Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/ULw_e6rY6wER2z1dGFmp31jEgd0.roa
File: ULw_e6rY6wER2z1dGFmp31jEgd0.roa (raw, json)
Hash identifier: MY5YBBTJCozx9Da4ab7Dr9d2mlZWfjLXtBL3DR2CzxU=
Subject key identifier: 50:BC:3F:7B:AA:D8:EB:01:11:DB:3D:5D:18:59:A9:DF:58:C4:81:DD
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 0195EC23E3707CCF3C4F92D9E35CAF835911
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/ULw_e6rY6wER2z1dGFmp31jEgd0.roa
Signing time: Mon 31 Mar 2025 12:18:49 +0000
ROA not before: Mon 31 Mar 2025 12:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207044
IP address blocks: 87.120.240.0/22 maxlen: 24
87.120.248.0/22 maxlen: 24
87.121.252.0/22 maxlen: 24
88.151.24.0/21 maxlen: 24
89.184.36.0/22 maxlen: 24
89.184.60.0/22 maxlen: 24
91.92.28.0/22 maxlen: 24
185.167.196.0/22 maxlen: 24
213.133.64.0/21 maxlen: 24
2a0b:ae00::/29 maxlen: 29
2a0b:ae00:1000::/38 maxlen: 38
2a0b:ae00:1400::/38 maxlen: 38
2a0b:ae00:1800::/38 maxlen: 38
2a0b:ae00:2000::/38 maxlen: 38
2a0b:ae00:2400::/38 maxlen: 38
2a0b:ae00:2800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:23:e3:70:7c:cf:3c:4f:92:d9:e3:5c:af:83:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Mar 31 12:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50bc3f7baad8eb0111db3d5d1859a9df58c481dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:92:e0:36:25:03:60:0d:13:59:f0:fd:76:
09:7c:ef:16:23:d9:e7:5d:34:ea:43:b1:93:b5:23:
9c:c4:08:ae:50:c5:fe:e2:6d:a2:29:91:7b:9b:12:
3d:c5:39:6e:9d:f3:28:8d:cb:5b:c2:b3:57:56:8f:
b4:6b:8c:0c:a2:1e:90:0b:38:85:c7:cf:47:a3:26:
ce:3c:59:95:fc:34:60:ca:aa:5e:7d:46:e6:4c:a8:
2e:e8:37:97:6e:2c:ac:4f:d3:1f:3d:3e:c6:f6:3e:
c1:7f:65:05:f7:da:d4:3d:f5:8c:4b:8d:f1:d6:97:
7d:d7:dd:a9:e4:d3:98:7c:18:9f:5c:16:15:87:70:
93:1d:46:37:2c:45:42:3d:98:0d:5f:e4:f0:51:cc:
af:90:d4:0e:d1:b2:32:89:f0:16:c4:4e:2c:5e:4a:
d2:4e:74:9b:7b:08:19:9d:88:16:b9:6c:d3:cd:52:
96:e2:d8:f4:99:8d:9d:e5:de:7b:a3:47:b3:4b:d7:
83:15:2c:66:ee:4f:fb:b7:f0:d2:3d:21:4c:a9:d3:
a9:c7:37:ad:69:66:77:2e:18:00:b4:0b:b8:3f:76:
80:6a:e0:c9:c3:3b:d8:dd:ea:d4:73:a9:28:ab:27:
d3:dc:35:ca:66:c5:bd:f0:88:ba:04:31:ea:11:a4:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:3F:7B:AA:D8:EB:01:11:DB:3D:5D:18:59:A9:DF:58:C4:81:DD
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/ULw_e6rY6wER2z1dGFmp31jEgd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.240.0/22
87.120.248.0/22
87.121.252.0/22
88.151.24.0/21
89.184.36.0/22
89.184.60.0/22
91.92.28.0/22
185.167.196.0/22
