Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nUOPR6SpMwNbQgZbj2csQN4_jAg.roa
File: nUOPR6SpMwNbQgZbj2csQN4_jAg.roa (raw, json)
Hash identifier: yiD/DDDeZdQPBhhEK/dXO9SrNQGZzNALEQWHpy1Moco=
Subject key identifier: 9D:43:8F:47:A4:A9:33:03:5B:42:06:5B:8F:67:2C:40:DE:3F:8C:08
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0196F96700F6805BBECF8B1CA1ECC499F46F
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nUOPR6SpMwNbQgZbj2csQN4_jAg.roa
Signing time: Thu 22 May 2025 19:09:59 +0000
ROA not before: Thu 22 May 2025 19:09:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:67:00:f6:80:5b:be:cf:8b:1c:a1:ec:c4:99:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 22 19:09:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d438f47a4a933035b42065b8f672c40de3f8c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:e6:0a:46:4d:de:6f:fb:58:c9:bb:c1:64:
e6:8e:12:75:72:b3:a8:69:f2:b2:12:2a:ac:2c:6a:
af:34:d9:4b:c5:e1:dd:31:84:f9:4a:c6:6d:94:6a:
dd:b8:ff:a1:ad:e7:3c:6b:ad:51:f2:6e:eb:fd:34:
b6:14:ac:35:49:b5:60:e1:95:45:dc:10:30:d8:a3:
df:03:73:f3:5a:b2:26:cd:c5:b0:4c:ef:e4:3b:21:
f7:99:4f:06:81:e3:21:4b:e8:5a:6c:eb:f6:6d:e3:
ac:60:50:4c:61:13:e8:bd:ed:c4:3b:e4:17:e6:c9:
ac:ef:05:d4:3a:87:32:ca:c6:e6:67:7a:dd:51:df:
66:4f:fd:80:b5:0b:d6:78:61:35:f0:40:a2:f2:f1:
94:91:6c:04:79:ef:58:f2:1d:68:54:ba:32:0b:04:
57:b9:cb:4a:39:ab:f3:cd:89:13:bf:10:f7:66:1b:
07:54:7e:f3:31:81:11:66:e4:b8:c4:fd:e5:88:91:
a5:44:8f:0e:5e:fc:56:59:5e:7b:6c:15:0f:e1:4f:
5e:f3:53:03:1c:8e:1b:3d:c6:ce:6a:30:07:d9:78:
4b:21:14:05:eb:76:9f:bd:25:ee:46:a7:9e:0b:f6:
6e:2a:ca:46:45:76:93:05:3b:bd:1b:af:47:d1:f3:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:8F:47:A4:A9:33:03:5B:42:06:5B:8F:67:2C:40:DE:3F:8C:08
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nUOPR6SpMwNbQgZbj2csQN4_jAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.137.0/24
94.74.156.0/24
94.74.158.0/23
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
94.74.191.0/24
109.203.163.0/24
176.46.136.0/24
176.46.138.0/23
176.46.141.0-176.46.142.255
176.46.144.0/24
176.46.150.0/24
176.46.152.0/24
176.46.155.0/24
Signature Algorithm: sha256WithRSAEncryption
72:96:4d:62:ad:ca:ce:71:4f:76:f4:96:d9:68:52:dd:8f:32:
21:e0:0b:74:44:99:61:50:f3:33:ea:c9:43:30:f8:f3:9a:dd:
bd:95:bf:3f:6f:f8:1a:0b:4c:23:90:03:34:15:d0:ed:10:88:
91:df:48:9d:09:7a:5e:32:54:b8:09:fa:7a:d3:24:64:83:a8:
be:92:40:d2:39:74:78:ea:41:cf:f1:94:59:19:ba:9e:b0:35:
06:dc:a9:cb:aa:68:1b:e1:6e:21:05:65:08:a3:92:56:35:28:
3e:c8:d9:8b:59:fd:87:e6:3c:c0:ca:11:97:c3:ba:27:85:0e:
91:9d:c1:29:9f:80:60:59:a7:7e:79:da:8c:65:51:b7:8c:d0:
92:14:9f:5a:4e:d6:d2:85:8d:33:6b:37:db:5c:30:e8:65:d5:
ec:13:21:da:78:aa:75:f8:bc:5a:08:e9:c5:34:3b:46:e4:66:
81:7a:2d:fe:9a:83:9c:32:d1:57:c6:69:a6:ae:ef:38:3d:30:
6c:c8:1a:2a:73:22:d5:58:fd:d2:51:97:5e:7a:b1:83:94:91:
84:0c:e4:b5:51:db:c5:21:73:86:c8:c6:e8:2d:35:71:98:ff:
7d:a1:26:02:a4:97:03:4d:b8:d9:b8:d7:c1:8b:e6:a9:88:c8:
f3:3d:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:31 2025 by rpki-client