Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/FqbcMzBYWZNmGqQ08xZqZVtC3Hk.roa
File: FqbcMzBYWZNmGqQ08xZqZVtC3Hk.roa (raw, json)
Hash identifier: BEDFxwczGmGSkgoi5ZLuwXylyr1LAwQ2Wvt3tn1TiBI=
Subject key identifier: 16:A6:DC:33:30:58:59:93:66:1A:A4:34:F3:16:6A:65:5B:42:DC:79
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 018CC6B78D70FB0E1931F6C9433CC4B05269
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/FqbcMzBYWZNmGqQ08xZqZVtC3Hk.roa
Signing time: Mon 01 Jan 2024 20:29:27 +0000
ROA not before: Mon 01 Jan 2024 20:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.100.232.0/22 maxlen: 22
193.200.164.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.160.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
2.59.168.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
62.112.8.0/22 maxlen: 24
185.165.240.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
89.38.96.0/24 maxlen: 24
185.132.176.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.0.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.88.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
217.23.0.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
185.184.192.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
178.218.196.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
93.190.136.0/21 maxlen: 22
93.190.140.0/22 maxlen: 22
185.2.80.0/22 maxlen: 22
185.177.124.0/22 maxlen: 22
185.191.0.0/22 maxlen: 22
212.8.240.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.242.0/24 maxlen: 24
212.8.248.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
212.8.252.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.32.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.21.60.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.82.64.0/22 maxlen: 22
194.88.105.0/24 maxlen: 24
194.88.104.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.80.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.180.222.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.220.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
185.180.223.0/24 maxlen: 24
2.59.168.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
62.112.8.0/24 maxlen: 24
185.165.240.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
185.132.176.0/22 maxlen: 22
89.38.96.0/22 maxlen: 22
178.132.0.0/21 maxlen: 21
185.172.88.0/22 maxlen: 22
217.23.0.0/20 maxlen: 20
185.184.192.0/22 maxlen: 22
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.196.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
91.232.105.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.136.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.140.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
185.2.80.0/24 maxlen: 24
185.177.124.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.191.0.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.248.0/23 maxlen: 23
212.8.252.0/23 maxlen: 23
45.14.134.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.182.192.0/22 maxlen: 22
185.21.60.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.82.64.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
109.236.80.0/20 maxlen: 20
2a00:7c80::/29 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8d:70:fb:0e:19:31:f6:c9:43:3c:c4:b0:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16a6dc3330585993661aa434f3166a655b42dc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:b8:6f:ca:55:1a:77:8c:ea:ab:ad:e2:b7:
b9:5b:bf:c2:61:75:2a:97:60:17:54:f2:a4:42:93:
