Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/j7yyDbS1ewlIDq3X9h7EZ5TIkVc.roa
File: j7yyDbS1ewlIDq3X9h7EZ5TIkVc.roa (raw, json)
Hash identifier: hjDnJRKOBwwwgkB1/Z5hHyk4Kns3r+LsqGJ0S3AMcyM=
Subject key identifier: 8F:BC:B2:0D:B4:B5:7B:09:48:0E:AD:D7:F6:1E:C4:67:94:C8:91:57
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0192F82EFB5066B1B62B550054B6598D8755
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/j7yyDbS1ewlIDq3X9h7EZ5TIkVc.roa
Signing time: Mon 04 Nov 2024 17:18:01 +0000
ROA not before: Mon 04 Nov 2024 17:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39010
IP address blocks: 5.57.3.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
85.112.64.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.80.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
146.185.32.0/24 maxlen: 24
146.185.33.0/24 maxlen: 24
146.185.34.0/24 maxlen: 24
146.185.35.0/24 maxlen: 24
146.185.36.0/24 maxlen: 24
146.185.37.0/24 maxlen: 24
146.185.38.0/24 maxlen: 24
146.185.39.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.76.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
2a00:1580::/29 maxlen: 29
2a00:1580::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300e::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:2e:fb:50:66:b1:b6:2b:55:00:54:b6:59:8d:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Nov 4 17:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fbcb20db4b57b09480eadd7f61ec46794c89157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:db:39:b0:5a:16:2f:ff:e3:e2:63:37:b2:3c:
fb:54:65:70:05:c4:06:d4:18:a5:18:e1:6f:15:81:
03:46:6f:89:a9:69:ea:8b:62:41:84:ee:31:50:da:
42:6d:64:f3:ff:10:f8:4d:60:0e:7c:a5:b9:d2:af:
fb:0d:90:1f:fd:7a:bb:af:bb:d3:4c:ca:ee:79:a6:
d0:98:c5:4a:52:f2:5c:6d:c2:cc:15:91:51:ec:6c:
7f:5b:c4:10:ec:da:fd:89:36:ec:36:4f:4e:7d:7b:
5c:27:36:16:d9:c7:12:aa:83:4e:b3:8d:d8:ed:25:
b5:97:c6:81:98:d8:9d:e1:ae:b4:60:97:90:13:a8:
1a:b0:c7:2d:5c:01:54:72:c0:50:58:b9:03:6c:4e:
a7:37:95:a5:af:23:a0:84:6b:c7:98:64:5c:c3:78:
09:fb:9c:a0:90:c9:28:f5:dd:d4:78:ea:f9:42:7a:
d3:6e:09:a2:3d:24:3b:ea:34:d4:b5:18:98:ec:9b:
76:6e:10:6b:da:1e:d0:f6:03:8f:81:8c:b7:c5:79:
81:28:75:67:f8:ef:80:cc:8a:9d:69:d9:07:3a:95:
c7:34:c8:f2:5b:cd:7f:f9:1c:a3:cc:7d:ec:aa:35:
90:ba:44:ec:a4:ef:b6:3a:2d:67:8e:de:92:5b:41:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:B2:0D:B4:B5:7B:09:48:0E:AD:D7:F6:1E:C4:67:94:C8:91:57
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/j7yyDbS1ewlIDq3X9h7EZ5TIkVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.80.0/24
85.112.82.0-85.112.95.255
