Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RNYWrQyBmHgzAnEm45rMxQFXMNM.roa
File: RNYWrQyBmHgzAnEm45rMxQFXMNM.roa (raw, json)
Hash identifier: PTviSvgSLYRpcxfYYKXLQ9hSdURNyzrhFfWzswFrDBc=
Subject key identifier: 44:D6:16:AD:0C:81:98:78:33:02:71:26:E3:9A:CC:C5:01:57:30:D3
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019548B201CC9877FB1638B6926FD4232CED
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RNYWrQyBmHgzAnEm45rMxQFXMNM.roa
Signing time: Thu 27 Feb 2025 18:36:20 +0000
ROA not before: Thu 27 Feb 2025 18:36:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 45.80.80.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/20 maxlen: 20
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
91.132.28.0/23 maxlen: 23
91.132.31.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.203.20.0/22 maxlen: 22
185.203.20.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/22 maxlen: 22
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:b2:01:cc:98:77:fb:16:38:b6:92:6f:d4:23:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 27 18:36:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d616ad0c81987833027126e39accc5015730d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:6e:f3:5c:75:99:0a:9c:3d:43:f7:98:55:
1b:88:36:50:38:cb:c9:e3:ca:a0:b0:ce:e2:39:16:
e9:2c:10:3c:de:c9:13:c2:f6:2d:c1:f1:7d:5b:ea:
ff:77:16:c1:9f:06:d6:1f:b4:5e:8c:90:7c:d4:47:
f9:02:54:cd:5f:4d:91:cd:d0:47:97:9a:95:75:2c:
bb:b3:7c:a3:6b:e8:da:cd:6d:8e:1f:8c:31:46:95:
33:b9:ef:b5:05:a2:db:9a:4c:2b:93:57:45:a6:d8:
37:10:e8:30:05:3c:30:d5:ca:a6:ed:85:13:b5:06:
a1:82:a1:d7:ee:5d:72:8d:9a:e9:e3:3a:4c:82:87:
56:c1:92:4a:60:4c:61:26:b3:bb:ea:0a:64:89:46:
37:71:c1:7a:30:8d:66:2f:06:b7:fd:31:52:dc:fa:
05:6e:50:df:b1:1b:99:e4:67:70:95:c1:e0:0a:f9:
76:ea:70:cd:30:95:49:94:69:99:6c:29:ea:2d:cc:
a0:f6:76:af:db:bc:40:04:2e:a7:43:07:53:55:95:
66:e2:69:65:7b:3e:8c:b8:0c:d0:66:02:95:ac:33:
5f:e2:1d:cf:b8:fd:1a:41:fc:a5:af:cc:76:c4:dd:
e6:85:c1:e4:f8:4c:e9:02:4f:1d:86:35:c9:9e:79:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D6:16:AD:0C:81:98:78:33:02:71:26:E3:9A:CC:C5:01:57:30:D3
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RNYWrQyBmHgzAnEm45rMxQFXMNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.83.50.0/23
80.66.112.0/20
89.42.70.0/24
89.44.150.0/23
91.132.28.0/23
91.132.31.0/24
94.198.47.0/24
178.19.44.0/24
178.19.47.0/24
185.203.20.0/22
185.229.212.0/22
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.146.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:3c:95:b5:a0:8e:9e:bd:8b:66:d6:e2:4c:65:f4:b9:1f:8b:
02:7e:37:6d:15:ba:c0:34:08:44:cb:d8:3c:10:71:29:6e:fb:
09:4f:86:be:4f:5c:ac:18:4b:5f:94:11:a2:76:cb:a2:2f:cf:
47:cb:e0:11:5f:52:e2:91:ee:ad:cf:c3:c2:de:0f:18:6a:40:
5f:73:f9:65:42:d4:71:9a:59:ce:2e:e1:c1:3b:88:62:ab:63:
4c:e6:be:80:97:c7:49:7b:e4:ba:65:9d:58:84:ed:56:c9:9e:
45:9c:a7:ee:bb:94:e7:61:84:ac:ea:e3:0b:21:bc:ab:1f:a3:
76:d0:1c:b1:49:d9:d1:0d:ba:85:f7:a9:f1:d1:b9:4c:73:a6:
73:cb:b3:d3:24:c6:33:86:80:ac:6f:00:c0:02:eb:64:c7:cc:
d0:1f:b1:be:b0:96:26:c0:e7:7a:53:cd:c8:aa:e2:1d:65:63:
87:e7:a3:8c:30:7d:eb:9f:57:aa:7e:05:55:f2:4b:ff:43:74:
d3:dd:c6:48:cb:0d:da:06:25:55:b2:8c:44:20:83:00:43:52:
38:7b:7e:2b:d9:1a:78:3d:af:5a:67:19:2d:44:87:d2:99:ea:
fd:52:79:ac:95:aa:2c:3f:0f:ab:8d:19:0f:49:0d:f8:2c:32:
3b:f9:06:00
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZVIsgHMmHf7Fji2km/UIyztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMjI3MTgzNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQ2MTZhZDBjODE5ODc4MzMwMjcxMjZlMzlhY2NjNTAxNTczMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Ju81x1mQqcPUP3mFUbiDZQOMvJ
48qgsM7iORbpLBA83skTwvYtwfF9W+r/dxbBnwbWH7RejJB81Ef5AlTNX02RzdBH
l5qVdSy7s3yja+jazW2OH4wxRpUzue+1BaLbmkwrk1dFptg3EOgwBTww1cqm7YUT
tQahgqHX7l1yjZrp4zpMgodWwZJKYExhJrO76gpkiUY3ccF6MI1mLwa3/TFS3PoF
blDfsRuZ5GdwlcHgCvl26nDNMJVJlGmZbCnqLcyg9nav27xABC6nQwdTVZVm4mll
ez6MuAzQZgKVrDNf4h3PuP0aQfylr8x2xN3mhcHk+EzpAk8dhjXJnnnufwIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFETWFq0MgZh4MwJxJuOazMUBVzDTMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvUk5ZV3JReUJtSGd6QW5FbTQ1ck14UUZYTU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAC1QUAME
AS1TMgMEBFBCcAMEAFkqRgMEAVkslgMEAVuEHAMEAFuEHwMEAF7GLwMEALITLAME
ALITLwMEArnLFAMEArnl1AMEALnyrwMEAMGy1AMEAMGy2gMEAMG6AQMEAMG6CwME
AMIPkgMEAMIPwzANBgkqhkiG9w0BAQsFAAOCAQEAfzyVtaCOnr2LZtbiTGX0uR+L
An43bRW6wDQIRMvYPBBxKW77CU+Gvk9crBhLX5QRonbLoi/PR8vgEV9S4pHurc/D
wt4PGGpAX3P5ZULUcZpZzi7hwTuIYqtjTOa+gJfHSXvkumWdWITtVsmeRZyn7ruU
52GErOrjCyG8qx+jdtAcsUnZ0Q26hfep8dG5THOmc8uz0yTGM4aArG8AwALrZMfM
0B+xvrCWJsDnelPNyKriHWVjh+ejjDB9659Xqn4FVfJL/0N0093GSMsN2gYlVbKM
RCCDAENSOHt+K9kaeD2vWmcZLUSH0pnq/VJ5rJWqLD8Pq40ZD0kN+CwyO/kGAA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:32 2025 by rpki-client