Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2ddGFXb3_lcITnhma10B2Fwu1gA.roa
File: 2ddGFXb3_lcITnhma10B2Fwu1gA.roa (raw, json)
Hash identifier: zWAwh82W266CqBoxMkvaMkzmsJJV17CJraUxBCR4XrE=
Subject key identifier: D9:D7:46:15:76:F7:FE:57:08:4E:78:66:6B:5D:01:D8:5C:2E:D6:00
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019720F01880D72D5FBAAD2770A438994251
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2ddGFXb3_lcITnhma10B2Fwu1gA.roa
Signing time: Fri 30 May 2025 11:24:55 +0000
ROA not before: Fri 30 May 2025 11:24:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210415
IP address blocks: 2.59.192.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.10.104.0/23 maxlen: 23
45.80.80.0/24 maxlen: 24
45.137.12.0/23 maxlen: 24
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
89.42.113.0/24 maxlen: 24
91.132.30.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.226.192.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
201.49.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:f0:18:80:d7:2d:5f:ba:ad:27:70:a4:38:99:42:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 30 11:24:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d7461576f7fe57084e78666b5d01d85c2ed600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:78:92:3c:a4:93:8e:e7:96:b9:e5:49:67:
b6:72:03:42:46:02:e1:5c:7a:b7:d5:ac:92:7c:89:
4d:c6:7d:aa:c7:80:45:9c:d5:9d:78:fe:0c:f7:cf:
ba:4f:80:76:d0:2d:48:cd:2d:e1:db:c8:f4:de:1d:
47:8d:2e:30:5a:d3:36:e4:d1:ac:b5:4e:b6:a7:e7:
d1:1a:51:95:02:77:3c:18:2d:d7:ca:7c:7a:a6:c9:
2b:7d:e8:98:43:e8:83:f5:d0:0c:df:a3:1b:bd:31:
1f:11:8e:78:3e:98:b5:a9:ff:9e:65:4b:a6:fd:32:
a0:d9:b9:7e:dd:5d:82:eb:3e:2e:40:b5:79:27:d1:
44:97:f9:19:bc:98:9e:1d:d5:fe:10:26:01:45:a1:
83:c1:4c:2c:13:78:e1:af:93:39:58:d9:78:00:f4:
8b:01:de:a5:ae:62:61:8b:c5:4a:85:42:d2:f5:fc:
09:f9:ea:6f:38:ef:21:4c:bb:cf:c2:3e:1d:1a:52:
2f:7a:70:51:9b:98:8f:4e:03:6c:59:67:6c:b6:5e:
ab:81:d8:d0:0b:d4:19:d3:29:f6:6a:25:6c:fc:a8:
4a:6e:84:10:6e:2e:1d:b9:b1:51:9c:52:ac:db:a6:
05:c9:2a:68:86:da:b4:c6:34:66:af:4d:6e:27:fa:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:46:15:76:F7:FE:57:08:4E:78:66:6B:5D:01:D8:5C:2E:D6:00
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2ddGFXb3_lcITnhma10B2Fwu1gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/24
2.59.195.0/24
31.15.7.0/24
45.10.104.0/23
45.80.80.0/24
45.137.12.0/23
45.137.139.0/24
45.145.135.0/24
80.66.125.0/24
89.42.113.0/24
91.132.30.0/24
178.19.42.0/24
185.226.192.0/24
185.246.15.0/24
201.49.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:25:88:2b:e4:6a:8d:4f:f3:43:ee:eb:de:8a:d7:2f:ef:b6:
5d:08:3b:ab:b2:85:70:7f:dd:d1:23:ff:3b:28:15:e1:40:35:
ff:51:14:e3:a0:9e:29:93:cc:1f:80:23:71:72:83:4c:ca:b6:
a1:e7:17:b2:cf:1f:c2:ad:ea:be:dd:2f:91:f3:55:2a:48:cf:
5b:5f:03:59:ff:43:69:e2:ad:26:c2:e2:12:c2:e2:76:8f:19:
e9:69:df:a7:b7:59:ea:bf:08:79:97:83:a0:87:98:d1:be:46:
95:13:64:1d:f4:3e:f2:29:51:d4:52:64:26:c4:93:04:3d:58:
88:ef:59:3e:29:2f:bf:2b:8c:b0:af:e4:6c:c3:15:71:0c:91:
ac:a6:02:fe:1d:b5:3b:0e:71:ac:b3:b0:36:8e:af:57:f1:b5:
db:57:2b:a4:15:3d:f5:24:23:ae:a7:19:0d:dd:46:8d:4f:a9:
32:2a:62:d2:31:35:b0:8d:06:97:8d:80:5d:2b:2e:1b:a4:83:
37:60:65:cf:e5:d7:cb:23:8c:00:ac:a0:b6:43:f3:18:46:2f:
4f:e9:b0:87:62:5b:04:ba:20:85:c8:1d:07:5c:74:d6:75:1b:
d5:f3:c2:ce:af:e9:a6:e0:10:bb:15:31:c8:7e:7f:2d:3b:5c:
c6:50:d8:a4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZcg8BiA1y1fuq0ncKQ4mUJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwNTMwMTEyNDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWQ3NDYxNTc2ZjdmZTU3MDg0ZTc4NjY2YjVkMDFkODVjMmVkNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lJ4kjykk47nlrnlSWe2cgNCRgLh
XHq31aySfIlNxn2qx4BFnNWdeP4M98+6T4B20C1IzS3h28j03h1HjS4wWtM25NGs
tU62p+fRGlGVAnc8GC3Xynx6pskrfeiYQ+iD9dAM36MbvTEfEY54Ppi1qf+eZUum
/TKg2bl+3V2C6z4uQLV5J9FEl/kZvJieHdX+ECYBRaGDwUwsE3jhr5M5WNl4APSL
Ad6lrmJhi8VKhULS9fwJ+epvOO8hTLvPwj4dGlIvenBRm5iPTgNsWWdstl6rgdjQ
C9QZ0yn2aiVs/KhKboQQbi4dubFRnFKs26YFySpohtq0xjRmr01uJ/p0GwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFNnXRhV29/5XCE54ZmtdAdhcLtYAMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvMmRkR0ZYYjNfbGNJVG5obWExMEIyRnd1MWdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAAjvAAwQA
AjvDAwQAHw8HAwQBLQpoAwQALVBQAwQBLYkMAwQALYmLAwQALZGHAwQAUEJ9AwQA
WSpxAwQAW4QeAwQAshMqAwQAueLAAwQAufYPAwQAyTG8MA0GCSqGSIb3DQEBCwUA
A4IBAQA/JYgr5GqNT/ND7uveitcv77ZdCDursoVwf93RI/87KBXhQDX/URTjoJ4p
k8wfgCNxcoNMyrah5xeyzx/Creq+3S+R81UqSM9bXwNZ/0Np4q0mwuISwuJ2jxnp
ad+nt1nqvwh5l4Ogh5jRvkaVE2Qd9D7yKVHUUmQmxJMEPViI71k+KS+/K4ywr+Rs
wxVxDJGspgL+HbU7DnGss7A2jq9X8bXbVyukFT31JCOupxkN3UaNT6kyKmLSMTWw
jQaXjYBdKy4bpIM3YGXP5dfLI4wArKC2Q/MYRi9P6bCHYlsEuiCFyB0HXHTWdRvV
88LOr+mm4BC7FTHIfn8tO1zGUNik
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:42:47 2025 by rpki-client