Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/ayyHxivjLEoLFlxHs79jNQaOed8.roa
File: ayyHxivjLEoLFlxHs79jNQaOed8.roa (raw, json)
Hash identifier: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=
Subject key identifier: 6B:2C:87:C6:2B:E3:2C:4A:0B:16:5C:47:B3:BF:63:35:06:8E:79:DF
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0196E1E6530F481224D14B171CD90009585B
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/ayyHxivjLEoLFlxHs79jNQaOed8.roa
Signing time: Sun 18 May 2025 05:38:10 +0000
ROA not before: Sun 18 May 2025 05:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48492
IP address blocks: 185.75.224.0/22 maxlen: 24
185.181.108.0/22 maxlen: 24
185.187.204.0/22 maxlen: 24
2a0d:4f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:e6:53:0f:48:12:24:d1:4b:17:1c:d9:00:09:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: May 18 05:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2c87c62be32c4a0b165c47b3bf6335068e79df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:6f:88:21:52:c1:a4:aa:73:99:72:93:f3:
79:4b:38:07:ae:73:50:ef:94:d2:79:82:fd:44:6c:
e1:e1:6a:48:f7:25:9b:c1:b6:54:67:9a:34:b2:c0:
54:6b:51:6a:af:59:77:59:7a:28:54:ea:f4:5c:45:
92:26:fa:11:67:07:75:99:d6:fa:2a:89:e2:86:4d:
e4:d7:e4:03:f9:96:c5:fc:4a:f8:dd:c5:29:32:73:
62:4f:4e:c6:e4:2d:1e:70:1e:26:ad:51:09:9e:1b:
06:dd:c7:43:39:a4:0d:d8:1c:80:46:1a:7d:9c:0c:
45:18:b6:a9:be:26:26:6d:ab:24:2e:b2:5a:1d:e1:
07:1b:77:23:37:af:17:90:0d:98:68:82:19:4b:da:
96:4d:5f:c1:95:2e:ca:77:40:2c:46:44:b2:fa:4b:
14:e6:e3:d2:90:d6:32:05:00:89:63:b2:04:04:a7:
c7:25:34:bb:0f:1d:e1:95:0f:19:de:44:3f:b8:3a:
b7:aa:40:e7:2a:73:11:34:9a:bf:68:e3:3f:36:40:
a4:5d:be:d4:0d:0a:f2:e3:c5:16:d9:6c:f0:7f:70:
2d:65:1f:c4:0d:62:ed:40:6f:63:e7:50:5f:1e:bf:
4c:8b:0e:e7:6d:ce:f9:08:49:1b:1c:48:94:36:f9:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2C:87:C6:2B:E3:2C:4A:0B:16:5C:47:B3:BF:63:35:06:8E:79:DF
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/ayyHxivjLEoLFlxHs79jNQaOed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.224.0/22
185.181.108.0/22
185.187.204.0/22
IPv6:
2a0d:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
8d:15:67:69:f7:b0:81:af:de:5f:06:bc:3b:f6:c3:28:09:2a:
7c:03:93:ef:38:7f:4e:23:60:19:d3:85:39:2a:a4:dc:98:57:
d1:ce:82:82:14:cd:a4:94:f9:5f:f8:6e:fe:ad:d4:d1:80:e9:
bd:7d:28:3a:68:6c:74:44:79:f4:13:3e:3d:8d:3e:c0:38:72:
99:52:56:26:fe:46:82:aa:ef:52:0d:c4:4c:2d:bd:13:96:00:
94:0f:c6:7c:68:60:56:e9:14:6c:0c:5b:c4:8d:1d:cc:3d:d1:
82:ca:c3:48:d9:62:93:ba:4f:da:96:4d:4a:ef:b8:61:54:26:
d6:5e:0c:01:bb:f8:c7:8a:cf:48:b9:6c:a5:83:38:49:71:f6:
45:e7:7d:1d:13:58:88:5f:b7:cc:8b:fe:40:de:c0:1a:1c:98:
ee:06:c6:c3:6b:02:58:b2:aa:8c:7e:fc:a4:84:b8:c2:b2:4a:
5a:39:c4:eb:e3:8d:7f:f4:4c:35:97:d1:a9:8e:18:fc:09:49:
54:e5:66:50:c4:c1:c0:fc:2d:f8:01:b4:8e:a3:9f:07:f0:28:
75:67:57:3e:79:9c:76:e7:1c:4b:5b:78:93:69:5e:2f:64:fb:
73:39:4c:87:bd:88:a3:ca:4f:e1:42:a1:23:6a:37:65:e4:51:
71:43:0d:70
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZbh5lMPSBIk0UsXHNkACVhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjUwNTE4MDUzODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjJjODdjNjJiZTMyYzRhMGIxNjVjNDdiM2JmNjMzNTA2OGU3OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tJviCFSwaSqc5lyk/N5SzgHrnNQ
75TSeYL9RGzh4WpI9yWbwbZUZ5o0ssBUa1Fqr1l3WXooVOr0XEWSJvoRZwd1mdb6
Konihk3k1+QD+ZbF/Er43cUpMnNiT07G5C0ecB4mrVEJnhsG3cdDOaQN2ByARhp9
nAxFGLapviYmbaskLrJaHeEHG3cjN68XkA2YaIIZS9qWTV/BlS7Kd0AsRkSy+ksU
5uPSkNYyBQCJY7IEBKfHJTS7Dx3hlQ8Z3kQ/uDq3qkDnKnMRNJq/aOM/NkCkXb7U
DQry48UW2Wzwf3AtZR/EDWLtQG9j51BfHr9Miw7nbc75CEkbHEiUNvmTDwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGssh8Yr4yxKCxZcR7O/YzUGjnnfMB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvYXl5SHhpdmpMRW9MRmx4SHM3OWpOUWFPZWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUvgAwQC
ubVsAwQCubvMMA0EAgACMAcDBQMqDU8AMA0GCSqGSIb3DQEBCwUAA4IBAQCNFWdp
97CBr95fBrw79sMoCSp8A5PvOH9OI2AZ04U5KqTcmFfRzoKCFM2klPlf+G7+rdTR
gOm9fSg6aGx0RHn0Ez49jT7AOHKZUlYm/kaCqu9SDcRMLb0TlgCUD8Z8aGBW6RRs
DFvEjR3MPdGCysNI2WKTuk/alk1K77hhVCbWXgwBu/jHis9IuWylgzhJcfZF530d
E1iIX7fMi/5A3sAaHJjuBsbDawJYsqqMfvykhLjCskpaOcTr441/9Ew1l9Gpjhj8
CUlU5WZQxMHA/C34AbSOo58H8Ch1Z1c+eZx25xxLW3iTaV4vZPtzOUyHvYijyk/h
QqEjajdl5FFxQw1w
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:45 2025 by rpki-client