Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa
File: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (raw, json)
Hash identifier: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=
Subject key identifier: 19:F5:49:36:D0:6A:0E:36:22:D0:67:F9:43:6D:7A:92:BE:1B:5C:DE
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 019420D6492DD04EB973CF15053212211FAD
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47253
IP address blocks: 46.18.16.0/21 maxlen: 21
46.18.16.0/24 maxlen: 24
46.18.17.0/24 maxlen: 24
46.18.18.0/24 maxlen: 24
46.18.19.0/24 maxlen: 24
46.18.20.0/24 maxlen: 24
46.18.21.0/24 maxlen: 24
46.18.22.0/24 maxlen: 24
46.18.23.0/24 maxlen: 24
62.16.64.0/20 maxlen: 20
62.16.64.0/24 maxlen: 24
62.16.65.0/24 maxlen: 24
62.16.66.0/24 maxlen: 24
62.16.67.0/24 maxlen: 24
62.16.68.0/24 maxlen: 24
62.16.69.0/24 maxlen: 24
62.16.70.0/24 maxlen: 24
62.16.71.0/24 maxlen: 24
62.16.72.0/24 maxlen: 24
62.16.73.0/24 maxlen: 24
62.16.74.0/24 maxlen: 24
62.16.75.0/24 maxlen: 24
62.16.76.0/24 maxlen: 24
62.16.77.0/24 maxlen: 24
62.16.78.0/24 maxlen: 24
62.16.79.0/24 maxlen: 24
93.184.0.0/20 maxlen: 20
93.184.0.0/22 maxlen: 22
93.184.0.0/24 maxlen: 24
93.184.1.0/24 maxlen: 24
93.184.2.0/24 maxlen: 24
93.184.3.0/24 maxlen: 24
93.184.4.0/22 maxlen: 22
93.184.4.0/24 maxlen: 24
93.184.5.0/24 maxlen: 24
93.184.6.0/24 maxlen: 24
93.184.7.0/24 maxlen: 24
93.184.8.0/22 maxlen: 22
93.184.8.0/24 maxlen: 24
93.184.9.0/24 maxlen: 24
93.184.10.0/24 maxlen: 24
93.184.11.0/24 maxlen: 24
93.184.12.0/22 maxlen: 22
93.184.12.0/24 maxlen: 24
93.184.13.0/24 maxlen: 24
93.184.14.0/24 maxlen: 24
93.184.15.0/24 maxlen: 24
185.6.56.0/22 maxlen: 24
185.6.56.0/24 maxlen: 24
185.6.57.0/24 maxlen: 24
185.6.58.0/24 maxlen: 24
185.6.59.0/24 maxlen: 24
193.124.248.0/22 maxlen: 22
193.124.248.0/24 maxlen: 24
193.124.249.0/24 maxlen: 24
193.124.250.0/24 maxlen: 24
193.124.251.0/24 maxlen: 24
194.58.72.0/22 maxlen: 22
194.58.72.0/24 maxlen: 24
194.58.73.0/24 maxlen: 24
194.58.74.0/24 maxlen: 24
194.58.75.0/24 maxlen: 24
194.58.76.0/23 maxlen: 23
194.58.76.0/24 maxlen: 24
194.58.77.0/24 maxlen: 24
194.58.152.0/23 maxlen: 23
194.58.152.0/24 maxlen: 24
194.58.153.0/24 maxlen: 24
194.58.220.0/23 maxlen: 23
194.58.220.0/24 maxlen: 24
194.58.221.0/24 maxlen: 24
194.58.240.0/24 maxlen: 24
194.58.242.0/23 maxlen: 23
194.58.244.0/23 maxlen: 23
194.58.247.0/24 maxlen: 24
2a02:26d0::/32 maxlen: 32
2a02:26d0::/48 maxlen: 48
2a02:26d0:1::/48 maxlen: 48
2a02:26d0:2::/48 maxlen: 48
2a02:26d0:4::/48 maxlen: 48
2a02:26d0:9::/48 maxlen: 48
2a02:26d0:a::/48 maxlen: 48
2a02:26d0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:49:2d:d0:4e:b9:73:cf:15:05:32:12:21:1f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19f54936d06a0e3622d067f9436d7a92be1b5cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:ca:76:55:9d:7e:8d:c8:78:92:74:f9:06:
1e:5d:e9:29:37:82:a8:0b:75:85:77:9f:cf:19:dd:
29:4f:fe:fe:3c:16:b9:4a:3c:e9:1c:63:e4:d0:d8:
aa:ff:a7:93:94:56:a9:68:03:1a:58:62:8a:0a:c8:
a8:e9:61:10:b8:23:d4:c0:b0:fd:e7:f2:99:0c:1b:
57:64:ff:4c:f6:5c:fe:9c:a9:06:7e:e0:79:73:e0:
c6:db:05:97:18:ad:aa:1e:18:6f:b2:b1:a9:79:c9:
0c:a6:1f:1c:ab:af:fe:1d:cc:be:66:44:72:53:9c:
