Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/1eEYfQqz3DRWiTZL33vn-VH-Mmw.roa
File: 1eEYfQqz3DRWiTZL33vn-VH-Mmw.roa (raw, json)
Hash identifier: WesTkDUFOhqZ3RkoLMVBxI5gwPRamJfK4HFUjJ27oTg=
Subject key identifier: D5:E1:18:7D:0A:B3:DC:34:56:89:36:4B:DF:7B:E7:F9:51:FE:32:6C
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 018CC801B9493027FE729B68EFC8A38630D3
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/1eEYfQqz3DRWiTZL33vn-VH-Mmw.roa
Signing time: Tue 02 Jan 2024 02:30:05 +0000
ROA not before: Tue 02 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210756
IP address blocks: 5.188.3.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
95.181.178.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.176.0/24 maxlen: 24
95.181.177.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.8.42.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:1020::/44 maxlen: 44
2a11:27c0:20::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b9:49:30:27:fe:72:9b:68:ef:c8:a3:86:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jan 2 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5e1187d0ab3dc345689364bdf7be7f951fe326c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:f0:8a:c5:c7:35:13:fe:ac:ae:45:66:d3:
2d:42:b4:2c:c8:ea:81:4f:f7:0c:cf:92:cf:5d:6c:
da:bd:b3:00:71:0b:de:04:7e:22:b7:10:63:b7:eb:
a4:56:00:77:47:cf:e3:f7:d2:09:98:37:46:b5:0b:
5a:d9:61:b2:40:9c:27:f8:2d:84:7e:8a:57:6d:f4:
0d:ce:05:c3:a6:7a:bf:5e:95:a8:fb:c9:94:ee:44:
95:b1:a7:0e:c0:8e:3f:96:4c:81:84:2c:74:e1:64:
20:8d:16:5a:8c:5e:2c:63:54:0f:d7:94:42:b8:cf:
19:10:68:7b:d5:5c:7b:a7:35:09:fc:11:75:f1:5e:
b0:77:f9:6b:2f:e4:36:3a:2a:1c:a4:74:b9:b3:e0:
04:17:7a:65:ca:aa:19:b3:95:64:82:2b:7a:e2:af:
02:83:81:cf:90:b1:74:be:10:40:ef:f1:54:25:d4:
1f:0a:c3:8c:ff:64:79:9a:87:58:a8:1e:73:b9:8a:
fd:c3:20:28:04:34:cb:c4:6f:14:53:05:4b:f4:67:
b8:dd:cb:1a:a6:b3:09:9e:90:a7:88:44:49:d3:bb:
cb:7b:43:05:4e:ee:ed:bf:e6:77:91:b3:59:3d:53:
78:75:a7:35:c2:08:9f:5f:e1:76:b7:4d:f3:dd:5f:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:18:7D:0A:B3:DC:34:56:89:36:4B:DF:7B:E7:F9:51:FE:32:6C
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/1eEYfQqz3DRWiTZL33vn-VH-Mmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.200.0-31.184.205.255
37.9.36.0/22
37.9.52.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.34.255
92.223.36.0/24
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.176.0/21
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:100::/40
2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:94:b5:1b:3c:bc:7f:24:a3:7a:69:cf:99:a4:79:1b:6d:4d:
d2:65:65:f9:22:7b:17:6f:d9:93:4b:b9:9b:70:8d:a3:06:9e:
c7:b0:71:55:31:12:09:0f:a7:56:6c:89:31:b0:62:1a:fe:96:
