Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa
File: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (raw, json)
Hash identifier: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=
Subject key identifier: 43:41:BD:B3:8D:41:16:94:B5:70:CC:42:66:82:07:26:4F:A9:5B:A4
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1E58C726E20BC562F2FB3FD9F327F
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
193.232.226.0/23 maxlen: 23
194.85.16.0/24 maxlen: 24
194.190.146.0/24 maxlen: 24
194.226.16.0/24 maxlen: 24
194.226.38.0/23 maxlen: 23
194.226.41.0/24 maxlen: 24
194.226.56.0/23 maxlen: 23
194.226.58.0/23 maxlen: 23
195.19.8.0/24 maxlen: 24
195.208.24.0/21 maxlen: 21
195.208.29.0/24 maxlen: 24
195.208.222.0/24 maxlen: 24
195.209.147.0/24 maxlen: 24
195.209.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e5:8c:72:6e:20:bc:56:2f:2f:b3:fd:9f:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4341bdb38d411694b570cc42668207264fa95ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:b8:6e:38:e0:76:54:13:cf:26:d2:ec:1d:
5f:d9:f3:27:63:91:bd:5d:56:c7:8a:db:d0:9b:99:
91:dd:b0:c5:e9:d6:a9:19:3f:23:20:98:bf:9a:4c:
06:b1:55:d3:c1:d8:46:2a:66:38:ea:eb:40:d9:42:
d9:6d:66:55:42:7c:61:4e:e1:9d:8d:ce:b5:fd:d1:
32:52:d4:93:f1:29:2a:8e:a7:1b:3c:e0:5d:d8:8e:
87:b6:36:7a:4f:47:c1:67:1d:7e:cd:47:6f:d0:77:
1d:03:0e:ca:23:d2:a0:72:db:4d:98:55:85:ed:7f:
88:c7:46:d1:36:41:b8:a6:30:7b:57:2d:bf:d6:6a:
fa:7d:34:85:ac:1a:18:98:3b:96:b1:5e:0b:f6:11:
52:42:35:c8:13:21:a6:79:46:3f:37:1a:0f:74:c7:
c4:01:91:fa:70:86:33:a3:a2:1a:32:7c:2c:2e:02:
95:d2:77:9e:24:b7:1e:c2:74:dc:12:a6:b5:1b:b1:
1d:ae:e9:20:e1:b8:97:18:fd:c7:b7:37:70:ea:c0:
06:11:d9:e5:95:ca:4c:2a:9a:70:09:3e:5e:49:d8:
aa:42:fd:7a:07:34:be:3c:b5:71:ad:19:0b:81:cf:
df:14:d6:f9:4a:42:ba:9f:e0:ea:d8:05:e4:53:2a:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:BD:B3:8D:41:16:94:B5:70:CC:42:66:82:07:26:4F:A9:5B:A4
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
193.232.226.0/23
194.85.16.0/24
194.190.146.0/24
194.226.16.0/24
194.226.38.0/23
194.226.41.0/24
194.226.56.0/22
195.19.8.0/24
195.208.24.0/21
195.208.222.0/24
195.209.147.0-195.209.148.255
Signature Algorithm: sha256WithRSAEncryption
98:ef:04:39:15:b9:a4:2a:8d:7a:c1:71:b3:c5:04:bc:f8:af:
cc:91:d7:76:c8:34:0c:0d:eb:a1:93:84:f9:63:0e:83:9b:86:
7b:0c:88:9b:ef:ed:5c:16:3c:91:19:16:0c:4a:ce:d3:d2:85:
ce:25:df:db:71:86:be:11:17:32:a6:9f:09:6d:50:bb:e6:00:
26:8e:8e:fd:36:f0:0b:82:ff:bf:79:bf:35:be:b9:a3:3e:6b:
74:2e:86:c1:6b:23:7c:d9:d3:5e:0d:fb:69:4b:62:0d:61:3f:
f9:2b:36:ed:9e:86:bf:3b:b0:b3:81:eb:e5:dc:b6:e1:cc:a2:
12:ca:eb:5f:2b:dc:e3:c2:b3:6b:60:87:50:c1:71:52:b7:88:
d7:13:26:5c:0f:f9:7d:4c:51:fd:f8:7f:13:39:b7:91:57:58:
d0:88:d3:99:4f:12:5d:b5:14:c6:a5:1c:68:9f:3a:03:82:ea:
c8:e0:e9:75:86:7b:be:22:62:49:ee:c4:72:18:b1:0b:da:6d:
5d:80:f3:a8:5b:de:f9:f0:7f:ea:c0:7b:7f:13:b8:31:d1:53:
72:f4:9a:8c:25:af:85:f7:0f:b0:6c:81:0a:99:e7:14:97:85:
00:f2:91:8d:72:14:5e:a6:31:6e:bd:85:8a:24:c0:bd:02:89:
59:ba:4b:2f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZQhseWMcm4gvFYvL7P9nzJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjUwMTAxMTE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzQxYmRiMzhkNDExNjk0YjU3MGNjNDI2NjgyMDcyNjRmYTk1YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hy4bjjgdlQTzybS7B1f2fMnY5G9
XVbHitvQm5mR3bDF6dapGT8jIJi/mkwGsVXTwdhGKmY46utA2ULZbWZVQnxhTuGd
jc61/dEyUtST8SkqjqcbPOBd2I6HtjZ6T0fBZx1+zUdv0HcdAw7KI9KgcttNmFWF
7X+Ix0bRNkG4pjB7Vy2/1mr6fTSFrBoYmDuWsV4L9hFSQjXIEyGmeUY/NxoPdMfE
AZH6cIYzo6IaMnwsLgKV0neeJLcewnTcEqa1G7Edrukg4biXGP3Htzdw6sAGEdnl
lcpMKppwCT5eSdiqQv16BzS+PLVxrRkLgc/fFNb5SkK6n+Dq2AXkUyqmnwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFENBvbONQRaUtXDMQmaCByZPqVukMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvUTBHOXM0MUJGcFMxY014Q1pvSUhKay1wVzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAwehAAwQA
wehMAwQBwejiAwQAwlUQAwQAwr6SAwQAwuIQAwQBwuImAwQAwuIpAwQCwuI4AwQA
wxMIAwQDw9AYAwQAw9DeMAwDBADD0ZMDBADD0ZQwDQYJKoZIhvcNAQELBQADggEB
AJjvBDkVuaQqjXrBcbPFBLz4r8yR13bINAwN66GThPljDoObhnsMiJvv7VwWPJEZ
FgxKztPShc4l39txhr4RFzKmnwltULvmACaOjv028AuC/795vzW+uaM+a3QuhsFr
I3zZ014N+2lLYg1hP/krNu2ehr87sLOB6+XctuHMohLK618r3OPCs2tgh1DBcVK3
iNcTJlwP+X1MUf34fxM5t5FXWNCI05lPEl21FMalHGifOgOC6sjg6XWGe74iYknu
xHIYsQvabV2A86hb3vnwf+rAe38TuDHRU3L0mowlr4X3D7BsgQqZ5xSXhQDykY1y
FF6mMW69hYokwL0CiVm6Sy8=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:31 2025 by rpki-client