Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/g6O7wY63DyqDJHy27Gz3lHDxU5s.roa
File: g6O7wY63DyqDJHy27Gz3lHDxU5s.roa (raw, json)
Hash identifier: TrqIQ8Zbcjz8fNMvr1JTBGMIwXO8B6vc4Pif/pzevVU=
Subject key identifier: 83:A3:BB:C1:8E:B7:0F:2A:83:24:7C:B6:EC:6C:F7:94:70:F1:53:9B
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194DF98487973DA3B87ED086A5B49774D70
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/g6O7wY63DyqDJHy27Gz3lHDxU5s.roa
Signing time: Fri 07 Feb 2025 08:48:06 +0000
ROA not before: Fri 07 Feb 2025 08:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.140.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:98:48:79:73:da:3b:87:ed:08:6a:5b:49:77:4d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 7 08:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a3bbc18eb70f2a83247cb6ec6cf79470f1539b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:71:a6:e0:ba:9c:d1:ca:01:36:a5:fb:62:
27:ff:65:f7:a6:3c:a4:eb:7c:21:6c:61:ba:ef:03:
03:5f:48:2f:d4:79:20:f1:fc:3c:db:01:f6:95:48:
a0:33:29:ea:dc:70:42:f2:49:fe:da:f7:48:6e:cf:
4b:25:cd:5b:c0:a4:a0:8d:a5:7f:74:8f:1f:e3:8c:
b8:61:f2:39:42:92:64:1e:55:d6:ce:81:ca:29:38:
48:7e:f2:6b:db:91:d1:f4:02:e0:95:89:9c:41:ae:
73:c7:2e:96:5e:2c:a3:85:ed:77:c5:5a:3f:c0:78:
0f:b9:8b:78:bb:5e:68:c6:ff:58:f1:15:87:14:2f:
8b:e0:62:04:4a:20:a7:63:da:23:ed:a1:b7:4b:e1:
9e:0f:f1:12:bb:1c:76:7d:a4:9f:1f:af:9c:3c:b4:
0c:f8:e7:17:0e:40:01:db:b2:87:1c:40:50:49:a8:
41:ac:64:ec:1d:c1:d0:04:6d:c1:ed:b1:8b:dc:a6:
fc:e8:52:03:0c:a7:dc:13:41:0e:23:3e:f5:9b:ab:
8a:74:79:a7:f8:09:7d:15:b1:6c:7e:a5:74:24:40:
ab:42:18:d6:f4:ec:cc:7b:2c:f4:aa:cc:f5:d0:d8:
47:03:84:92:82:b3:78:9e:a3:aa:3e:63:44:76:6e:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:BB:C1:8E:B7:0F:2A:83:24:7C:B6:EC:6C:F7:94:70:F1:53:9B
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/g6O7wY63DyqDJHy27Gz3lHDxU5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.140.0/23
Signature Algorithm: sha256WithRSAEncryption
85:f3:38:cd:53:40:13:83:02:19:98:4c:07:7e:ea:d5:b2:93:
05:85:45:4c:9f:58:98:88:b1:35:70:d2:03:90:d1:df:32:25:
1e:02:16:99:02:5a:6e:24:78:a3:fa:5c:15:25:2c:22:b4:f7:
62:2d:54:49:38:80:14:03:89:b9:f6:90:ff:c7:04:90:b5:6e:
c8:6e:d0:8f:7c:ac:62:db:be:6f:fc:1e:1a:73:79:19:08:99:
6c:e2:35:15:ea:35:fd:d6:10:c1:af:f6:e6:8e:b6:26:70:9f:
57:24:9e:f3:7a:9e:51:4c:a9:a1:bb:8d:00:81:ca:a2:34:fa:
fd:47:c5:a4:d0:b6:93:02:8c:08:18:49:69:35:14:e1:47:00:
14:8c:6a:e0:e8:1b:28:77:0b:5a:7a:27:fa:40:ee:68:33:7a:
02:fc:8f:2c:27:55:cb:9f:32:52:cc:cc:c8:f4:d2:5b:15:a3:
62:ea:2b:10:36:ca:9f:6b:ef:38:fb:a3:eb:1e:b3:4e:03:e4:
6a:e6:ca:d5:e7:f6:a1:7d:77:f0:99:92:f6:cc:fd:42:71:c8:
bf:11:a0:bf:03:4d:45:4b:f7:ad:ad:a4:d4:42:d6:cc:2e:76:
e9:c1:58:bf:7f:40:c3:4e:aa:30:2a:97:6f:07:28:ce:b8:65:
dc:8e:4c:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTfmEh5c9o7h+0IaltJd01wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwMjA3MDg0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2EzYmJjMThlYjcwZjJhODMyNDdjYjZlYzZjZjc5NDcwZjE1MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD9xpuC6nNHKATal+2In/2X3pjyk
63whbGG67wMDX0gv1Hkg8fw82wH2lUigMynq3HBC8kn+2vdIbs9LJc1bwKSgjaV/
dI8f44y4YfI5QpJkHlXWzoHKKThIfvJr25HR9ALglYmcQa5zxy6WXiyjhe13xVo/
wHgPuYt4u15oxv9Y8RWHFC+L4GIESiCnY9oj7aG3S+GeD/ESuxx2faSfH6+cPLQM
+OcXDkAB27KHHEBQSahBrGTsHcHQBG3B7bGL3Kb86FIDDKfcE0EOIz71m6uKdHmn
+Al9FbFsfqV0JECrQhjW9OzMeyz0qsz10NhHA4SSgrN4nqOqPmNEdm48EwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIOju8GOtw8qgyR8tuxs95Rw8VObMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvZzZPN3dZNjNEeXFESkh5MjdHejNsSER4VTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTfbUAwQB
WFCMMA0GCSqGSIb3DQEBCwUAA4IBAQCF8zjNU0ATgwIZmEwHfurVspMFhUVMn1iY
iLE1cNIDkNHfMiUeAhaZAlpuJHij+lwVJSwitPdiLVRJOIAUA4m59pD/xwSQtW7I
btCPfKxi275v/B4ac3kZCJls4jUV6jX91hDBr/bmjrYmcJ9XJJ7zep5RTKmhu40A
gcqiNPr9R8Wk0LaTAowIGElpNRThRwAUjGrg6Bsodwtaeif6QO5oM3oC/I8sJ1XL
nzJSzMzI9NJbFaNi6isQNsqfa+84+6PrHrNOA+Rq5srV5/ahfXfwmZL2zP1Ccci/
EaC/A01FS/etraTUQtbMLnbpwVi/f0DDTqowKpdvByjOuGXcjkzm
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:39 2025 by rpki-client