Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/VYOb-2PB3WKsCUYPT2j-nf80wMs.roa
File: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (raw, json)
Hash identifier: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=
Subject key identifier: 55:83:9B:FB:63:C1:DD:62:AC:09:46:0F:4F:68:FE:9D:FF:34:C0:CB
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0194282680E77D2B2AB2C5D4ED9CC2AB6DCF
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/VYOb-2PB3WKsCUYPT2j-nf80wMs.roa
Signing time: Thu 02 Jan 2025 17:53:19 +0000
ROA not before: Thu 02 Jan 2025 17:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42003
IP address blocks: 77.42.128.0/19 maxlen: 19
77.42.160.0/19 maxlen: 19
77.42.192.0/19 maxlen: 19
77.42.224.0/21 maxlen: 21
77.42.232.0/21 maxlen: 21
77.42.240.0/21 maxlen: 21
94.187.0.0/21 maxlen: 21
94.187.0.0/24 maxlen: 24
94.187.1.0/24 maxlen: 24
94.187.2.0/24 maxlen: 24
94.187.3.0/24 maxlen: 24
94.187.4.0/24 maxlen: 24
94.187.6.0/24 maxlen: 24
94.187.7.0/24 maxlen: 24
94.187.8.0/24 maxlen: 24
94.187.9.0/24 maxlen: 24
94.187.10.0/24 maxlen: 24
94.187.11.0/24 maxlen: 24
94.187.16.0/21 maxlen: 21
94.187.24.0/21 maxlen: 21
94.187.32.0/21 maxlen: 21
94.187.40.0/21 maxlen: 21
94.187.48.0/21 maxlen: 21
94.187.56.0/21 maxlen: 21
94.187.64.0/21 maxlen: 21
94.187.72.0/21 maxlen: 21
94.187.80.0/21 maxlen: 21
94.187.88.0/21 maxlen: 21
94.187.95.0/24 maxlen: 24
94.187.96.0/21 maxlen: 21
94.187.104.0/21 maxlen: 21
94.187.112.0/21 maxlen: 21
94.187.120.0/21 maxlen: 21
178.135.0.0/24 maxlen: 24
178.135.1.0/24 maxlen: 24
178.135.2.0/24 maxlen: 24
178.135.3.0/24 maxlen: 24
178.135.6.0/24 maxlen: 24
178.135.7.0/24 maxlen: 24
178.135.8.0/21 maxlen: 21
178.135.8.0/24 maxlen: 24
178.135.9.0/24 maxlen: 24
178.135.10.0/24 maxlen: 24
178.135.11.0/24 maxlen: 24
178.135.16.0/21 maxlen: 21
178.135.24.0/21 maxlen: 21
178.135.32.0/21 maxlen: 21
178.135.40.0/21 maxlen: 21
178.135.48.0/21 maxlen: 21
178.135.56.0/21 maxlen: 21
178.135.64.0/21 maxlen: 21
178.135.72.0/21 maxlen: 21
178.135.80.0/21 maxlen: 21
178.135.88.0/21 maxlen: 21
178.135.95.0/24 maxlen: 24
178.135.96.0/21 maxlen: 21
178.135.104.0/21 maxlen: 21
178.135.112.0/21 maxlen: 21
178.135.120.0/21 maxlen: 21
178.135.128.0/21 maxlen: 21
178.135.136.0/21 maxlen: 21
178.135.144.0/21 maxlen: 21
178.135.152.0/21 maxlen: 21
178.135.160.0/21 maxlen: 21
178.135.168.0/21 maxlen: 21
178.135.176.0/21 maxlen: 21
178.135.184.0/21 maxlen: 21
178.135.192.0/21 maxlen: 21
178.135.200.0/21 maxlen: 21
178.135.208.0/21 maxlen: 21
178.135.216.0/21 maxlen: 21
178.135.224.0/21 maxlen: 21
178.135.232.0/21 maxlen: 21
178.135.240.0/21 maxlen: 21
178.135.248.0/21 maxlen: 21
