Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa
File: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (raw, json)
Hash identifier: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=
Subject key identifier: C9:E6:FA:A8:9A:F1:0C:7C:44:34:4F:B9:F9:84:F4:25:AE:CD:67:8D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B7DE130AE88383084F3F6905B0879
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43075
IP address blocks: 88.135.128.0/19 maxlen: 19
109.229.192.0/19 maxlen: 19
171.25.218.0/23 maxlen: 23
176.106.48.0/20 maxlen: 20
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
213.110.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7d:e1:30:ae:88:38:30:84:f3:f6:90:5b:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9e6faa89af10c7c44344fb9f984f425aecd678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:6f:55:7f:86:c9:ca:08:f7:f5:96:ac:4e:
7f:ac:be:45:7a:16:e9:2b:66:eb:d9:e4:b1:05:a8:
3b:14:69:cc:96:26:e9:12:59:27:d6:b7:09:67:82:
90:d8:4b:6c:38:14:ec:29:05:1a:bd:1f:c3:de:71:
2b:d8:a7:34:60:5f:d3:fa:03:34:de:44:ad:db:49:
c3:62:03:35:2f:ce:4b:be:82:55:52:b1:8a:e3:3c:
9c:3b:85:83:0b:9d:b2:c4:bc:77:71:f3:c1:ac:c8:
30:5f:39:0a:75:44:42:00:f6:e1:1d:9b:7b:3e:9b:
5a:5b:2e:a8:82:a4:1c:b3:fa:ac:12:f9:2b:6f:e6:
02:1c:b5:78:e5:9a:8d:21:98:8a:e0:13:b0:e0:f2:
74:94:3c:39:6b:90:38:81:2c:ac:40:93:3a:04:f4:
10:fb:f7:55:86:c9:e1:77:8f:fa:67:74:e5:ab:ac:
fc:a4:ea:6a:96:0b:b8:be:bc:fb:13:13:81:98:3e:
8e:69:7a:20:dc:a0:e3:a1:22:6c:38:87:4c:11:c1:
b7:ee:70:5d:51:93:e4:3f:2f:9d:fe:ca:08:02:91:
3a:48:53:2a:8a:ff:ab:66:60:4e:99:2c:0b:c4:e8:
88:ae:3a:b7:31:10:59:3b:c7:d0:5a:f8:3f:30:17:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:FA:A8:9A:F1:0C:7C:44:34:4F:B9:F9:84:F4:25:AE:CD:67:8D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.128.0/19
109.229.192.0/19
171.25.218.0/23
176.106.48.0/20
176.106.160.0-176.106.183.255
213.110.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:ab:67:d4:fd:0e:36:09:67:06:e7:be:e8:19:ec:d2:f4:47:
2f:1d:aa:59:fc:7a:32:fc:d8:32:35:32:8b:87:35:ea:52:d3:
08:b4:c5:eb:2d:65:ca:d2:f3:5a:06:db:dd:da:d8:1a:ff:76:
90:2a:c3:d8:d2:95:2e:3a:11:95:ec:33:7e:86:91:87:ea:27:
3d:dd:f1:b7:8c:26:d1:bd:24:90:5e:99:b7:6f:93:6a:36:b0:
7b:0a:6b:15:75:bb:cb:1e:09:6a:3c:f4:51:8a:e6:5e:07:52:
27:e0:53:5e:81:db:0f:65:07:2f:06:14:3a:01:73:4d:f2:c0:
15:36:83:e6:fd:48:d4:72:48:29:79:fd:34:03:af:85:f5:08:
25:44:15:50:59:63:1b:f1:5a:e8:75:49:e5:d6:54:cf:cd:fc:
7f:3f:8d:3d:57:ef:d7:d9:d8:48:8c:cf:01:b8:20:5e:ec:e8:
ff:5f:ce:ea:05:35:d2:6c:ff:a0:37:97:07:9d:7e:f4:b7:3b:
ac:3c:c5:98:ee:69:78:13:4d:22:cb:c8:e0:75:97:7f:e7:03:
72:87:be:0e:09:d4:ce:48:b6:39:af:83:3d:61:b0:e8:7c:ad:
00:57:32:dc:ae:93:4e:d2:c2:9b:24:50:cc:c3:0e:48:d1:8d:
73:72:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:42 2025 by rpki-client