Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PaJ1NV9XG903UofLMhbqDFeoGRI.roa
File: PaJ1NV9XG903UofLMhbqDFeoGRI.roa (raw, json)
Hash identifier: cV1+9IwWjMr3CVVFN5PwdUeZyMxTTrMoErA9Ufghrjc=
Subject key identifier: 3D:A2:75:35:5F:57:1B:DD:37:52:87:CB:32:16:EA:0C:57:A8:19:12
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0196FC48DAF5203BFF90BAB7FEEFFF48B7A5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PaJ1NV9XG903UofLMhbqDFeoGRI.roa
Signing time: Fri 23 May 2025 08:35:55 +0000
ROA not before: Fri 23 May 2025 08:35:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 263812
IP address blocks: 93.152.30.0/23 maxlen: 24
93.152.38.0/23 maxlen: 24
93.152.46.0/23 maxlen: 24
93.152.52.0/23 maxlen: 24
93.152.56.0/23 maxlen: 24
93.152.62.0/23 maxlen: 24
93.152.76.0/23 maxlen: 24
93.152.80.0/23 maxlen: 24
93.152.84.0/23 maxlen: 24
93.152.94.0/23 maxlen: 24
93.152.98.0/23 maxlen: 24
93.152.102.0/23 maxlen: 24
93.152.124.0/23 maxlen: 24
109.174.220.0/22 maxlen: 24
109.174.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:48:da:f5:20:3b:ff:90:ba:b7:fe:ef:ff:48:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 23 08:35:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3da275355f571bdd375287cb3216ea0c57a81912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:1f:e6:b6:44:06:9d:23:09:92:c7:da:dd:
97:91:ed:3f:40:86:77:e7:3f:1e:8a:09:a5:dc:2a:
81:e3:92:42:b0:af:ac:02:33:80:af:0f:ad:b7:2b:
f6:1a:79:79:5c:a4:0e:fd:32:bf:1a:6b:8b:d1:af:
e0:af:47:b5:52:7e:5a:ef:ea:31:06:af:ac:86:da:
84:25:4e:09:20:42:7b:1d:2a:4e:3b:c9:26:f1:c3:
6e:67:54:08:b8:83:61:3b:7c:d4:f8:4c:04:cf:bc:
b5:aa:37:f4:a7:46:5e:d9:24:93:25:01:5d:a8:ee:
17:59:b1:4f:47:5e:e3:22:66:50:2b:28:e9:d8:f6:
f0:85:bc:d6:c0:b3:a3:e0:7a:19:81:de:9a:82:29:
0a:76:81:b4:09:17:cd:55:7d:f9:06:84:ba:f9:33:
53:d7:10:71:c1:88:f1:6e:26:25:ea:cb:0c:77:74:
b5:56:ac:5a:c0:2f:1f:46:c7:f4:ba:01:37:50:20:
0b:33:49:c5:85:4f:b6:a0:cd:67:77:06:77:e6:6c:
1a:af:cf:0d:d5:26:d1:76:36:56:0b:ff:92:1c:dc:
fe:36:77:1d:3c:94:db:48:0c:70:38:78:7b:6a:c0:
53:1a:15:38:c0:94:0a:9d:a6:5b:e0:27:b0:9d:1e:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:75:35:5F:57:1B:DD:37:52:87:CB:32:16:EA:0C:57:A8:19:12
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PaJ1NV9XG903UofLMhbqDFeoGRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.30.0/23
93.152.38.0/23
93.152.46.0/23
93.152.52.0/23
93.152.56.0/23
93.152.62.0/23
93.152.76.0/23
93.152.80.0/23
93.152.84.0/23
93.152.94.0/23
93.152.98.0/23
93.152.102.0/23
93.152.124.0/23
109.174.220.0/22
109.174.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:72:d6:32:19:ad:b8:0c:5e:fb:91:56:9e:ea:b9:7c:81:18:
68:02:88:8c:b8:69:3b:13:78:30:00:13:ad:9f:2a:80:91:ae:
78:11:c9:75:ed:7c:44:0b:f1:c2:3a:39:89:99:b9:cf:a9:90:
0f:10:87:88:cc:f8:25:f2:dd:28:13:33:e5:65:2d:dc:ad:cc:
c9:c2:91:72:52:fb:d9:e8:24:fe:cf:f2:97:20:eb:96:28:35:
a3:df:54:0d:b3:95:80:0d:24:2e:3c:a6:e8:d3:76:ba:7b:ea:
6e:ca:95:3f:03:3f:05:bb:1d:1d:40:06:63:2b:75:65:86:e0:
42:b6:77:e7:62:be:45:08:fe:7e:10:bd:ba:fd:19:78:af:d8:
81:5a:50:4c:76:73:9b:77:9e:dd:d9:dc:54:2e:5d:9e:1a:0e:
27:2a:ba:97:76:69:e5:62:f3:c3:7b:a5:f3:04:6d:33:06:18:
f0:e1:8c:ab:89:b9:17:50:2d:9b:ca:b8:0c:9f:ac:fe:8c:3b:
dd:98:1a:95:aa:a3:f6:2e:23:fa:13:47:b1:60:a1:7b:03:15:
b8:b9:78:3d:31:7a:eb:36:04:b1:12:d6:11:83:69:a1:f6:d0:
50:0f:72:b6:a6:39:06:67:c2:ed:d9:46:38:1f:e7:02:11:b9:
80:ad:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:11:33 2025 by rpki-client