2a00:6920:d000::/40 maxlen: 40
2a00:6920:e000::/40 maxlen: 40
2a00:6920:e100::/40 maxlen: 40
2a00:6920:e100::/42 maxlen: 42
2a00:6920:e140::/42 maxlen: 42
2a00:6920:e180::/42 maxlen: 42
2a00:6920:e1c0::/42 maxlen: 42
2a00:6920:f000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:80:e7:7d:2b:2a:b2:c5:d4:ed:9c:c2:ab:6d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jan 2 17:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55839bfb63c1dd62ac09460f4f68fe9dff34c0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:dc:60:72:b5:f1:7b:6f:3e:fb:eb:92:1f:
cf:7e:ac:95:fc:49:ad:d2:91:c5:fb:26:47:2a:46:
f9:2d:c2:a4:ca:b2:e4:26:95:40:b8:0c:df:82:64:
fc:05:94:d4:7e:a7:5e:fd:6a:91:3c:69:1b:7e:d2:
18:7d:6a:16:dd:e1:3c:79:84:f8:45:6e:7c:7d:a1:
12:8a:f1:76:4f:4a:cc:b8:3b:84:06:2c:e2:ca:3e:
cd:33:8a:aa:9c:e3:71:49:4d:b2:70:1b:29:5d:3a:
be:e7:d6:c8:05:9e:08:fd:65:24:51:ec:88:42:33:
36:98:03:b1:3e:82:4d:08:3f:c7:8c:b8:65:b6:ac:
a8:14:8e:0f:14:5b:02:b2:67:d8:c7:6f:15:03:81:
96:f4:0d:43:0f:7d:58:f3:7a:fc:6e:08:64:52:84:
7a:bb:fc:96:07:45:26:6b:24:fe:5e:3e:73:c1:02:
b3:d6:97:ea:d9:fd:4e:fa:3d:9b:1d:68:64:d9:6f:
aa:c5:12:be:22:bd:ed:9d:a1:4c:a8:11:8e:8f:ef:
6d:4a:6a:48:19:8f:fb:f8:d6:e7:ed:05:53:41:6b:
eb:32:4a:7d:ef:52:51:fa:94:b9:5c:c8:d7:2d:6c:
02:9c:d3:e6:02:ea:eb:96:2c:65:e1:d0:76:ef:8e:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:9B:FB:63:C1:DD:62:AC:09:46:0F:4F:68:FE:9D:FF:34:C0:CB
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/VYOb-2PB3WKsCUYPT2j-nf80wMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.42.128.0-77.42.247.255
94.187.0.0-94.187.11.255
94.187.16.0-94.187.127.255
178.135.0.0/22
178.135.6.0-178.135.255.255
IPv6:
2a00:6920:d000::/40
2a00:6920:e000::/39
2a00:6920:f000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:d4:b6:b9:33:c3:45:aa:d9:37:a8:9e:f1:88:3e:c4:a8:54:
d3:ed:fd:12:9a:0e:5d:9c:66:99:fc:38:4e:ae:d1:7d:7c:96:
ef:82:22:ef:76:d8:d5:2e:da:52:1e:3c:15:d2:4a:a5:00:03:
53:2e:b8:7c:7b:07:b2:6d:ba:6c:90:d9:45:bd:ab:29:ad:ba:
a7:14:33:b3:5c:8a:83:3a:b1:a7:df:99:91:d3:c9:fb:7d:a9:
8e:48:73:e1:0f:c7:90:a0:8b:2a:dc:ff:dd:9c:bc:a5:e7:ef:
ab:4d:bc:c4:46:b8:c2:a8:08:da:2a:5c:5c:cb:0e:ac:fa:1d:
f3:3e:2f:8b:8a:a2:02:a0:14:e0:31:b5:71:32:e1:75:c7:27:
f3:89:8a:4e:b6:8f:11:a5:24:15:a2:22:e4:25:63:1c:fc:b1:
68:65:4b:6e:a2:ef:ea:48:13:42:36:50:a8:94:4b:14:85:2f:
d9:7d:ce:b7:85:1c:19:44:4b:29:5e:cc:3a:05:d9:7e:1d:dd:
e9:62:4c:88:ac:13:c8:82:59:c0:2e:d4:78:74:c3:92:34:47:
ed:8a:18:eb:50:f1:dd:7c:a1:e4:b2:9a:de:85:0d:1f:81:20:
6d:2b:ac:df:f9:e0:00:37:ee:a9:a9:e2:df:6f:b6:7e:24:83:
38:54:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:43:05 2025 by rpki-client