Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/raKsGhTlSRWQMWRm6Wn27tm3Cb4.roa
File: raKsGhTlSRWQMWRm6Wn27tm3Cb4.roa (raw, json)
Hash identifier: I4OBFbZZGC0w5I2m/kl44FUeB7dXwpuLeB9e6Z5z4ZA=
Subject key identifier: AD:A2:AC:1A:14:E5:49:15:90:31:64:66:E9:69:F6:EE:D9:B7:09:BE
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0194B5967F38F7F77C50B5AAF6C4DAECAF3F
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/raKsGhTlSRWQMWRm6Wn27tm3Cb4.roa
Signing time: Thu 30 Jan 2025 05:02:06 +0000
ROA not before: Thu 30 Jan 2025 05:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
46.235.88.0/23 maxlen: 23
46.235.90.0/23 maxlen: 23
46.235.91.0/24 maxlen: 24
46.235.92.0/23 maxlen: 23
46.235.94.0/23 maxlen: 23
46.235.94.0/24 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
88.85.224.0/21 maxlen: 21
88.85.224.0/23 maxlen: 23
88.85.226.0/23 maxlen: 23
88.85.228.0/23 maxlen: 23
88.85.228.0/24 maxlen: 24
88.85.230.0/23 maxlen: 23
88.85.231.0/24 maxlen: 24
88.85.232.0/21 maxlen: 21
88.85.232.0/24 maxlen: 24
88.85.235.0/24 maxlen: 24
88.85.236.0/24 maxlen: 24
88.85.237.0/24 maxlen: 24
88.85.238.0/23 maxlen: 23
88.85.238.0/24 maxlen: 24
88.85.239.0/24 maxlen: 24
88.85.240.0/21 maxlen: 21
88.85.240.0/23 maxlen: 23
88.85.242.0/24 maxlen: 24
88.85.244.0/24 maxlen: 24
88.85.245.0/24 maxlen: 24
88.85.246.0/23 maxlen: 23
88.85.247.0/24 maxlen: 24
88.85.248.0/21 maxlen: 21
88.85.248.0/23 maxlen: 23
88.85.250.0/23 maxlen: 23
88.85.250.0/24 maxlen: 24
88.85.252.0/23 maxlen: 23
88.85.254.0/24 maxlen: 24
88.85.255.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.32.0/24 maxlen: 24
176.98.33.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.34.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
176.241.184.0/23 maxlen: 23
176.241.186.0/23 maxlen: 23
176.241.188.0/24 maxlen: 24
176.241.189.0/24 maxlen: 24
176.241.190.0/24 maxlen: 24
176.241.191.0/24 maxlen: 24
178.20.144.0/21 maxlen: 24
178.20.144.0/23 maxlen: 23
178.20.146.0/23 maxlen: 23
178.20.148.0/23 maxlen: 23
178.20.150.0/23 maxlen: 23
185.10.112.0/22 maxlen: 24
185.10.112.0/24 maxlen: 24
185.10.113.0/24 maxlen: 24
185.10.114.0/23 maxlen: 23
185.10.114.0/24 maxlen: 24
185.10.115.0/24 maxlen: 24
185.72.102.0/24 maxlen: 24
185.149.193.0/24 maxlen: 24
185.224.252.0/22 maxlen: 24
185.224.252.0/23 maxlen: 23
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/23 maxlen: 23
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.160.0/23 maxlen: 23
212.12.160.0/24 maxlen: 24
212.12.161.0/24 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.162.0/24 maxlen: 24
212.12.163.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.164.0/24 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.167.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.168.0/24 maxlen: 24
212.12.169.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.170.0/24 maxlen: 24
212.12.171.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.174.0/23 maxlen: 23
212.12.175.0/24 maxlen: 24
212.12.176.0/20 maxlen: 20
212.12.176.0/23 maxlen: 23
212.12.178.0/23 maxlen: 23
212.12.180.0/23 maxlen: 23
212.12.182.0/23 maxlen: 23
212.12.182.0/24 maxlen: 24
212.12.183.0/24 maxlen: 24
212.12.184.0/23 maxlen: 23
212.12.185.0/24 maxlen: 24
212.12.186.0/23 maxlen: 23
212.12.187.0/24 maxlen: 24
212.12.188.0/23 maxlen: 23
212.12.189.0/24 maxlen: 24
212.12.190.0/23 maxlen: 23
212.108.85.0/24 maxlen: 24
2a00:1560::/32 maxlen: 32
2a00:1560:4::/47 maxlen: 47
2a00:1560:5::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
2a00:1560:17::/48 maxlen: 48
2a00:1560:18::/48 maxlen: 48
2a00:1560:60::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:96:7f:38:f7:f7:7c:50:b5:aa:f6:c4:da:ec:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jan 30 05:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ada2ac1a14e5491590316466e969f6eed9b709be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:9e:6b:dc:b2:88:fc:e1:17:c8:c3:74:7b:
