Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/YYwtX3P0yGCJViTC7uI-bzw7h5Q.roa
File: YYwtX3P0yGCJViTC7uI-bzw7h5Q.roa (raw, json)
Hash identifier: w8bsd550cGKr8fg5rklnveAULdF7O1060+WO2Tdgyv8=
Subject key identifier: 61:8C:2D:5F:73:F4:C8:60:89:56:24:C2:EE:E2:3E:6F:3C:3B:87:94
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 0190016274BA1C9917128207F4563D206722
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/YYwtX3P0yGCJViTC7uI-bzw7h5Q.roa
Signing time: Mon 10 Jun 2024 09:02:27 +0000
ROA not before: Mon 10 Jun 2024 09:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41798
IP address blocks: 2.57.96.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
37.17.176.0/21 maxlen: 21
37.17.176.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.208.40.0/21 maxlen: 21
37.208.40.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.43.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
45.140.24.0/23 maxlen: 23
45.140.24.0/24 maxlen: 24
45.140.25.0/24 maxlen: 24
87.255.202.0/23 maxlen: 23
87.255.202.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.204.0/22 maxlen: 22
87.255.204.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.208.0/20 maxlen: 20
87.255.208.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.213.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
91.185.0.0/19 maxlen: 19
91.185.0.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.246.80.0/20 maxlen: 20
91.246.80.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.96.0/21 maxlen: 21
91.246.96.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
94.141.224.0/20 maxlen: 20
94.141.224.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.240.0/22 maxlen: 22
94.141.240.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.248.0/22 maxlen: 22
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
146.19.255.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.227.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.240.0/22 maxlen: 22
176.98.240.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
178.22.168.0/21 maxlen: 21
178.22.168.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
185.187.17.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
193.111.175.0/24 maxlen: 24
194.26.239.0/24 maxlen: 24
212.23.218.0/24 maxlen: 24
212.46.53.0/24 maxlen: 24
2a00:ab40::/32 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:62:74:ba:1c:99:17:12:82:07:f4:56:3d:20:67:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Jun 10 09:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=618c2d5f73f4c860895624c2eee23e6f3c3b8794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:d5:93:d1:94:2f:62:19:49:0d:b0:13:fe:
97:a4:b1:07:bb:e0:e6:a0:9e:c6:23:7d:0e:73:38:
95:dd:48:ae:e2:1f:fd:8c:9d:0a:bb:65:4b:0d:32:
ff:a7:8d:45:67:7c:48:8b:80:75:81:f8:86:a8:7d:
28:1f:47:99:1c:ed:56:a3:09:d3:b5:80:08:81:8c:
5f:2c:6e:b1:37:ef:f8:84:d9:25:7b:75:1f:99:55:
a4:5d:a1:0a:f8:92:f7:44:dd:4b:75:98:de:fe:37:
29:a6:95:33:b8:e7:64:fb:38:50:77:dd:aa:6a:d0:
2c:24:62:5f:06:c0:84:d5:59:3d:a8:4f:d4:8a:a8:
14:43:b1:f7:22:c1:64:dc:28:ab:67:3c:ca:dc:1b:
63:c3:0a:e3:5c:d7:fe:ed:18:fb:50:96:17:ff:bd:
d6:2f:d1:67:ce:f1:4f:05:d5:55:c0:9a:bd:de:bd:
9c:9f:00:37:fc:d8:d9:4b:39:67:f1:b4:af:67:88:
