Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/K7oDd9Ywq2OSyslqCvFDOyilJIk.roa
File: K7oDd9Ywq2OSyslqCvFDOyilJIk.roa (raw, json)
Hash identifier: FZj9/+dMqJU0/HGmH2JzQIubfuT6AVuK+OYBQ+RKddg=
Subject key identifier: 2B:BA:03:77:D6:30:AB:63:92:CA:C9:6A:0A:F1:43:3B:28:A5:24:89
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01962204F4329FB3BAB667CBE3BCC0EAC4A0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/K7oDd9Ywq2OSyslqCvFDOyilJIk.roa
Signing time: Thu 10 Apr 2025 23:24:32 +0000
ROA not before: Thu 10 Apr 2025 23:24:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215724
IP address blocks: 14.102.231.0/24 maxlen: 24
77.111.97.0/24 maxlen: 24
77.111.102.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
89.106.17.0/24 maxlen: 24
89.106.19.0/24 maxlen: 24
89.106.20.0/24 maxlen: 24
89.106.24.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:04:f4:32:9f:b3:ba:b6:67:cb:e3:bc:c0:ea:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 23:24:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bba0377d630ab6392cac96a0af1433b28a52489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:f8:3f:5b:48:9e:89:3d:9d:db:d7:e8:92:
39:55:75:74:44:d1:21:23:00:fb:7f:8f:61:9a:11:
9d:72:ae:f2:98:c7:32:ca:4b:81:ba:70:f0:5d:5d:
38:fa:80:ee:f8:d2:83:c4:ea:e1:d9:37:4f:40:ef:
7f:04:d7:8c:19:c8:9a:eb:6e:32:8e:05:c9:58:47:
9c:27:ce:b2:5c:44:ea:ad:ce:a5:9d:17:9c:64:53:
de:be:8f:50:1a:8b:15:df:42:6a:6e:ca:54:3d:f0:
f2:d6:6d:28:e6:3b:e2:bb:5f:47:f1:20:e9:ca:59:
26:63:7c:01:0a:61:25:8a:2f:8e:5f:17:76:20:61:
ab:c5:90:0b:2e:ca:e3:70:db:f4:19:9c:92:24:1b:
dc:e2:5c:a6:82:d1:16:33:f2:22:c3:69:c6:82:ba:
38:d1:ca:f8:dd:fd:14:b8:8d:2c:26:26:63:27:72:
c4:03:93:8e:0a:90:ed:c8:30:13:80:2d:e3:38:c6:
00:52:84:5a:b2:36:35:b3:84:cf:7d:8b:0e:c3:d3:
d2:9f:a9:79:89:13:ff:88:87:80:6d:12:33:3d:c8:
f7:5c:bf:95:db:8c:05:6b:00:35:4a:f7:0d:f3:f1:
eb:30:99:f9:6a:c8:d1:00:20:e9:39:39:8f:05:f2:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:03:77:D6:30:AB:63:92:CA:C9:6A:0A:F1:43:3B:28:A5:24:89
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/K7oDd9Ywq2OSyslqCvFDOyilJIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
77.111.97.0/24
77.111.102.0/24
85.208.10.0/24
89.106.17.0/24
89.106.19.0-89.106.20.255
89.106.24.0/24
194.36.32.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b4:b9:0b:e7:ea:f5:60:5f:67:65:ff:ff:32:d1:66:a6:46:
2e:0d:fb:70:e7:6f:2e:cb:52:af:72:c3:d3:7a:5c:7c:89:8b:
7f:40:80:c0:ed:d6:53:71:60:6b:20:b6:89:89:15:70:67:20:
66:fc:78:a2:ae:f6:e5:89:a6:ac:8d:fb:0e:23:f2:22:5f:fd:
f3:66:f1:9d:95:0d:f1:a3:09:5b:b5:ed:1a:84:bd:ee:29:5a:
2d:e4:66:e8:21:ba:ee:ad:e6:28:fd:87:2b:6f:e9:8d:ff:ae:
1f:3a:09:30:ec:62:ae:c8:5e:fb:d2:3b:77:bd:86:5b:b7:cf:
95:50:ef:08:a0:0d:68:38:be:fe:94:9b:3f:3b:74:08:cf:97:
24:af:ee:f3:62:29:d3:ff:a9:c0:81:04:d6:91:dc:81:3d:2f:
ed:e6:1e:d3:44:70:bd:7c:4a:3c:42:6a:80:4f:4f:d0:df:29:
1b:03:cb:80:27:c1:99:46:04:b1:2d:92:6f:cf:99:c3:81:a0:
7b:74:63:e2:16:d5:bf:b1:19:be:1c:55:38:86:0b:98:18:2f:
0b:b7:02:67:bc:20:31:9a:10:1a:88:2a:d3:e3:cf:b7:e9:f8:
d5:ac:09:54:07:cf:88:7e:97:90:81:7f:be:b5:ba:47:49:95:
89:59:34:11
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZYiBPQyn7O6tmfL47zA6sSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNDEwMjMyNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmJhMDM3N2Q2MzBhYjYzOTJjYWM5NmEwYWYxNDMzYjI4YTUyNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UP4P1tInok9ndvX6JI5VXV0RNEh
IwD7f49hmhGdcq7ymMcyykuBunDwXV04+oDu+NKDxOrh2TdPQO9/BNeMGcia624y
jgXJWEecJ86yXETqrc6lnRecZFPevo9QGosV30JqbspUPfDy1m0o5jviu19H8SDp
ylkmY3wBCmElii+OXxd2IGGrxZALLsrjcNv0GZySJBvc4lymgtEWM/Iiw2nGgro4
0cr43f0UuI0sJiZjJ3LEA5OOCpDtyDATgC3jOMYAUoRasjY1s4TPfYsOw9PSn6l5
iRP/iIeAbRIzPcj3XL+V24wFawA1SvcN8/HrMJn5asjRACDpOTmPBfIjUQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFCu6A3fWMKtjksrJagrxQzsopSSJMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvSzdvRGQ5WXdxMk9TeXNscUN2RkRPeWlsSklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQADmbnAwQA
TW9hAwQATW9mAwQAVdAKAwQAWWoRMAwDBABZahMDBABZahQDBABZahgDBADCJCAw
DQYJKoZIhvcNAQELBQADggEBACm0uQvn6vVgX2dl//8y0WamRi4N+3Dnby7LUq9y
w9N6XHyJi39AgMDt1lNxYGsgtomJFXBnIGb8eKKu9uWJpqyN+w4j8iJf/fNm8Z2V
DfGjCVu17RqEve4pWi3kZughuu6t5ij9hytv6Y3/rh86CTDsYq7IXvvSO3e9hlu3
z5VQ7wigDWg4vv6Umz87dAjPlySv7vNiKdP/qcCBBNaR3IE9L+3mHtNEcL18SjxC
aoBPT9DfKRsDy4AnwZlGBLEtkm/PmcOBoHt0Y+IW1b+xGb4cVTiGC5gYLwu3Ame8
IDGaEBqIKtPjz7fp+NWsCVQHz4h+l5CBf761ukdJlYlZNBE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:00:08 2025 by rpki-client