Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/eWQbNDk7Bizpa1HJwWi556Oud3s.roa
File: eWQbNDk7Bizpa1HJwWi556Oud3s.roa (raw, json)
Hash identifier: PwNs4nRmZS0NVFzVnjZatxVrXUe/B08COyWu1QU2ZLs=
Subject key identifier: 79:64:1B:34:39:3B:06:2C:E9:6B:51:C9:C1:68:B9:E7:A3:AE:77:7B
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 019759BEAD236BF8D9F5E0A24AD709B38EB0
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/eWQbNDk7Bizpa1HJwWi556Oud3s.roa
Signing time: Tue 10 Jun 2025 12:09:17 +0000
ROA not before: Tue 10 Jun 2025 12:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48327
IP address blocks: 31.135.32.0/23 maxlen: 23
31.135.34.0/23 maxlen: 23
31.135.36.0/22 maxlen: 22
31.135.40.0/21 maxlen: 21
31.135.48.0/21 maxlen: 21
31.135.56.0/21 maxlen: 21
91.219.88.0/24 maxlen: 24
91.219.89.0/24 maxlen: 24
91.219.90.0/24 maxlen: 24
91.219.91.0/24 maxlen: 24
91.228.246.0/24 maxlen: 24
91.228.247.0/24 maxlen: 24
94.232.104.0/21 maxlen: 21
94.232.104.0/22 maxlen: 22
94.232.108.0/23 maxlen: 23
94.232.110.0/24 maxlen: 24
94.232.111.0/24 maxlen: 24
185.32.120.0/24 maxlen: 24
185.32.121.0/24 maxlen: 24
185.32.122.0/24 maxlen: 24
185.32.123.0/24 maxlen: 24
193.104.224.0/24 maxlen: 24
193.104.225.0/24 maxlen: 24
193.104.226.0/24 maxlen: 24
193.104.227.0/24 maxlen: 24
193.242.202.0/24 maxlen: 24
193.242.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:be:ad:23:6b:f8:d9:f5:e0:a2:4a:d7:09:b3:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Jun 10 12:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79641b34393b062ce96b51c9c168b9e7a3ae777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:48:32:1a:5f:e6:21:45:e0:42:d7:df:c2:
06:75:8c:8e:cd:c4:23:18:7c:e9:18:95:f1:e3:84:
57:71:e6:60:7c:e0:f8:11:d6:d0:e6:1d:39:20:a3:
d7:b1:94:45:eb:41:81:fc:aa:65:b5:d5:1b:17:79:
8f:fd:57:df:66:b8:8a:b5:c1:8c:53:78:f5:97:bd:
46:f3:f9:0d:22:db:21:57:2b:92:50:26:6f:ad:db:
53:d1:44:fa:7a:6c:4f:54:4c:2f:06:14:13:ba:fe:
8e:8c:8e:40:ec:5c:43:1e:db:c2:99:df:67:cb:8c:
51:f2:d0:7c:7d:6f:d3:ed:a1:c6:5b:c9:64:ea:70:
19:ec:2d:9d:c3:6a:17:6d:38:37:49:24:07:1c:15:
32:17:f8:92:78:c5:88:ad:fa:a4:e0:eb:74:bc:bb:
82:62:4a:e2:e1:e9:45:04:67:46:49:3c:2a:13:c9:
a0:4f:2c:bc:be:56:23:90:9a:b5:9b:5d:db:f1:1d:
8f:02:33:21:8c:6b:70:6d:46:33:59:1f:7c:cb:53:
5c:29:c7:02:17:04:ea:f0:cd:65:55:83:f8:b6:5b:
83:84:b0:e9:88:e2:c4:34:f5:2a:92:ca:24:65:36:
47:81:b5:90:d3:a0:3c:50:22:0c:44:b1:ac:4f:31:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:1B:34:39:3B:06:2C:E9:6B:51:C9:C1:68:B9:E7:A3:AE:77:7B
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/eWQbNDk7Bizpa1HJwWi556Oud3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.32.0/19
91.219.88.0/22