2d:22:7e:b0:3f:b7:a8:a4:63:fe:c1:a3:8d:bf:d6:
15:4b:96:30:dd:d6:8f:eb:26:84:eb:5e:06:4e:f5:
ef:d5:5f:d4:54:6f:44:03:0b:7b:85:2e:4d:09:6a:
4e:88:f8:f4:5c:a4:d0:a9:66:91:9b:26:eb:4e:1b:
c7:f1:47:52:03:d8:a2:d8:f8:e0:5d:40:f6:fd:f8:
40:7e:01:67:af:6e:c6:fd:65:aa:63:59:49:8a:e9:
bd:27:42:67:24:a4:30:32:11:85:d6:c6:95:e9:79:
ee:95:3e:4b:c6:6c:49:bf:65:3c:b2:72:7d:d9:4d:
78:af:7d:23:f2:2f:dc:3e:87:1d:5b:6f:93:44:b8:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:49:36:D0:6A:0E:36:22:D0:67:F9:43:6D:7A:92:BE:1B:5C:DE
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.16.0/21
62.16.64.0/20
93.184.0.0/20
185.6.56.0/22
193.124.248.0/22
194.58.72.0-194.58.77.255
194.58.152.0/23
194.58.220.0/23
194.58.240.0/24
194.58.242.0-194.58.245.255
194.58.247.0/24
IPv6:
2a02:26d0::/32
Signature Algorithm: sha256WithRSAEncryption
50:7e:4e:53:2e:54:3f:d7:d2:49:00:fc:7d:d9:ec:f5:aa:73:
91:a4:58:d5:ea:6c:5b:20:e8:53:a6:c3:70:3f:c2:45:4c:a9:
c1:64:04:e1:7c:97:ec:81:63:b7:01:c8:a6:8c:41:de:5e:6a:
58:4c:d6:b3:4a:c3:da:fe:fb:ad:d6:f2:78:05:30:f2:3f:9d:
e7:2f:bf:84:79:cc:97:78:87:66:30:b6:5f:8e:eb:b9:9c:2e:
08:7a:9b:f6:1c:73:90:9e:db:02:ad:f3:12:ce:66:8f:f4:84:
44:c1:47:17:e3:e1:1e:06:89:2f:b9:06:c1:24:79:81:bb:6c:
76:e8:3b:cc:e5:06:79:c6:ff:72:23:75:90:55:30:16:ea:0a:
d9:94:8d:a6:04:66:eb:d8:0e:4f:93:7f:f5:e7:e7:c0:88:d3:
dc:e0:1b:10:66:83:7a:23:a1:c6:02:f6:12:d9:9d:01:e6:37:
e3:4e:b6:91:b9:db:4a:cb:b0:92:94:e8:2e:c6:02:2e:89:7a:
af:9d:7f:8d:00:33:03:f6:b9:96:97:4f:16:5b:5e:8a:85:d4:
07:d3:22:a6:7c:ef:16:6c:6f:d9:6e:8f:01:a3:40:be:02:b8:
37:44:46:21:f5:0a:5a:f7:04:a0:f1:8b:91:90:54:55:4b:53:
b3:89:fb:78
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAZQg1kkt0E65c88VBTISIR+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi
MDA1YWQwHhcNMjUwMTAxMDc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWY1NDkzNmQwNmEwZTM2MjJkMDY3Zjk0MzZkN2E5MmJlMWI1Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+3KdlWdfo3IeJJ0+QYeXekpN4Ko
C3WFd5/PGd0pT/7+PBa5SjzpHGPk0Niq/6eTlFapaAMaWGKKCsio6WEQuCPUwLD9
5/KZDBtXZP9M9lz+nKkGfuB5c+DG2wWXGK2qHhhvsrGpeckMph8cq6/+Hcy+ZkRy
U5wtIn6wP7eopGP+waONv9YVS5Yw3daP6yaE614GTvXv1V/UVG9EAwt7hS5NCWpO
iPj0XKTQqWaRmybrThvH8UdSA9ii2PjgXUD2/fhAfgFnr27G/WWqY1lJium9J0Jn
JKQwMhGF1saV6XnulT5LxmxJv2U8snJ92U14r30j8i/cPocdW2+TRLjoawIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFBn1STbQag42ItBn+UNtepK+G1zeMB8GA1UdIwQY
MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt
ZGJiYjM1YzllMzc4LzEvR2ZWSk50QnFEallpMEdmNVEyMTZrcjRiWE40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4
LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQDLhIQAwQE
PhBAAwQEXbgAAwQCuQY4AwQCwXz4MAwDBAPCOkgDBAHCOkwDBAHCOpgDBAHCOtwD
BADCOvAwDAMEAcI68gMEAcI69AMEAMI69zANBAIAAjAHAwUAKgIm0DANBgkqhkiG
9w0BAQsFAAOCAQEAUH5OUy5UP9fSSQD8fdns9apzkaRY1epsWyDoU6bDcD/CRUyp
wWQE4XyX7IFjtwHIpoxB3l5qWEzWs0rD2v77rdbyeAUw8j+d5y+/hHnMl3iHZjC2
X47ruZwuCHqb9hxzkJ7bAq3zEs5mj/SERMFHF+PhHgaJL7kGwSR5gbtsdug7zOUG
ecb/ciN1kFUwFuoK2ZSNpgRm69gOT5N/9efnwIjT3OAbEGaDeiOhxgL2EtmdAeY3
4062kbnbSsuwkpToLsYCLol6r51/jQAzA/a5lpdPFlteioXUB9MipnzvFmxv2W6P
AaNAvgK4N0RGIfUKWvcEoPGLkZBUVUtTs4n7eA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:32 2025 by rpki-client