Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/l26GjFKiJLghCK5dFGxFRy1Xo6Q.roa
File: l26GjFKiJLghCK5dFGxFRy1Xo6Q.roa (raw, json)
Hash identifier: u5RgF7UaPCUQF7Jbrwxhy4E1jaxpfAePJxgJhl6UDBQ=
Subject key identifier: 97:6E:86:8C:52:A2:24:B8:21:08:AE:5D:14:6C:45:47:2D:57:A3:A4
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01931FF6F52D9E5BD59AB56C5F60EAF274C8
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/l26GjFKiJLghCK5dFGxFRy1Xo6Q.roa
Signing time: Tue 12 Nov 2024 10:41:38 +0000
ROA not before: Tue 12 Nov 2024 10:41:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216071
IP address blocks: 5.35.32.0/24 maxlen: 24
5.35.33.0/24 maxlen: 24
5.35.34.0/24 maxlen: 24
5.35.36.0/24 maxlen: 24
5.35.37.0/24 maxlen: 24
5.35.38.0/24 maxlen: 24
5.35.39.0/24 maxlen: 24
5.35.44.0/24 maxlen: 24
5.35.45.0/24 maxlen: 24
5.35.46.0/24 maxlen: 24
5.35.47.0/24 maxlen: 24
5.35.68.0/24 maxlen: 24
5.35.69.0/24 maxlen: 24
5.35.70.0/24 maxlen: 24
5.35.71.0/24 maxlen: 24
46.149.72.0/24 maxlen: 24
46.149.73.0/24 maxlen: 24
46.149.74.0/24 maxlen: 24
46.149.75.0/24 maxlen: 24
46.149.76.0/24 maxlen: 24
46.149.77.0/24 maxlen: 24
46.149.78.0/24 maxlen: 24
46.149.79.0/24 maxlen: 24
62.84.96.0/24 maxlen: 24
62.84.97.0/24 maxlen: 24
62.84.98.0/24 maxlen: 24
62.84.99.0/24 maxlen: 24
62.84.100.0/24 maxlen: 24
62.84.101.0/24 maxlen: 24
62.84.102.0/24 maxlen: 24
62.84.103.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.138.0/24 maxlen: 24
77.105.139.0/24 maxlen: 24
77.105.140.0/24 maxlen: 24
77.105.141.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.246.96.0/24 maxlen: 24
77.246.97.0/24 maxlen: 24
77.246.98.0/24 maxlen: 24
77.246.99.0/24 maxlen: 24
77.246.100.0/24 maxlen: 24
77.246.101.0/24 maxlen: 24
77.246.102.0/24 maxlen: 24
77.246.103.0/24 maxlen: 24
77.246.104.0/24 maxlen: 24
77.246.105.0/24 maxlen: 24
77.246.106.0/24 maxlen: 24
77.246.107.0/24 maxlen: 24
77.246.108.0/24 maxlen: 24
77.246.109.0/24 maxlen: 24
77.246.110.0/24 maxlen: 24
77.246.111.0/24 maxlen: 24
89.110.64.0/24 maxlen: 24
89.110.65.0/24 maxlen: 24
89.110.66.0/24 maxlen: 24
89.110.67.0/24 maxlen: 24
89.110.68.0/24 maxlen: 24
89.110.69.0/24 maxlen: 24
89.110.70.0/24 maxlen: 24
89.110.71.0/24 maxlen: 24
89.110.72.0/24 maxlen: 24
89.110.73.0/24 maxlen: 24
89.110.74.0/24 maxlen: 24
89.110.75.0/24 maxlen: 24
89.110.76.0/24 maxlen: 24
89.110.77.0/24 maxlen: 24
89.110.78.0/24 maxlen: 24
89.110.79.0/24 maxlen: 24
89.110.80.0/24 maxlen: 24
89.110.81.0/24 maxlen: 24
89.110.82.0/24 maxlen: 24
89.110.83.0/24 maxlen: 24
89.110.84.0/24 maxlen: 24
89.110.85.0/24 maxlen: 24
89.110.86.0/24 maxlen: 24
89.110.87.0/24 maxlen: 24
89.110.100.0/24 maxlen: 24
89.110.101.0/24 maxlen: 24
89.110.102.0/24 maxlen: 24
89.110.103.0/24 maxlen: 24
89.110.104.0/24 maxlen: 24
89.110.105.0/24 maxlen: 24
89.110.106.0/24 maxlen: 24
89.110.107.0/24 maxlen: 24
89.110.108.0/24 maxlen: 24
89.110.109.0/24 maxlen: 24
89.110.110.0/24 maxlen: 24
89.110.111.0/24 maxlen: 24
89.110.112.0/24 maxlen: 24
89.110.113.0/24 maxlen: 24
89.110.114.0/24 maxlen: 24
89.110.115.0/24 maxlen: 24
89.110.116.0/24 maxlen: 24
89.110.117.0/24 maxlen: 24
89.110.118.0/24 maxlen: 24
89.110.119.0/24 maxlen: 24
89.110.120.0/24 maxlen: 24
89.110.121.0/24 maxlen: 24
89.110.122.0/24 maxlen: 24
89.110.123.0/24 maxlen: 24
89.110.124.0/24 maxlen: 24
89.110.125.0/24 maxlen: 24
89.110.126.0/24 maxlen: 24
89.110.127.0/24 maxlen: 24
93.183.88.0/24 maxlen: 24
93.183.89.0/24 maxlen: 24