91.228.246.0/23
94.232.104.0/21
185.32.120.0/22
193.104.224.0/22
193.242.202.0/23
Signature Algorithm: sha256WithRSAEncryption
15:86:5f:ff:b4:22:88:25:03:03:66:95:16:3a:cb:ed:54:d4:
d9:5b:f0:12:e1:3e:3e:c1:61:40:2e:33:1a:62:b2:7f:91:07:
d4:26:f0:91:50:3e:39:c7:dd:03:29:72:56:d0:34:ec:73:fa:
59:d0:2b:d7:ab:e6:33:40:e5:81:91:27:5d:6f:00:17:98:58:
23:69:6f:90:f9:4b:97:b0:ce:85:25:62:75:c7:9a:35:ab:90:
11:63:b0:16:79:a8:2f:11:4f:b9:40:76:97:87:a5:b0:b3:b8:
d4:0d:62:c9:45:7d:dd:75:17:b6:c8:25:88:4b:da:b1:00:85:
9f:6c:fe:6b:f3:cc:ad:94:21:76:9d:7b:2a:9a:ae:d9:5d:09:
2d:9c:a6:8f:60:8f:18:e6:7e:80:ff:b7:81:7b:b3:c2:76:51:
c1:5e:6c:b1:d0:0b:92:b9:7d:d0:39:70:e2:75:3b:3b:33:58:
90:41:da:94:62:eb:74:9a:45:7c:06:62:b2:de:84:67:0f:bb:
ed:7b:e1:20:22:30:86:f7:90:d8:a5:c1:ba:a6:23:4f:ce:60:
9b:0e:57:61:ea:2c:71:2c:ed:28:13:be:da:f0:b3:1f:6e:16:
14:f3:70:6b:05:48:d6:75:b7:34:51:e7:72:b7:bb:9d:99:bd:
bb:f5:39:21
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZdZvq0ja/jZ9eCiStcJs46wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMThjZDI1ZWJmNzRjYjFiMDA0YjAxZWU1MDU1MDNmZmYy
NDZkNjEwHhcNMjUwNjEwMTIwOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTY0MWIzNDM5M2IwNjJjZTk2YjUxYzljMTY4YjllN2EzYWU3NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbRIMhpf5iFF4ELX38IGdYyOzcQj
GHzpGJXx44RXceZgfOD4EdbQ5h05IKPXsZRF60GB/KpltdUbF3mP/VffZriKtcGM
U3j1l71G8/kNItshVyuSUCZvrdtT0UT6emxPVEwvBhQTuv6OjI5A7FxDHtvCmd9n
y4xR8tB8fW/T7aHGW8lk6nAZ7C2dw2oXbTg3SSQHHBUyF/iSeMWIrfqk4Ot0vLuC
Ykri4elFBGdGSTwqE8mgTyy8vlYjkJq1m13b8R2PAjMhjGtwbUYzWR98y1NcKccC
FwTq8M1lVYP4tluDhLDpiOLENPUqksokZTZHgbWQ06A8UCIMRLGsTzEIjwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHlkGzQ5OwYs6WtRycFoueejrnd7MB8GA1UdIwQY
MBaAFJIYzSXr90yxsASwHuUFUD//JG1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hqTkpldjNUTEd3QkxBZTVRVlFQXzhrYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NmUyMjMtNmQyMy00Nzk1LTk1MjUt
YmM4NzdjZTkwNjFhLzEvZVdRYk5EazdCaXpwYTFISndXaTU1Nk91ZDNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NmUyMjMtNmQyMy00Nzk1LTk1MjUtYmM4NzdjZTkwNjFh
LzEva2hqTkpldjNUTEd3QkxBZTVRVlFQXzhrYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFH4cgAwQC
W9tYAwQBW+T2AwQDXuhoAwQCuSB4AwQCwWjgAwQBwfLKMA0GCSqGSIb3DQEBCwUA
A4IBAQAVhl//tCKIJQMDZpUWOsvtVNTZW/AS4T4+wWFALjMaYrJ/kQfUJvCRUD45
x90DKXJW0DTsc/pZ0CvXq+YzQOWBkSddbwAXmFgjaW+Q+UuXsM6FJWJ1x5o1q5AR
Y7AWeagvEU+5QHaXh6Wws7jUDWLJRX3ddRe2yCWIS9qxAIWfbP5r88ytlCF2nXsq
mq7ZXQktnKaPYI8Y5n6A/7eBe7PCdlHBXmyx0AuSuX3QOXDidTs7M1iQQdqUYut0
mkV8BmKy3oRnD7vte+EgIjCG95DYpcG6piNPzmCbDldh6ixxLO0oE77a8LMfbhYU
83BrBUjWdbc0Uedyt7udmb279Tkh
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:43:24 2025 by rpki-client