Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/h7xq6vRCrwgOMjQm9yAyg3Njtp4.roa
File: h7xq6vRCrwgOMjQm9yAyg3Njtp4.roa (raw, json)
Hash identifier: xRgukB86bd2ruw2ODmsMqFssAfehWIdDjtfBQsNkruc=
Subject key identifier: 87:BC:6A:EA:F4:42:AF:08:0E:32:34:26:F7:20:32:83:73:63:B6:9E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA3BA30F8B0B60FC6A1F234F883E2
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/h7xq6vRCrwgOMjQm9yAyg3Njtp4.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 45.159.23.0/24 maxlen: 24
88.218.46.0/24 maxlen: 24
89.19.34.0/24 maxlen: 24
176.126.111.0/24 maxlen: 24
193.31.127.0/24 maxlen: 24
193.56.20.0/24 maxlen: 24
193.202.16.0/24 maxlen: 24
194.99.25.0/24 maxlen: 24
194.110.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a3:ba:30:f8:b0:b6:0f:c6:a1:f2:34:f8:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87bc6aeaf442af080e323426f72032837363b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:fc:e8:44:9a:b7:38:54:03:78:dc:b9:ed:
51:a6:c4:68:0b:15:b0:6c:ac:f3:ab:2b:45:44:06:
82:ab:ad:b8:73:84:1d:02:43:61:56:f9:4f:c6:72:
9a:06:8e:05:a9:11:7c:37:2c:0a:08:9b:e7:ca:e1:
62:cd:e6:55:a9:11:16:6b:6a:02:f5:17:a5:1e:1f:
9d:a3:61:96:c0:c9:45:cd:16:b0:d3:dd:ef:2d:a4:
dc:e9:84:08:34:4c:b3:27:41:b6:a7:91:31:a0:08:
8d:ff:f1:03:51:15:eb:92:fa:e5:fc:a1:ee:71:86:
6f:a7:dc:84:3e:c8:1c:2a:c6:1b:81:bf:f5:53:3e:
43:c7:ae:8e:97:64:1a:f6:18:68:4c:c2:36:36:b3:
da:60:45:06:12:f9:03:60:23:2d:c1:85:b0:8f:a9:
b6:85:96:24:34:09:c9:0f:3e:e7:df:4b:40:6b:8e:
af:7b:ad:bb:87:16:7a:e0:b6:8b:fe:32:7c:f1:32:
30:dd:4d:38:30:c6:df:1c:f6:31:f3:96:6d:05:ed:
a2:33:14:4b:e1:dd:91:f6:ca:63:6e:b7:5d:1c:72:
f2:e4:2e:10:c8:43:e7:cf:5a:40:a9:76:9f:3b:cd:
81:9f:d5:fc:de:49:81:3c:78:27:19:85:a0:86:6d:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:6A:EA:F4:42:AF:08:0E:32:34:26:F7:20:32:83:73:63:B6:9E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/h7xq6vRCrwgOMjQm9yAyg3Njtp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.23.0/24
88.218.46.0/24
89.19.34.0/24
176.126.111.0/24
193.31.127.0/24
193.56.20.0/24
193.202.16.0/24
194.99.25.0/24
194.110.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4d:e8:11:d5:de:62:41:6c:28:2a:e3:79:7b:b9:1a:6d:39:
4c:5d:4b:e9:53:79:53:5d:d6:d8:e3:8b:2c:29:89:32:de:ee:
9d:5f:15:36:71:28:35:92:2b:5a:fe:13:98:13:ea:6a:1b:c3:
fc:d6:bf:5c:de:50:41:a4:da:ff:46:bb:5b:a1:aa:68:41:7a:
d8:c9:ce:e7:18:da:f8:06:dd:95:75:c0:64:02:5e:d5:2a:86:
0c:8a:29:9f:1f:e5:45:d4:8b:98:73:8d:57:6f:cc:fb:66:3d:
bc:1c:00:f8:bf:e0:94:68:70:27:e6:d9:4f:66:5a:a6:fc:a6:
19:c4:73:cb:80:f1:f0:f8:22:87:3b:af:c3:90:ea:af:e5:f7:
e5:92:f4:d3:73:48:ec:70:28:25:34:73:3b:3b:4a:39:eb:b5:
74:df:a7:9d:15:0f:e7:c2:1a:cd:1c:eb:18:6e:eb:f8:57:ef:
55:c1:25:57:32:96:40:9f:ca:d7:05:e8:80:94:a6:7e:c7:82:
61:3f:34:5b:cf:3a:83:e8:08:e4:ca:19:14:52:6d:35:65:e7:
b2:dd:dc:af:6f:8f:ad:c2:7a:e7:e0:12:c3:d9:7d:66:a4:73:
b0:a8:2d:89:7f:81:c7:43:11:fb:d7:6e:d1:41:6b:35:1a:ad:
2f:69:07:17
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQma6O6MPiwtg/GofI0+IPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2JjNmFlYWY0NDJhZjA4MGUzMjM0MjZmNzIwMzI4MzczNjNiNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Fb86ESatzhUA3jcue1RpsRoCxWw
bKzzqytFRAaCq624c4QdAkNhVvlPxnKaBo4FqRF8NywKCJvnyuFizeZVqREWa2oC
9RelHh+do2GWwMlFzRaw093vLaTc6YQINEyzJ0G2p5ExoAiN//EDURXrkvrl/KHu
cYZvp9yEPsgcKsYbgb/1Uz5Dx66Ol2Qa9hhoTMI2NrPaYEUGEvkDYCMtwYWwj6m2
hZYkNAnJDz7n30tAa46ve627hxZ64LaL/jJ88TIw3U04MMbfHPYx85ZtBe2iMxRL
4d2R9spjbrddHHLy5C4QyEPnz1pAqXafO82Bn9X83kmBPHgnGYWghm2S9wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFIe8aur0Qq8IDjI0JvcgMoNzY7aeMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvaDd4cTZ2UkNyd2dPTWpRbTl5QXlnM05qdHA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALZ8XAwQA
WNouAwQAWRMiAwQAsH5vAwQAwR9/AwQAwTgUAwQAwcoQAwQAwmMZAwQAwm6WMA0G
CSqGSIb3DQEBCwUAA4IBAQCcTegR1d5iQWwoKuN5e7kabTlMXUvpU3lTXdbY44ss
KYky3u6dXxU2cSg1kita/hOYE+pqG8P81r9c3lBBpNr/RrtboapoQXrYyc7nGNr4
Bt2VdcBkAl7VKoYMiimfH+VF1IuYc41Xb8z7Zj28HAD4v+CUaHAn5tlPZlqm/KYZ
xHPLgPHw+CKHO6/DkOqv5fflkvTTc0jscCglNHM7O0o567V036edFQ/nwhrNHOsY
buv4V+9VwSVXMpZAn8rXBeiAlKZ+x4JhPzRbzzqD6AjkyhkUUm01Zeey3dyvb4+t
wnrn4BLD2X1mpHOwqC2Jf4HHQxH7127RQWs1Gq0vaQcX
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:08 2025 by rpki-client