146.185.32.0/21
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
73:e4:67:f2:19:93:47:1f:90:ee:76:7e:78:7c:e2:09:b1:ef:
df:3d:65:d0:34:c4:40:c6:ee:1e:a9:c8:a1:a4:f8:6c:9e:e2:
50:ec:4a:9e:47:7c:d6:e1:9a:89:ad:9b:9e:ac:56:ec:7f:51:
f8:d4:ae:00:2a:17:28:e6:94:71:dd:56:01:31:a6:a4:21:02:
6e:14:bf:20:37:3c:24:e8:2d:5e:d9:02:b4:b0:cf:97:e2:29:
62:fd:6a:7f:5b:6d:88:89:e7:7a:42:7c:d6:3a:58:af:20:66:
79:99:e9:63:bc:52:d4:3a:f4:77:df:ce:ef:0f:23:29:0e:a6:
a1:5f:c2:4a:7c:19:ad:a1:7e:a9:f0:c0:26:b5:0e:81:93:a5:
67:54:93:46:f0:85:49:f9:73:35:88:b7:90:d8:0b:ab:41:69:
12:06:1d:52:80:05:15:90:f0:ac:97:85:c6:05:dd:59:bc:1b:
cb:17:0a:91:9c:63:37:21:82:c7:b7:a1:62:d3:ce:c2:88:87:
ec:4a:80:90:b8:b3:bb:65:c1:5c:7d:ab:37:51:f7:7c:b5:64:
59:24:8a:e4:8b:8e:a5:32:a0:2a:64:40:a1:a1:5f:9d:7f:5a:
9a:54:f4:04:d8:64:93:e7:e8:b4:94:3d:c2:6d:59:9d:44:df:
d7:bc:96:d0
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZL4LvtQZrG2K1UAVLZZjYdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj
MjVkODUwHhcNMjQxMTA0MTcxODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmJjYjIwZGI0YjU3YjA5NDgwZWFkZDdmNjFlYzQ2Nzk0Yzg5MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Ns5sFoWL//j4mM3sjz7VGVwBcQG
1BilGOFvFYEDRm+JqWnqi2JBhO4xUNpCbWTz/xD4TWAOfKW50q/7DZAf/Xq7r7vT
TMrueabQmMVKUvJcbcLMFZFR7Gx/W8QQ7Nr9iTbsNk9OfXtcJzYW2ccSqoNOs43Y
7SW1l8aBmNid4a60YJeQE6gasMctXAFUcsBQWLkDbE6nN5WlryOghGvHmGRcw3gJ
+5ygkMko9d3UeOr5QnrTbgmiPSQ76jTUtRiY7Jt2bhBr2h7Q9gOPgYy3xXmBKHVn
+O+AzIqdadkHOpXHNMjyW81/+RyjzH3sqjWQukTspO+2Oi1njt6SW0Eg4QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFI+8sg20tXsJSA6t1/YexGeUyJFXMB8GA1UdIwQY
MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt
MWVjZGUxNzkxNTExLzEvajd5eURiUzFld2xJRHEzWDloN0VaNVRJa1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx
LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBoQQCAAEwgZowDAME
AAU5AwMEAwU5AAMEA05soDAMAwQATmypAwQATmysAwQBTmyuAwQCVXBAMAwDBABV
cEUDBABVcEgwDAMEAVVwSgMEAFVwTgMEAFVwUDAMAwQBVXBSAwQFVXBAAwQDkrkg
AwQCuTY8MAwDBADUYoEDBAHUYoQwDAMEANRihwMEBdRigAMEBdXMQDAMAwQA1cxh
AwQH1cwAMA0EAgACMAcDBQMqABWAMA0GCSqGSIb3DQEBCwUAA4IBAQBz5GfyGZNH
H5Dudn54fOIJse/fPWXQNMRAxu4eqcihpPhsnuJQ7EqeR3zW4ZqJrZuerFbsf1H4
1K4AKhco5pRx3VYBMaakIQJuFL8gNzwk6C1e2QK0sM+X4ili/Wp/W22Iied6QnzW
OlivIGZ5meljvFLUOvR3387vDyMpDqahX8JKfBmtoX6p8MAmtQ6Bk6VnVJNG8IVJ
+XM1iLeQ2AurQWkSBh1SgAUVkPCsl4XGBd1ZvBvLFwqRnGM3IYLHt6Fi087CiIfs
SoCQuLO7ZcFcfas3Ufd8tWRZJIrki46lMqAqZEChoV+df1qaVPQE2GST5+i0lD3C
bVmdRN/XvJbQ
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:41 2024 by rpki-client on console-ams.rpki-client.org