b9:e5:ff:38:13:cc:71:cc:3d:d4:d4:c8:61:34:62:
e3:5b:ea:f3:fc:2d:16:9e:1c:28:5e:be:a9:1a:33:
03:46:f2:d6:1c:be:c9:75:77:ec:69:d4:3c:9c:64:
b3:87:c4:39:ba:3d:37:32:68:0b:01:89:75:f7:97:
db:84:5a:1d:88:cf:84:f2:81:e5:3f:85:d7:c1:79:
bc:7b:d8:6b:bf:20:56:cf:df:ef:79:fb:5c:15:05:
71:99:18:d9:c4:7d:fa:3f:18:30:3c:a4:0e:61:4f:
17:db:cf:21:39:67:38:e4:42:bd:4c:ec:40:3f:6a:
5b:81:fc:a3:55:c8:0a:52:61:c7:6a:3f:e2:63:d7:
58:26:ed:a2:11:7c:aa:14:ee:f5:13:91:14:40:dc:
a7:61:a5:09:20:c4:08:2c:b3:a0:b1:40:c5:11:0d:
7e:ed:45:4a:62:0f:2f:a7:dc:37:60:7d:48:78:36:
0d:8c:5a:26:09:d5:41:9c:cb:22:5d:c3:2b:82:a8:
16:f8:40:cc:92:a9:56:56:98:67:fd:c2:27:78:1a:
bb:68:52:00:d1:d8:db:3b:19:1a:ef:9b:1b:0f:20:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:DC:33:30:58:59:93:66:1A:A4:34:F3:16:6A:65:5B:42:DC:79
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/FqbcMzBYWZNmGqQ08xZqZVtC3Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
217.23.0.0/20
IPv6:
2a00:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
85:eb:82:16:38:4e:01:70:9e:86:56:29:37:12:91:d7:de:f3:
1c:20:78:b8:4a:67:fe:73:e5:aa:2a:ac:55:33:61:d9:da:78:
db:60:04:f3:5d:28:ff:d8:7a:2e:a4:b0:71:02:da:6a:67:3a:
b0:84:4a:08:1c:b6:6c:00:94:30:84:fa:1f:fe:80:70:5d:3d:
b7:37:5c:bc:17:d9:e2:3b:43:74:9c:16:2e:15:39:98:cf:0f:
16:f9:3f:02:b0:bd:f0:00:4b:15:94:cf:24:67:9f:29:9a:fc:
94:cc:b4:bd:7b:ce:5c:cd:69:0a:44:49:e7:5c:a5:ad:9d:0c:
a3:f5:0f:47:24:b3:49:a6:a4:dc:eb:18:a4:21:f2:ca:70:98:
d9:b9:3e:5c:8e:4e:1b:8c:45:17:77:94:40:75:80:3c:08:d1:
af:f7:3b:bf:5d:80:cc:90:93:68:23:91:70:51:b6:b7:db:81:
17:cd:8a:21:76:8d:42:62:4a:a1:5b:09:b2:d2:bc:d5:c4:4b:
f5:eb:1e:f2:d4:1e:4f:14:0e:40:d9:cd:24:74:4b:19:f2:26:
9f:43:2a:ab:46:b6:ac:21:f1:23:83:73:ec:44:72:97:4a:ab:
b8:af:14:de:9c:b6:ee:7b:cb:78:b8:54:81:3b:9e:92:46:7b:
e5:10:2f:5c
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgISAYzGt41w+w4ZMfbJQzzEsFJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjQwMTAxMjAyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmE2ZGMzMzMwNTg1OTkzNjYxYWE0MzRmMzE2NmE2NTViNDJkYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUe4b8pVGneM6qut4re5W7/CYXUq
l2AXVPKkQpO55f84E8xxzD3U1MhhNGLjW+rz/C0WnhwoXr6pGjMDRvLWHL7JdXfs
adQ8nGSzh8Q5uj03MmgLAYl195fbhFodiM+E8oHlP4XXwXm8e9hrvyBWz9/veftc
FQVxmRjZxH36PxgwPKQOYU8X288hOWc45EK9TOxAP2pbgfyjVcgKUmHHaj/iY9dY
Ju2iEXyqFO71E5EUQNynYaUJIMQILLOgsUDFEQ1+7UVKYg8vp9w3YH1IeDYNjFom
CdVBnMsiXcMrgqgW+EDMkqlWVphn/cIneBq7aFIA0djbOxka75sbDyDNPwIDAQAB
o4IC+DCCAvQwHQYDVR0OBBYEFBam3DMwWFmTZhqkNPMWamVbQtx5MB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvRnFiY016QllXWk5tR3FRMDh4WnFaVnRDM0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgecEAgABMIHgAwQC
AjuoAwQCLQ6EAwQCLVJAAwQCPnAIAwQCUE8EAwQCWSZgAwQCWSdoAwQAW+UXAwQA
W+hpAwQDXb6IAwQEbexQAwQEr25wAwQDsoQAAwQCstrEAwQCuQJQAwQCuRU8AwQC
uWToAwQCuYSEAwQCuYSwAwQCuaXwAwQCuaxYAwQCua2gAwQCubF8AwQCubTcAwQC
ubbAAwQCubcgAwQCubjAAwQCubkwAwQCub8AAwQAwcikAwQCwlhoAwQA1AjwAwQB
1AjyMAwDBAPUCPgDBADUCPoDBAHUCPwDBATZFwAwDQQCAAIwBwMFAyoAfIAwDQYJ
KoZIhvcNAQELBQADggEBAIXrghY4TgFwnoZWKTcSkdfe8xwgeLhKZ/5z5aoqrFUz
YdnaeNtgBPNdKP/Yei6ksHEC2mpnOrCESggctmwAlDCE+h/+gHBdPbc3XLwX2eI7
Q3ScFi4VOZjPDxb5PwKwvfAASxWUzyRnnyma/JTMtL17zlzNaQpESedcpa2dDKP1
D0cks0mmpNzrGKQh8spwmNm5PlyOThuMRRd3lEB1gDwI0a/3O79dgMyQk2gjkXBR
trfbgRfNiiF2jUJiSqFbCbLSvNXES/XrHvLUHk8UDkDZzSR0SxnyJp9DKqtGtqwh
8SODc+xEcpdKq7ivFN6ctu57y3i4VIE7npJGe+UQL1w=
-----END CERTIFICATE-----
Generated at Tue May 7 07:18:15 2024 by rpki-client on console-ams.rpki-client.org