93.183.90.0/24 maxlen: 24
93.183.91.0/24 maxlen: 24
109.107.164.0/24 maxlen: 24
109.107.165.0/24 maxlen: 24
109.107.166.0/24 maxlen: 24
109.107.167.0/24 maxlen: 24
109.107.172.0/24 maxlen: 24
109.107.173.0/24 maxlen: 24
109.107.174.0/24 maxlen: 24
109.107.175.0/24 maxlen: 24
109.107.176.0/24 maxlen: 24
109.107.177.0/24 maxlen: 24
109.107.178.0/24 maxlen: 24
109.107.179.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
178.130.40.0/24 maxlen: 24
178.130.41.0/24 maxlen: 24
178.130.42.0/24 maxlen: 24
178.130.43.0/24 maxlen: 24
194.60.132.0/24 maxlen: 24
194.60.133.0/24 maxlen: 24
194.60.134.0/24 maxlen: 24
194.60.135.0/24 maxlen: 24
194.246.81.0/24 maxlen: 24
194.246.82.0/24 maxlen: 24
194.246.83.0/24 maxlen: 24
212.111.80.0/24 maxlen: 24
212.111.81.0/24 maxlen: 24
212.111.82.0/24 maxlen: 24
212.111.88.0/24 maxlen: 24
212.111.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:f6:f5:2d:9e:5b:d5:9a:b5:6c:5f:60:ea:f2:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Nov 12 10:41:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976e868c52a224b82108ae5d146c45472d57a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:04:5b:51:46:2e:4e:7d:4b:f7:6d:a6:cf:
93:6a:a4:fe:b9:22:20:00:97:bd:b8:4a:0f:18:e7:
23:72:ba:09:8f:53:83:e8:32:12:d7:af:3d:71:2a:
2b:f7:9f:1a:e7:d4:8b:9e:ca:23:db:e0:73:56:de:
0a:9c:54:b6:62:e2:b2:69:4a:2c:64:92:19:2e:96:
d6:1d:9c:f8:6e:b1:8c:95:1c:07:3b:28:d8:1c:b3:
3e:06:a3:c9:ab:03:f1:80:62:25:e9:e2:f7:37:8b:
ab:e3:b6:3d:f1:93:0b:15:41:2d:19:3e:c5:b0:ba:
98:80:be:10:f3:7b:0c:a5:3f:e1:38:a5:b1:23:36:
f7:8f:15:96:ec:b1:e7:f9:8d:e6:e2:ab:94:81:b5:
75:64:8b:ef:62:3e:85:cf:66:73:c5:0c:cd:35:d9:
c9:7f:66:7f:44:fd:51:c5:21:82:8f:cb:e6:32:66:
e5:b7:be:42:22:df:a2:4d:d5:f5:3f:3e:f9:ed:31:
fb:fe:17:6a:9a:50:85:8c:64:31:f1:df:f2:4f:bc:
c6:8d:47:bf:96:60:39:dc:ca:43:78:02:88:64:d1:
b7:3c:2c:40:c6:de:2b:4e:c2:1f:7d:c4:90:03:7d:
b3:ae:d0:77:ef:cf:50:50:96:cf:25:06:3f:f0:d3:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6E:86:8C:52:A2:24:B8:21:08:AE:5D:14:6C:45:47:2D:57:A3:A4
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/l26GjFKiJLghCK5dFGxFRy1Xo6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.32.0-5.35.34.255
5.35.36.0/22
5.35.44.0/22
5.35.68.0/22
46.149.72.0/21
62.84.96.0/21
77.105.136.0/21
77.246.96.0/20
89.110.64.0-89.110.87.255
89.110.100.0-89.110.127.255
93.183.88.0/22
109.107.164.0/22
109.107.172.0-109.107.179.255
109.107.184.0/22
178.130.40.0/22
194.60.132.0/22
194.246.81.0-194.246.83.255
212.111.80.0-212.111.82.255
212.111.88.0/23
Signature Algorithm: sha256WithRSAEncryption
21:9d:e3:0b:8a:2c:80:b3:9d:10:9a:ad:3e:b4:ce:c9:01:b4:
f3:0b:ec:89:70:ac:33:29:94:ff:2f:1f:84:da:45:f5:b5:72:
44:f7:a9:87:1c:1c:3f:80:34:01:7d:71:e1:59:5e:91:5c:16:
14:50:61:38:6b:2c:19:36:15:a3:fe:c3:02:e8:15:7c:e3:c6:
70:fd:c3:58:9d:4f:d8:42:bd:ba:07:75:26:89:68:28:7e:2c:
12:8a:47:da:b3:d7:41:9a:79:0d:bf:a5:d4:41:7a:20:4f:36:
ed:10:a1:c3:3c:e2:30:f3:cb:f9:13:c3:09:6e:4e:33:70:bc:
de:3d:7d:5a:02:49:c4:37:e4:e0:ac:e6:73:61:39:4b:7f:31:
70:8f:f1:a5:1e:17:37:df:46:bd:f5:7d:c7:25:30:1e:5d:5c:
9f:b5:73:82:42:3e:5c:a2:00:24:dd:50:47:62:79:c1:e1:52:
9e:4f:f9:78:24:d2:1e:e3:cb:8a:f5:8b:0f:d3:98:40:ad:d8:
68:9d:f0:8e:c2:30:8d:b5:60:36:81:f1:37:43:06:c8:16:37:
d8:ec:d1:31:80:15:f5:07:54:5b:55:74:61:6b:5c:14:f0:27:
cb:3c:ae:1c:95:af:3f:be:59:f2:a3:75:df:51:b5:9c:05:33:
3d:d3:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:45 2024 by rpki-client on console-fra.rpki-client.org