Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/f5DYymL8L0FgOoFZZezVYFeh5Jg.roa
File: f5DYymL8L0FgOoFZZezVYFeh5Jg.roa (raw, json)
Hash identifier: 7uwt9itnco/csPtpi/DQC4t0QetXfLjimKtZXfisb00=
Subject key identifier: 7F:90:D8:CA:62:FC:2F:41:60:3A:81:59:65:EC:D5:60:57:A1:E4:98
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 0194BC8FC7B0022564D3DEBE0321C8C4E49F
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/f5DYymL8L0FgOoFZZezVYFeh5Jg.roa
Signing time: Fri 31 Jan 2025 13:32:06 +0000
ROA not before: Fri 31 Jan 2025 13:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 2.96.0.0/13 maxlen: 24
62.3.192.0/18 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/13 maxlen: 24
81.1.64.0/18 maxlen: 24
81.6.192.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.170.0.0/17 maxlen: 24
81.178.0.0/15 maxlen: 24
82.133.0.0/17 maxlen: 24
83.67.0.0/16 maxlen: 24
84.43.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
89.168.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
91.146.112.0/21 maxlen: 24
92.14.0.0/15 maxlen: 24
92.16.0.0/12 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
185.173.116.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.112.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
212.1.128.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
213.208.64.0/18 maxlen: 24
217.8.0.0/19 maxlen: 24
217.68.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:8f:c7:b0:02:25:64:d3:de:be:03:21:c8:c4:e4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 31 13:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f90d8ca62fc2f41603a815965ecd56057a1e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:78:bd:be:6b:fe:9b:5d:a0:05:a0:a2:30:
e4:50:e4:79:f3:fe:2e:23:0d:87:32:d4:e9:29:4f:
6c:2a:92:38:d5:0b:7b:55:a2:91:56:dc:2d:c8:81:
d4:39:15:42:b1:41:bd:d1:3d:8f:c7:8d:60:79:70:
35:ad:b0:36:11:8a:e1:36:25:cf:5f:0e:40:0c:62:
f9:11:20:1c:c5:db:3f:ed:96:37:ba:2d:9d:2a:6b:
aa:4c:fd:7f:5e:fc:94:54:e1:f1:8d:58:19:15:66:
42:59:93:8d:a3:8d:44:a2:73:68:4b:3e:ef:74:b8:
c7:ca:60:41:ca:a8:85:57:b2:5c:89:7e:5f:c6:15:
44:b6:93:5e:37:34:43:d8:21:2a:c4:45:56:46:33:
c4:37:2b:88:76:9c:e2:fc:05:dc:f2:b4:d4:48:a8:
91:c6:ce:da:2e:66:34:25:ba:fd:29:2a:be:65:1f:
dc:0f:46:f2:e4:93:7b:e9:88:54:1b:11:eb:d1:3a:
62:0c:d0:78:d5:65:be:98:59:5f:e7:d4:ba:cb:c0:
cc:16:ec:a1:4c:47:75:a2:75:56:98:65:2e:ff:5b:
4b:8f:a7:e1:d4:a1:c5:2a:db:98:6f:70:c6:ef:04:
2a:f2:c6:13:9e:3d:a1:07:bb:c4:a4:de:58:d4:7b:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:D8:CA:62:FC:2F:41:60:3A:81:59:65:EC:D5:60:57:A1:E4:98
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/f5DYymL8L0FgOoFZZezVYFeh5Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.77.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