213.133.64.0/21
IPv6:
2a0b:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
9c:14:ce:9a:e0:07:42:38:07:93:c0:0a:e4:50:d9:96:2d:3f:
f9:7d:2f:ed:98:32:89:f4:96:a5:19:3d:d1:2c:7f:aa:a5:b6:
d9:c9:e7:8a:f2:00:66:56:70:46:57:d6:75:3b:77:9c:07:b2:
f0:90:7f:df:04:02:f7:82:c2:0e:e3:e7:24:ea:4a:d7:e7:d5:
6a:8c:ef:c7:28:05:ea:f5:d5:a0:79:db:e4:e3:c5:2c:d4:1e:
c3:40:c8:6c:ee:9e:01:60:c6:b1:e3:5e:4c:6f:39:54:cc:a2:
41:b5:f8:49:7f:07:d8:2d:77:89:c1:00:35:12:73:ef:e1:4c:
35:8a:d3:59:78:f0:43:0e:dd:a2:b8:d7:ac:e3:e0:8d:78:9d:
76:35:40:2b:ac:88:53:21:c6:90:81:d0:86:8b:8e:d5:d6:42:
68:21:b7:dd:75:17:a0:37:80:c9:cb:b2:38:86:df:d9:41:22:
ea:99:d5:d9:74:6f:19:1c:50:17:c9:ab:93:d3:c0:12:64:d3:
9b:54:7f:9b:2e:6b:a8:2a:06:27:0c:03:fe:64:20:17:8c:89:
6c:fd:80:8d:27:26:9b:cb:c4:9c:e5:c3:b1:4d:ab:eb:bb:18:
4f:0b:f3:41:85:46:b6:ca:1f:cf:7a:f2:66:4e:f1:1b:73:cf:
12:86:e5:d2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZXsI+NwfM88T5LZ41yvg1kRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDkzM2U4MjQ3NDY1MGM2YWEzZTljYmYwNTc0ZDI3Mjg2
NTkyZTcwHhcNMjUwMzMxMTIxODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGJjM2Y3YmFhZDhlYjAxMTFkYjNkNWQxODU5YTlkZjU4YzQ4MWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIeS4DYlA2ANE1nw/XYJfO8WI9nn
XTTqQ7GTtSOcxAiuUMX+4m2iKZF7mxI9xTlunfMojctbwrNXVo+0a4wMoh6QCziF
x89HoybOPFmV/DRgyqpefUbmTKgu6DeXbiysT9MfPT7G9j7Bf2UF99rUPfWMS43x
1pd9192p5NOYfBifXBYVh3CTHUY3LEVCPZgNX+TwUcyvkNQO0bIyifAWxE4sXkrS
TnSbewgZnYgWuWzTzVKW4tj0mY2d5d57o0ezS9eDFSxm7k/7t/DSPSFMqdOpxzet
aWZ3LhgAtAu4P3aAauDJwzvY3erUc6koqyfT3DXKZsW98Ii6BDHqEaQW3wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFFC8P3uq2OsBEds9XRhZqd9YxIHdMB8GA1UdIwQY
MBaAFEDZM+gkdGUMaqPpy/BXTScoZZLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3Njct
ZTY4MWViYmE0YTRhLzEvVUx3X2U2clk2d0VSMnoxZEdGbXAzMWpFZ2QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3NjctZTY4MWViYmE0YTRh
LzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQCV3jwAwQC
V3j4AwQCV3n8AwQDWJcYAwQCWbgkAwQCWbg8AwQCW1wcAwQCuafEAwQD1YVAMA0E
AgACMAcDBQMqC64AMA0GCSqGSIb3DQEBCwUAA4IBAQCcFM6a4AdCOAeTwArkUNmW
LT/5fS/tmDKJ9JalGT3RLH+qpbbZyeeK8gBmVnBGV9Z1O3ecB7LwkH/fBAL3gsIO
4+ck6krX59VqjO/HKAXq9dWgedvk48Us1B7DQMhs7p4BYMax415MbzlUzKJBtfhJ
fwfYLXeJwQA1EnPv4Uw1itNZePBDDt2iuNes4+CNeJ12NUArrIhTIcaQgdCGi47V
1kJoIbfddRegN4DJy7I4ht/ZQSLqmdXZdG8ZHFAXyauT08ASZNObVH+bLmuoKgYn
DAP+ZCAXjIls/YCNJyaby8Sc5cOxTavruxhPC/NBhUa2yh/PevJmTvEbc88ShuXS
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:32:56 2025 by rpki-client