b4:53:a4:a8:b6:28:9e:2c:ab:da:95:c3:cc:d7:c0:
13:f8:14:2e:81:4e:93:6d:52:b4:9b:53:4f:dd:8d:
5a:f6:96:04:fb:0c:66:58:da:16:0c:17:8e:37:4a:
18:c8:15:95:74:9a:3b:94:fb:64:c2:1b:be:49:35:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8C:2D:5F:73:F4:C8:60:89:56:24:C2:EE:E2:3E:6F:3C:3B:87:94
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/YYwtX3P0yGCJViTC7uI-bzw7h5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
45.140.24.0/23
87.255.202.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
146.19.255.0/24
176.98.224.0-176.98.243.255
178.22.168.0/21
185.187.17.0/24
193.104.253.0/24
193.111.175.0/24
194.26.239.0/24
212.23.218.0/24
212.46.53.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
95:c7:70:36:9e:c5:b4:ca:40:5f:60:a0:bb:d4:41:fd:f8:6d:
c4:81:98:0a:58:66:ac:c2:b8:f6:7d:ea:b7:07:fc:3b:21:00:
e1:4d:10:c6:dd:18:9e:74:b1:28:be:bd:52:d5:57:82:e1:83:
81:3e:e2:93:67:bb:68:02:5d:67:9f:b3:66:ea:89:7e:cc:7c:
36:2e:6d:20:54:74:a5:56:7c:70:2a:8b:cd:0b:97:60:2e:da:
a3:c3:e2:c0:70:8a:c3:13:fa:05:07:f1:b0:03:c1:37:53:4c:
f2:6f:47:94:f9:ed:ed:55:0b:23:51:a9:ee:13:08:83:5e:79:
73:86:67:1f:f4:a8:0a:0b:1b:a0:3f:c7:1b:1e:7c:97:2a:8c:
e7:37:4b:7e:a6:7f:52:18:94:73:ff:65:fd:91:48:14:22:15:
94:82:e8:61:91:ec:d7:70:ae:27:d3:54:19:77:0e:cc:e7:f7:
07:e0:36:b6:2e:7d:ec:e2:e0:73:09:57:ff:b7:74:08:1d:cb:
23:9d:43:19:83:e7:ab:e5:83:56:8a:b9:e9:8f:98:22:9d:2f:
dc:07:4f:a9:27:10:16:33:30:1c:53:b9:b7:ef:25:9a:3e:2a:
04:b8:52:79:c2:f4:6f:ac:b0:a0:e3:06:42:86:52:e1:c9:be:
c4:ec:bd:11
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZABYnS6HJkXEoIH9FY9IGciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx
NjYxOGQwHhcNMjQwNjEwMDkwMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MThjMmQ1ZjczZjRjODYwODk1NjI0YzJlZWUyM2U2ZjNjM2I4Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJzVk9GUL2IZSQ2wE/6XpLEHu+Dm
oJ7GI30OcziV3Uiu4h/9jJ0Ku2VLDTL/p41FZ3xIi4B1gfiGqH0oH0eZHO1WownT
tYAIgYxfLG6xN+/4hNkle3UfmVWkXaEK+JL3RN1LdZje/jcpppUzuOdk+zhQd92q
atAsJGJfBsCE1Vk9qE/UiqgUQ7H3IsFk3CirZzzK3BtjwwrjXNf+7Rj7UJYX/73W
L9FnzvFPBdVVwJq93r2cnwA3/NjZSzln8bSvZ4i0U6SotiieLKvalcPM18AT+BQu
gU6TbVK0m1NP3Y1a9pYE+wxmWNoWDBeON0oYyBWVdJo7lPtkwhu+STWg9wIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFGGMLV9z9MhgiVYkwu7iPm88O4eUMB8GA1UdIwQY
MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt
OGNmOWQ1MGFkZjI5LzEvWVl3dFgzUDB5R0NKVmlUQzd1SS1ienc3aDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5
LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG4BggrBgEFBQcBBwEB/wSBqDCBpTCBkwQCAAEwgYwDBAIC
OWADBAMlEbADBAMl0CgDBAEtjBgwDAMEAVf/ygMEBVf/wAMEBVu5ADAMAwQEW/ZQ
AwQDW/ZgMAwDBAVejeADBAJejfADBAJejfgDBACSE/8wDAMEBbBi4AMEArBi8AME
A7IWqAMEALm7EQMEAMFo/QMEAMFvrwMEAMIa7wMEANQX2gMEANQuNTANBAIAAjAH
AwUAKgCrQDANBgkqhkiG9w0BAQsFAAOCAQEAlcdwNp7FtMpAX2Cgu9RB/fhtxIGY
ClhmrMK49n3qtwf8OyEA4U0Qxt0YnnSxKL69UtVXguGDgT7ik2e7aAJdZ5+zZuqJ
fsx8Ni5tIFR0pVZ8cCqLzQuXYC7ao8PiwHCKwxP6BQfxsAPBN1NM8m9HlPnt7VUL
I1Gp7hMIg155c4ZnH/SoCgsboD/HGx58lyqM5zdLfqZ/UhiUc/9l/ZFIFCIVlILo
YZHs13CuJ9NUGXcOzOf3B+A2ti597OLgcwlX/7d0CB3LI51DGYPnq+WDVoq56Y+Y
Ip0v3AdPqScQFjMwHFO5t+8lmj4qBLhSecL0b6ywoOMGQoZS4cm+xOy9EQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:02 2024 by rpki-client on console-fra.rpki-client.org