Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/yElvuu05hQekbKJCChuRl9Zslig.roa
File: yElvuu05hQekbKJCChuRl9Zslig.roa (raw, json)
Hash identifier: DkFcmtd/qWbnHxLRRIMtdqb6SihTXAylbf7aoczmcpU=
Subject key identifier: C8:49:6F:BA:ED:39:85:07:A4:6C:A2:42:0A:1B:91:97:D6:6C:96:28
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 01976970ED50A2A023DECC71713CFF6DD6E0
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/yElvuu05hQekbKJCChuRl9Zslig.roa
Signing time: Fri 13 Jun 2025 13:18:17 +0000
ROA not before: Fri 13 Jun 2025 13:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211381
IP address blocks: 45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
45.147.196.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
81.91.179.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
185.203.240.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
185.224.132.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:70:ed:50:a2:a0:23:de:cc:71:71:3c:ff:6d:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jun 13 13:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8496fbaed398507a46ca2420a1b9197d66c9628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:29:5c:71:75:37:48:1f:c9:ba:eb:a8:ab:
cb:56:fe:36:e9:1c:f0:51:c9:cf:d4:10:51:4d:d1:
18:82:bf:d7:5a:a7:ea:2c:80:b0:76:28:7b:82:94:
f8:b0:34:76:22:e9:d7:da:8c:17:1b:88:85:e2:00:
1b:d4:ab:97:e0:9a:f8:10:be:54:1f:0d:17:d3:d6:
ff:e7:cb:5f:a3:82:7f:05:0c:ba:a2:1c:ba:ef:f5:
d2:08:91:9a:4b:75:a5:e3:7b:09:1f:e1:5a:48:ae:
77:1e:e7:63:09:fb:91:3d:b6:6c:dd:d0:d4:31:5c:
c5:11:54:6b:a1:9f:5c:90:21:df:9b:4c:5d:77:36:
82:4d:8e:34:e6:d1:92:61:d2:81:48:ce:5e:2f:00:
da:43:ac:50:2c:72:2d:07:87:0c:ee:c1:43:de:8b:
eb:e0:1d:ab:d3:19:a2:5e:56:a2:20:c5:d2:64:d5:
4c:89:03:19:74:cd:42:d8:c7:48:37:bf:d9:2d:49:
46:25:a3:d4:fa:07:b5:b2:28:30:04:cd:b3:24:d2:
1a:01:24:f6:58:1e:02:ff:21:56:eb:2f:46:4d:fa:
b1:3b:26:09:82:76:e8:ca:90:48:9f:a7:0f:94:0e:
50:e4:b8:9a:f5:ce:6c:06:ae:50:57:ff:28:e9:c5:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:6F:BA:ED:39:85:07:A4:6C:A2:42:0A:1B:91:97:D6:6C:96:28
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/yElvuu05hQekbKJCChuRl9Zslig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
45.147.196.0/24
77.83.175.0/24
81.91.179.0/24
91.211.248.0-91.211.250.255
92.119.114.0/24
95.215.204.0/24
95.215.206.0/23
185.203.240.0/23
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
185.224.132.0/24
185.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
65:65:e0:58:77:c9:20:45:64:36:d9:21:46:a3:fc:11:d4:95:
99:73:80:2a:16:7e:a2:f3:1c:cc:98:8b:40:9c:cd:1a:fd:65:
03:d2:35:05:14:73:62:3a:5b:60:c6:2e:5a:c6:6f:30:2c:f3:
64:0c:55:4f:d8:4a:d8:9c:ec:6f:16:82:67:14:6e:d0:ac:0a:
75:2f:2c:52:54:2f:64:9b:4f:85:6a:fc:a9:8b:95:27:1d:31:
48:f0:b0:27:32:70:30:73:30:32:34:f5:51:aa:0f:c7:e8:b4:
06:16:9f:46:69:a0:d7:e1:db:c2:78:6d:c3:28:02:fa:83:52:
f6:e2:a2:6c:7a:34:1c:53:16:6a:73:b2:1c:25:4e:f9:6c:09:
c9:a8:46:af:ed:8e:e0:90:5d:cb:fb:b0:ed:c8:6f:d9:e1:5f:
d2:c4:c7:22:03:01:ea:cc:9a:65:53:e1:71:01:ea:97:45:a7:
e4:6c:ed:c6:7d:ca:4f:a9:90:2b:f4:96:4e:80:fc:33:48:9b:
05:71:07:6f:e6:6f:60:c2:05:2e:2c:fd:b3:3f:09:fb:c4:1e:
c7:6e:f3:81:14:12:9d:8a:5d:25:30:29:99:46:95:12:5f:36:
ec:d6:22:4a:7e:d8:72:6f:06:42:30:be:9c:d4:dc:dc:bf:95:
51:15:2f:2e
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAZdpcO1QoqAj3sxxcTz/bdbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDM2OWU2NmNkYmUzMGQ3YjNhZmY2MDgxZjIwYzE3YTk4
ZmRjNWIwHhcNMjUwNjEzMTMxODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ5NmZiYWVkMzk4NTA3YTQ2Y2EyNDIwYTFiOTE5N2Q2NmM5NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUEpXHF1N0gfybrrqKvLVv426Rzw
UcnP1BBRTdEYgr/XWqfqLICwdih7gpT4sDR2IunX2owXG4iF4gAb1KuX4Jr4EL5U
Hw0X09b/58tfo4J/BQy6ohy67/XSCJGaS3Wl43sJH+FaSK53HudjCfuRPbZs3dDU
MVzFEVRroZ9ckCHfm0xddzaCTY405tGSYdKBSM5eLwDaQ6xQLHItB4cM7sFD3ovr
4B2r0xmiXlaiIMXSZNVMiQMZdM1C2MdIN7/ZLUlGJaPU+ge1sigwBM2zJNIaAST2
WB4C/yFW6y9GTfqxOyYJgnboypBIn6cPlA5Q5Lia9c5sBq5QV/8o6cWmHQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFMhJb7rtOYUHpGyiQgobkZfWbJYoMB8GA1UdIwQY
MBaAFMHTaeZs2+MNezr/YIHyDBepj9xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUt
YTYzNDc5NjEwOTY4LzEveUVsdnV1MDVoUWVrYktKQ0NodVJsOVpzbGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUtYTYzNDc5NjEwOTY4
LzEvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAtWEwD
BAAtWGkwDAMEAy1byAMEAC1bygMEAC2EawMEAC2TxAMEAE1TrwMEAFFbszAMAwQD
W9P4AwQAW9P6AwQAXHdyAwQAX9fMAwQBX9fOAwQBucvwAwQBudEUAwQAudtRAwQA
udtTAwQAueCEAwQAuedFMA0GCSqGSIb3DQEBCwUAA4IBAQBlZeBYd8kgRWQ22SFG
o/wR1JWZc4AqFn6i8xzMmItAnM0a/WUD0jUFFHNiOltgxi5axm8wLPNkDFVP2ErY
nOxvFoJnFG7QrAp1LyxSVC9km0+Favypi5UnHTFI8LAnMnAwczAyNPVRqg/H6LQG
Fp9GaaDX4dvCeG3DKAL6g1L24qJsejQcUxZqc7IcJU75bAnJqEav7Y7gkF3L+7Dt
yG/Z4V/SxMciAwHqzJplU+FxAeqXRafkbO3GfcpPqZAr9JZOgPwzSJsFcQdv5m9g
wgUuLP2zPwn7xB7HbvOBFBKdil0lMCmZRpUSXzbs1iJKfthybwZCML6c1Nzcv5VR
FS8u
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:03:59 2025 by rpki-client