7a:54:45:ea:dd:0e:56:67:a9:a9:d9:33:f0:bf:92:
d7:df:58:01:e2:3e:2a:3b:e0:52:2c:ea:44:79:d8:
ad:91:f5:17:59:94:7c:a6:15:4a:95:d0:17:89:f7:
f5:89:93:73:cc:ed:ec:fc:ac:ae:53:4c:94:85:ed:
f0:8c:a0:eb:57:90:f3:c8:b1:33:63:2e:d9:ad:e6:
e0:49:42:d6:05:b1:b4:72:bc:2a:cf:97:ac:65:8f:
98:3c:cc:4c:47:1e:ef:56:0a:b4:a6:d8:f4:77:e0:
38:15:59:aa:82:07:b2:1b:26:d0:81:e7:5e:48:a4:
a2:bd:e4:48:ab:35:48:ac:9d:8c:19:6e:14:e7:45:
15:09:5d:fb:ee:2d:30:73:3e:df:48:33:e9:52:f2:
31:8c:24:bb:75:5b:e4:76:f2:4d:06:33:8a:70:ef:
dd:05:b1:b1:6d:94:34:8d:73:31:3b:6f:4b:3a:b2:
d6:cd:3d:8d:8f:e4:bd:7d:85:38:3b:49:89:72:29:
c6:95:23:56:3d:3e:79:ca:b5:28:ae:8f:bb:6e:08:
ef:e6:59:41:04:06:b8:ed:05:9b:12:b7:8b:90:29:
f3:ec:b0:ec:b8:57:e3:6b:e1:19:c1:af:64:90:00:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:AC:1A:14:E5:49:15:90:31:64:66:E9:69:F6:EE:D9:B7:09:BE
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/raKsGhTlSRWQMWRm6Wn27tm3Cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.72.102.0/24
185.149.193.0/24
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
212.108.85.0/24
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
6a:00:04:7e:09:4d:9a:d6:ff:f0:27:ab:2c:2f:9d:51:e4:3a:
93:2a:e6:bc:28:11:8c:66:fd:7e:25:51:58:59:d5:54:26:9e:
94:44:1b:03:b3:6e:7a:52:16:90:dc:31:b0:ce:be:72:f1:5d:
01:48:8a:1d:94:99:40:4c:fd:a1:d5:72:43:d8:86:14:e1:1a:
a2:88:9f:df:cd:ce:41:69:56:56:ab:61:9d:93:49:fa:20:57:
e9:5d:c8:fe:fb:15:9a:52:6d:13:dd:65:47:d7:e6:b9:fd:53:
24:d5:0e:33:a3:4d:b0:a9:95:d7:13:42:2c:fe:8a:d1:1f:3c:
02:1d:31:a6:06:1a:3e:bb:20:38:cc:94:bf:19:a0:3a:b9:e9:
43:e2:35:01:7d:67:c0:92:b9:cb:0e:26:32:68:6a:92:57:ad:
66:63:08:99:b9:5b:79:02:a5:d9:74:a9:b5:a0:01:e1:02:3b:
2d:bb:eb:ea:22:c2:b4:fa:42:6b:d7:ee:47:b3:ed:44:16:7a:
c0:3b:33:d8:1a:0a:38:08:16:91:8a:f9:c7:6b:77:3c:a0:00:
37:0c:6b:3e:64:7b:ee:7c:52:9d:70:da:e8:3c:b8:f8:39:bb:
53:5e:56:89:d0:9e:cf:f6:e1:0b:86:52:6c:04:3c:13:ac:54:
47:59:1e:5d
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZS1ln849/d8ULWq9sTa7K8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDQ5MmRiOWNiYjBhMGViNmJmNjljMjVjODY5NjFmNDkx
ODNjOWIwHhcNMjUwMTMwMDUwMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGEyYWMxYTE0ZTU0OTE1OTAzMTY0NjZlOTY5ZjZlZWQ5YjcwOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO2ea9yyiPzhF8jDdHt6VEXq3Q5W
Z6mp2TPwv5LX31gB4j4qO+BSLOpEeditkfUXWZR8phVKldAXiff1iZNzzO3s/Kyu
U0yUhe3wjKDrV5DzyLEzYy7ZrebgSULWBbG0crwqz5esZY+YPMxMRx7vVgq0ptj0
d+A4FVmqggeyGybQgedeSKSiveRIqzVIrJ2MGW4U50UVCV377i0wcz7fSDPpUvIx
jCS7dVvkdvJNBjOKcO/dBbGxbZQ0jXMxO29LOrLWzT2Nj+S9fYU4O0mJcinGlSNW
PT55yrUoro+7bgjv5llBBAa47QWbEreLkCnz7LDsuFfja+EZwa9kkACSAQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFK2irBoU5UkVkDFkZulp9u7Ztwm+MB8GA1UdIwQY
MBaAFIREktucuwoOtr9pwlyGlh9JGDybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTct
YTFlMGRiMWExN2RmLzEvcmFLc0doVGxTUldRTVdSbTZXbjI3dG0zQ2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTctYTFlMGRiMWExN2Rm
LzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQDLutY
AwQAPswwAwQATUvgAwQAT27lAwQFWFXgAwQAkhNHAwQAsGHYAwQCsGIgAwQDsPG4
AwQDshSQAwQCuQpwAwQAuUhmAwQAuZXBAwQCueD8AwQAwWkZAwQAwfJ/AwQAwmji
AwQF1AygAwQA1GxVMA0EAgACMAcDBQAqABVgMA0GCSqGSIb3DQEBCwUAA4IBAQBq
AAR+CU2a1v/wJ6ssL51R5DqTKua8KBGMZv1+JVFYWdVUJp6URBsDs256UhaQ3DGw
zr5y8V0BSIodlJlATP2h1XJD2IYU4RqiiJ/fzc5BaVZWq2Gdk0n6IFfpXcj++xWa
Um0T3WVH1+a5/VMk1Q4zo02wqZXXE0Is/orRHzwCHTGmBho+uyA4zJS/GaA6uelD
4jUBfWfAkrnLDiYyaGqSV61mYwiZuVt5AqXZdKm1oAHhAjstu+vqIsK0+kJr1+5H
s+1EFnrAOzPYGgo4CBaRivnHa3c8oAA3DGs+ZHvufFKdcNroPLj4ObtTXlaJ0J7P
9uELhlJsBDwTrFRHWR5d
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:46 2025 by rpki-client