Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uDZNMMsy0J9qAM3L-hbtMxOE1DI.roa
File: uDZNMMsy0J9qAM3L-hbtMxOE1DI.roa (raw, json)
Hash identifier: c7F/++BfbcvAfXip4FA9cdtFpEz6PyRl1KxAG48H89Y=
Subject key identifier: B8:36:4D:30:CB:32:D0:9F:6A:00:CD:CB:FA:16:ED:33:13:84:D4:32
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195D328F00EB5BFA9117FD8CC03A5E93D61
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uDZNMMsy0J9qAM3L-hbtMxOE1DI.roa
Signing time: Wed 26 Mar 2025 15:53:50 +0000
ROA not before: Wed 26 Mar 2025 15:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:28:f0:0e:b5:bf:a9:11:7f:d8:cc:03:a5:e9:3d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 26 15:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8364d30cb32d09f6a00cdcbfa16ed331384d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:93:27:92:50:a2:dc:e6:87:96:29:cc:2c:
83:53:3c:88:11:d5:7e:63:4e:f0:c4:22:56:be:ea:
09:f9:9c:b1:a1:25:9f:70:be:87:aa:89:48:1c:72:
c0:d6:cf:b5:4a:68:d1:c8:fb:a9:ab:1d:58:1b:33:
5e:dc:7f:fa:9d:9e:5b:cb:17:38:5e:48:47:c0:76:
4e:b4:99:67:ed:3c:0b:e9:84:ce:12:eb:f3:20:b3:
ad:40:32:c0:9f:6b:87:c2:31:3a:53:30:0d:d3:a4:
1f:96:17:bf:1d:c5:e5:3a:bb:fc:90:c8:cc:57:9f:
8d:4e:fc:dc:53:bd:96:a1:58:63:ea:23:81:41:62:
ca:36:5e:7b:b6:01:f8:87:f2:21:ef:cb:7b:79:0e:
8d:64:0b:d1:2f:89:66:76:16:3a:cb:c5:38:5e:ea:
b3:04:e3:d5:0a:40:4d:24:6c:02:8f:19:9f:ec:39:
28:2c:ec:ea:fa:0c:8a:31:66:60:b2:88:2b:1b:19:
b4:2a:74:45:fd:34:be:e2:a7:16:ac:41:1b:e6:a7:
fd:68:a0:3b:b0:25:0c:48:d1:0f:aa:4d:e4:62:8f:
37:be:93:67:dc:d6:34:0c:52:f8:bf:a1:dc:86:f6:
b9:f7:68:c9:40:9f:7f:7f:78:a1:cc:5f:54:55:14:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:4D:30:CB:32:D0:9F:6A:00:CD:CB:FA:16:ED:33:13:84:D4:32
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uDZNMMsy0J9qAM3L-hbtMxOE1DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
78.135.98.0/24
188.132.188.0/24
188.132.214.0-188.132.216.255
188.132.218.0/24
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
38:46:5a:63:0a:36:60:e9:c3:a5:6f:00:98:61:32:4d:e2:70:
d3:41:d4:ab:7f:ea:2d:97:08:10:eb:e2:2d:cd:e9:21:c6:89:
0d:ef:cf:24:c9:14:eb:bb:1e:58:e4:ce:ad:26:c3:e7:fd:1a:
fa:fd:ce:9d:41:50:e0:45:8b:11:17:99:78:dc:5e:58:2f:c4:
85:a7:be:f9:c9:65:d0:d0:c5:00:bd:b7:2d:2e:26:23:c0:79:
6b:b8:bf:1c:49:56:b9:ee:ac:79:c2:7b:23:94:bc:e5:4f:78:
cd:c0:7d:d3:25:9f:11:c4:5b:fe:e8:f0:77:3f:db:35:50:2c:
a1:c6:fb:b2:bb:1e:b5:00:cc:dd:0a:29:d4:30:be:61:7b:6a:
b3:ab:62:03:12:e1:2f:f7:1a:7c:a9:90:63:07:c5:b9:17:88:
33:0b:19:d1:0b:d2:78:14:c3:b6:9f:74:0e:65:1a:6b:c2:9f:
58:0c:b3:88:ef:87:1e:f9:00:c0:07:09:2e:56:bf:24:8c:24:
be:ea:c6:03:66:0e:4a:db:58:31:3f:0c:6e:38:a7:5e:ab:82:
75:9d:f6:95:da:da:1f:cb:1d:c9:3b:a3:64:75:b6:3f:60:48:
6f:ab:41:1f:b6:e2:6f:26:8e:df:62:90:6b:e5:cd:4b:1f:61:
fc:ab:d5:7c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAZXTKPAOtb+pEX/YzAOl6T1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMzI2MTU1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODM2NGQzMGNiMzJkMDlmNmEwMGNkY2JmYTE2ZWQzMzEzODRkNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LCTJ5JQotzmh5YpzCyDUzyIEdV+
Y07wxCJWvuoJ+ZyxoSWfcL6HqolIHHLA1s+1SmjRyPupqx1YGzNe3H/6nZ5byxc4
XkhHwHZOtJln7TwL6YTOEuvzILOtQDLAn2uHwjE6UzAN06Qflhe/HcXlOrv8kMjM
V5+NTvzcU72WoVhj6iOBQWLKNl57tgH4h/Ih78t7eQ6NZAvRL4lmdhY6y8U4Xuqz
BOPVCkBNJGwCjxmf7DkoLOzq+gyKMWZgsogrGxm0KnRF/TS+4qcWrEEb5qf9aKA7
sCUMSNEPqk3kYo83vpNn3NY0DFL4v6Hchva592jJQJ9/f3ihzF9UVRQ+2wIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFLg2TTDLMtCfagDNy/oW7TMThNQyMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvdURaTk1Nc3kwSjlxQU0zTC1oYnRNeE9FMURJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTA+BAIAATA4AwQAH9IvAwQB
TVyOAwQATVyYAwQATodWAwQATodiAwQAvIS8MAwDBAG8hNYDBAC8hNgDBAC8hNow
DwQCAAIwCQMHACoQlEAAATANBgkqhkiG9w0BAQsFAAOCAQEAOEZaYwo2YOnDpW8A
mGEyTeJw00HUq3/qLZcIEOviLc3pIcaJDe/PJMkU67seWOTOrSbD5/0a+v3OnUFQ
4EWLEReZeNxeWC/Ehae++cll0NDFAL23LS4mI8B5a7i/HElWue6secJ7I5S85U94
zcB90yWfEcRb/ujwdz/bNVAsocb7srsetQDM3Qop1DC+YXtqs6tiAxLhL/cafKmQ
YwfFuReIMwsZ0QvSeBTDtp90DmUaa8KfWAyziO+HHvkAwAcJLla/JIwkvurGA2YO
SttYMT8MbjinXquCdZ32ldraH8sdyTujZHW2P2BIb6tBH7bibyaO32KQa+XNSx9h
/KvVfA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:56 2025 by rpki-client