4c:65:f6:46:01:f9:51:00:99:c3:fc:a4:8b:2b:51:1d:da:12:
9d:e2:23:b3:3e:7b:9f:16:0f:3c:14:f3:bf:d0:e8:ff:3f:d6:
18:fb:94:2e:17:0c:83:31:39:95:6c:68:2e:9c:23:7f:c6:ce:
e4:0e:fd:19:aa:a2:73:87:ce:e8:4d:de:3d:7a:ee:43:36:55:
90:9e:09:de:02:88:a8:d0:7d:e1:17:5e:68:17:3b:6c:63:e2:
ee:7b:31:cc:36:65:ee:4f:9a:4c:97:96:b8:e8:55:91:65:9c:
62:e7:cb:76:7b:e1:97:c6:c3:2c:ea:c1:4b:03:f8:fe:b4:d5:
ca:1b:ea:d5:9e:9f:19:56:fc:ec:13:37:7a:c3:15:7c:4a:ba:
35:87:e8:4f:89:50:4d:ee:7f:e0:97:e5:0e:0d:2d:87:a7:dd:
24:fb:f6:5b:5b:f2:d8:02:fc:06:d4:9e:a8:e7:df:86:4b:7c:
c6:54:37:a5:6a:17:68:39:b5:f8:bb:ef:66:af:a1:90:28:eb:
f1:0e:a5:26
-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgISAYzIAblJMCf+cpto78ijhjDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjQwMTAyMDIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWUxMTg3ZDBhYjNkYzM0NTY4OTM2NGJkZjdiZTdmOTUxZmUzMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbTwisXHNRP+rK5FZtMtQrQsyOqB
T/cMz5LPXWzavbMAcQveBH4itxBjt+ukVgB3R8/j99IJmDdGtQta2WGyQJwn+C2E
fopXbfQNzgXDpnq/XpWo+8mU7kSVsacOwI4/lkyBhCx04WQgjRZajF4sY1QP15RC
uM8ZEGh71Vx7pzUJ/BF18V6wd/lrL+Q2OiocpHS5s+AEF3plyqoZs5Vkgit64q8C
g4HPkLF0vhBA7/FUJdQfCsOM/2R5modYqB5zuYr9wyAoBDTLxG8UUwVL9Ge43csa
prMJnpCniERJ07vLe0MFTu7tv+Z3kbNZPVN4dac1wgifX+F2t03z3V8gZwIDAQAB
o4ID7jCCA+owHQYDVR0OBBYEFNXhGH0Ks9w0Vok2S9975/lR/jJsMB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvMWVFWWZRcXozRFJXaVRaTDMzdm4tVkgtTW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICAgYIKwYBBQUHAQcBAf8EggHxMIIB7TCCAbQEAgABMIIB
rAMEAQUIKjAMAwQCBWVEAwQABWVGAwQABWXaAwQBBbwCAwQABbwHAwQABbwjMAwD
BAAFvCUDBAMFvCADBAAFvHkwDAMEAAW8lQMEAAW8lgMEAQW8qgMEAgW8sAMEAAW8
1AMEAAW84AMEAAW85QMEAAW9yQMEAAW9zQMEAAW93zAMAwQDH7jIAwQBH7jMAwQC
JQkkAwQCJQk0AwQBLZOiAwQAT4V/AwQAUmHPAwQAU+UOAwQAU+UZAwQAW/NQMAwD
BAFb81IDBABb81QDBABb81YDBAJcJoADBAJcJogDBAFcJpgDBABcJpwDBAJcJrww
DAMEAlzfBAMEAFzfBgMEAVzfCAMEAFzfDjAMAwQFXN8gAwQAXN8iAwQAXN8kAwQA
XN8mAwQAXN8pAwQAXN8rAwQAXN8xAwQAXN88AwQBXN9AAwQAXN9DAwQAXN9IAwQA
XN9QAwQAXN9XAwQAXN9bAwQAXN9nAwQAXN9qAwQCXN9sAwQBXN9yAwQBXN96AwQA
X1VYAwQDX7WwAwQCkrnEAwQAkrnXAwQAkrnaAwQAuQ4uAwQAuWWJAwQAwRFdMDME
AgACMC0wEAMFBioRJ8ADBwQqESfAACADBgAqESfAATARAwYEKhEnwBADBwQqESfA
ECAwDQYJKoZIhvcNAQELBQADggEBACqUtRs8vH8ko3ppz5mkeRttTdJlZfkiexdv
2ZNLuZtwjaMGnsewcVUxEgkPp1ZsiTGwYhr+lkxl9kYB+VEAmcP8pIsrUR3aEp3i
I7M+e58WDzwU87/Q6P8/1hj7lC4XDIMxOZVsaC6cI3/GzuQO/RmqonOHzuhN3j16
7kM2VZCeCd4CiKjQfeEXXmgXO2xj4u57Mcw2Ze5PmkyXlrjoVZFlnGLny3Z74ZfG
wyzqwUsD+P601cob6tWenxlW/OwTN3rDFXxKujWH6E+JUE3uf+CX5Q4NLYen3ST7
9ltb8tgC/AbUnqjn34ZLfMZUN6VqF2g5tfi772avoZAo6/EOpSY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:39:11 2024 by rpki-client on console-ams.rpki-client.org