Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ANZa0IOXqbdLBGkCBJOhxJtbRsM.roa
File: ANZa0IOXqbdLBGkCBJOhxJtbRsM.roa (raw, json)
Hash identifier: sx2fhSkZwFcv83qtKMLvshV4HiAhMYboKF6xxGVyQVY=
Subject key identifier: 00:D6:5A:D0:83:97:A9:B7:4B:04:69:02:04:93:A1:C4:9B:5B:46:C3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019734D759C9D346D6CCBB59C791CC4EBB42
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ANZa0IOXqbdLBGkCBJOhxJtbRsM.roa
Signing time: Tue 03 Jun 2025 08:10:17 +0000
ROA not before: Tue 03 Jun 2025 08:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:d7:59:c9:d3:46:d6:cc:bb:59:c7:91:cc:4e:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 3 08:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00d65ad08397a9b74b0469020493a1c49b5b46c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:54:68:23:81:cf:3c:f0:6f:ff:9f:e1:6d:
0d:a7:5a:49:6e:90:0a:4e:a0:0e:e2:46:02:49:ad:
b6:fe:32:9b:d5:6d:17:b9:f5:bc:59:9d:ca:fb:91:
0e:17:2f:17:39:eb:9b:24:f5:1c:60:23:14:79:1c:
a1:39:9d:09:45:39:60:b7:8f:29:9e:4c:b0:26:f7:
e6:21:78:a3:66:7a:9c:55:41:02:ae:a3:dc:11:a5:
72:95:9f:8e:dd:69:e9:43:f1:7c:bb:08:3d:32:c8:
22:cc:bd:4c:af:ce:a6:6c:a2:25:8b:57:a5:3b:9e:
01:a6:16:bf:b3:f2:01:2d:f4:21:38:6c:d8:02:0e:
df:95:d5:08:01:1d:5f:3a:4b:53:cc:dd:67:03:09:
3f:e7:cc:f8:77:c8:1e:b2:78:89:26:90:2b:8a:36:
87:78:85:95:d3:53:ac:af:74:c4:1c:ea:20:3a:da:
78:fd:56:4e:67:7d:42:b2:a5:6a:4e:d0:c5:fa:7d:
25:29:4f:f0:69:73:4b:f2:1d:65:ee:6f:da:12:b7:
7e:fe:35:8e:ce:4f:92:b9:2d:d1:82:1f:d5:00:e2:
0d:55:6e:52:fd:c9:2d:5b:a8:dd:c3:b0:ad:d4:91:
c1:83:82:a2:3a:9f:9c:7c:97:11:37:67:6f:1a:d9:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:5A:D0:83:97:A9:B7:4B:04:69:02:04:93:A1:C4:9B:5B:46:C3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ANZa0IOXqbdLBGkCBJOhxJtbRsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
78.135.98.0/24
188.132.166.0/23
188.132.188.0/24
188.132.213.0-188.132.218.255
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
1b:64:f4:d3:80:40:ca:3e:cb:f7:87:7a:df:34:92:c7:b6:a4:
30:f2:37:45:96:cf:db:e5:78:d3:82:3a:8e:d6:2b:ef:6b:d3:
9c:e2:4f:03:d9:5f:54:ab:f6:21:f4:80:37:69:39:e6:23:d4:
90:e9:8d:a8:72:d2:b8:7f:04:10:16:b8:8a:fb:14:95:1a:f7:
26:23:68:83:bc:1d:c4:ba:bb:25:e7:05:23:ba:a6:12:5f:6f:
4e:8d:42:da:e0:f8:ca:30:9e:33:f1:1b:df:92:95:a5:dd:6a:
94:87:04:38:7c:e9:fd:ec:09:34:66:10:5f:37:9a:81:54:2a:
1f:b9:59:49:c6:b8:fd:01:3d:4b:63:1d:69:06:37:8a:87:68:
5c:fa:41:3a:9e:5c:c0:ec:fc:dc:03:e1:7e:aa:e2:e7:01:c1:
41:64:7a:67:35:05:1f:53:9f:ea:db:18:c8:f4:4c:90:12:eb:
97:e5:dc:10:68:dc:80:72:b5:8f:5d:d1:ae:c5:68:5a:a1:47:
30:1b:94:a5:ec:e6:f7:8c:9d:b4:c5:c7:63:0f:a3:8d:aa:1a:
aa:b7:1a:16:e1:40:2b:4e:f0:f4:fd:d2:23:95:3b:07:92:79:
74:ba:ff:20:2e:35:90:61:cd:9c:74:3b:79:ce:40:e4:e5:4f:
2c:71:78:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:11 2025 by rpki-client