI0NTRhYTA1YzhkMTIxMGQ4OTkwNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8GOkM3pfBwXAN9DrqhMl3AiaOnu
DkXgZQBGI48h/dJfSnVRe6Ehi3cg5JUypwZiPOFENFbqCh8208QlhdfF3/dkQBZJ
UaIaKll5zxMFxEMykjZsqYgFvH5EtZSLbyyEmgJUV4oJhy7XnBFF9nzss+75tApF
20oVHp0tNa8mTUuQ6m6+Y0edg4/RJizSEZ5XO6ehKdPGbBR5XZ7wTEcuvKVWQ2yF
rKHJedB8gpoUxY35IXgoC+kmnfd+qQ2eKjpPBRkqVxAaRovVi0Cgy/VbBKJy1lpe
+JV6ZHt+z6KnU2pDpAIFfcSHoI+toMHJ/Rd1zOEAM20+yVkOX1VYXM/HJwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFLTAGgHy5bnKS0VKoFyNEhDYmQT4MB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvdE1BYUFmTGx1Y3BMUlVxZ1hJMFNFTmlaQlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwQDXCdoAwQC
uX1IAwQCubcwAwQFvPcgMAsDAwHV6gMEA9XqEAMEBNmVsDANBgkqhkiG9w0BAQsF
AAOCAQEARbH2JYY1EQAFOy25sl054bq/KKOCAZT13nOZLd8n+cd7s8tSJU9NuSZI
5NQ7oM/Cmk4TjPLQ6Z8zgAqhiQUaRpDMZDNyCWJYfLT0QsIdD/NO5TD2+obA0HMY
daOI0/jqq+wAe1mkpnJTd5hYdOmrMlBCK5ffsKjo4RgvwS9q1jkeq+zru6tk+bnV
Nq0+4p1E8IYovRe4rQXAYrOFE2vGe59V5TMaXHFYkozr10vHJoMcILqp2oezFJ1o
aRXGa8k6s1VRLcgsqkV/dTjym0NB34Ep/rFus0pnPugczI0RMHXzuYELA/d7uVcj
lFi7Q/Yaac5do1PnxAlZx7/0cJ2FdQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:35 2025 by rpki-client