91.146.112.0/21
92.14.0.0-92.31.255.255
145.255.240.0/21
185.24.12.0/22
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:a6:42:2f:49:d9:0b:7b:1e:34:0f:c4:53:d8:00:89:d4:71:
de:20:0c:63:82:f2:29:7a:0b:70:ea:16:1e:c6:34:3d:f6:b7:
7c:0e:a0:61:8c:fa:82:75:56:84:a0:36:c3:96:91:eb:2d:2f:
13:45:87:f4:51:9f:82:6a:2c:d8:af:0c:4f:b9:e5:7c:62:b5:
29:d1:3d:15:c1:81:e2:f9:67:29:b2:8a:1f:74:b4:fd:1c:5b:
cb:22:fa:97:e3:a0:29:8f:52:03:23:7c:3b:18:a4:8f:2c:13:
ec:f7:c1:f7:be:06:cb:21:4f:ac:dd:3d:dc:af:b7:58:11:a2:
77:34:75:4c:26:87:47:cd:8c:62:6b:e8:75:7a:d1:c0:e7:28:
a1:e6:ee:a0:08:3f:eb:32:0d:bc:84:5e:8e:24:89:fa:51:24:
de:66:74:4c:2c:3e:bc:bb:ab:73:2d:45:fb:54:68:ce:67:61:
b5:78:bb:77:dc:79:70:2b:6f:89:40:05:b4:4b:98:7a:43:ce:
f8:01:bf:ee:f3:01:0b:a2:a9:04:55:56:75:f9:61:45:1d:99:
93:4c:8a:0f:94:43:13:bc:97:5a:f5:b5:4b:62:50:3b:26:7f:
1c:75:79:ea:c4:b9:99:d8:72:df:91:a0:7f:4e:c1:05:b5:3b:
b1:93:09:54
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgISAZS8j8ewAiVk096+AyHIxOSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjUwMTMxMTMzMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjkwZDhjYTYyZmMyZjQxNjAzYTgxNTk2NWVjZDU2MDU3YTFlNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+J4vb5r/ptdoAWgojDkUOR58/4u
Iw2HMtTpKU9sKpI41Qt7VaKRVtwtyIHUORVCsUG90T2Px41geXA1rbA2EYrhNiXP
Xw5ADGL5ESAcxds/7ZY3ui2dKmuqTP1/XvyUVOHxjVgZFWZCWZONo41EonNoSz7v
dLjHymBByqiFV7JciX5fxhVEtpNeNzRD2CEqxEVWRjPENyuIdpzi/AXc8rTUSKiR
xs7aLmY0Jbr9KSq+ZR/cD0by5JN76YhUGxHr0TpiDNB41WW+mFlf59S6y8DMFuyh
TEd1onVWmGUu/1tLj6fh1KHFKtuYb3DG7wQq8sYTnj2hB7vEpN5Y1HsrjwIDAQAB
o4IDDjCCAwowHQYDVR0OBBYEFH+Q2Mpi/C9BYDqBWWXs1WBXoeSYMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvZjVEWXltTDhMMEZnT29GWlplelZZRmVoNUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIgYIKwYBBQUHAQcBAf8EggERMIIBDTCCAQkEAgABMIIB
AQMDAwJgAwQGPgPAAwQHPhiAAwQFPvGgAwMDTpAwCgMDAE9NAwMET0ADAwNQKAME
BlEBQAMEBlEGwAMDAFFWAwQHUaoAAwMBUbIDBAdShQADAwBTQwMEB1QrAAMEB1fy
gAMEB1mogAMDAlnwAwQDW5JwMAoDAwFcDgMDBVwAAwQDkf/wAwQCuRgMAwQCuXDU
MAwDBAK5rXQDBAK5rXgDBAK5rzADBAK5r5ADBADB2mMDBAXCaiADBAXC9+ADBAbD
cAADBAfDiQADBAbDlQADBAXUAYADBAXUQ2ADBAXUSmADAwDUiwMEBtSfgAMDANVO
AwQG1dBAAwQF2QgAAwQE2USAMA0GCSqGSIb3DQEBCwUAA4IBAQArpkIvSdkLex40
D8RT2ACJ1HHeIAxjgvIpegtw6hYexjQ99rd8DqBhjPqCdVaEoDbDlpHrLS8TRYf0
UZ+CaizYrwxPueV8YrUp0T0VwYHi+WcpsoofdLT9HFvLIvqX46Apj1IDI3w7GKSP
LBPs98H3vgbLIU+s3T3cr7dYEaJ3NHVMJodHzYxia+h1etHA5yih5u6gCD/rMg28
hF6OJIn6USTeZnRMLD68u6tzLUX7VGjOZ2G1eLt33HlwK2+JQAW0S5h6Q874Ab/u
8wELoqkEVVZ1+WFFHZmTTIoPlEMTvJda9bVLYlA7Jn8cdXnqxLmZ2HLfkaB/TsEF
tTuxkwlU
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:20:00 2025 by rpki-client