Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/hQLzZNiEWPuf32qSABpOeATMW6E.roa
File: hQLzZNiEWPuf32qSABpOeATMW6E.roa (raw, json)
Hash identifier: tcNlvM0ivCHwuGCFeJnRMeoVP9hfxeNRmguV/9iTXJc=
Subject key identifier: 85:02:F3:64:D8:84:58:FB:9F:DF:6A:92:00:1A:4E:78:04:CC:5B:A1
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0195F527056DA3BD86C8C8297DE5A47602C7
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/hQLzZNiEWPuf32qSABpOeATMW6E.roa
Signing time: Wed 02 Apr 2025 06:18:49 +0000
ROA not before: Wed 02 Apr 2025 06:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207743
IP address blocks: 5.154.252.0/23 maxlen: 23
5.154.254.0/23 maxlen: 23
5.157.129.0/24 maxlen: 24
5.157.130.0/23 maxlen: 23
37.35.40.0/23 maxlen: 23
37.35.42.0/23 maxlen: 23
178.157.72.0/22 maxlen: 24
178.157.102.0/23 maxlen: 23
188.74.132.0/22 maxlen: 24
188.74.140.0/22 maxlen: 22
188.74.168.0/23 maxlen: 23
188.74.182.0/23 maxlen: 23
188.74.210.0/23 maxlen: 23
188.74.240.0/22 maxlen: 24
188.119.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:27:05:6d:a3:bd:86:c8:c8:29:7d:e5:a4:76:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Apr 2 06:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8502f364d88458fb9fdf6a92001a4e7804cc5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:5f:b6:1b:d8:83:9a:b6:d1:54:6b:bc:36:
98:55:9a:05:36:3d:a5:9d:7a:37:f7:ff:f1:93:87:
04:38:58:63:ec:5a:b0:dc:35:b6:8c:56:b9:7c:d3:
10:bd:be:d5:b6:da:0e:3d:27:73:50:33:f9:b6:49:
6a:b4:b9:03:ac:1a:39:7a:8b:ca:0f:b9:de:7f:dd:
81:84:77:fe:39:f0:e7:5b:cd:d1:74:45:b6:2a:5a:
dd:bb:cd:f6:f5:e8:99:8b:67:d1:6d:bf:ef:e1:bd:
fc:54:94:aa:3c:45:ac:82:27:84:a3:88:7e:cc:65:
94:60:1e:66:f8:f0:62:85:fe:1c:0b:b1:48:d3:6d:
a8:8a:0d:48:48:00:8f:69:00:f4:c1:f3:1f:2c:fe:
ea:b4:5b:3c:22:35:a8:15:ab:32:48:56:db:3d:9e:
b6:43:1c:53:8a:a7:2a:11:77:4c:32:1e:0a:6b:52:
21:a2:e2:bf:2e:85:6d:1d:f4:fa:ff:49:af:bf:d9:
33:26:cb:87:d3:c2:22:83:d5:fb:24:94:2c:15:7a:
4d:67:1e:ee:d8:67:d0:b5:c6:9f:10:96:ed:32:61:
97:e7:2c:d1:19:86:8c:6f:ad:46:18:d7:ff:e8:f0:
7b:f1:95:fb:d7:c5:e5:a5:80:b3:b1:f9:f2:67:f9:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:F3:64:D8:84:58:FB:9F:DF:6A:92:00:1A:4E:78:04:CC:5B:A1
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/hQLzZNiEWPuf32qSABpOeATMW6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.252.0/22
5.157.129.0-5.157.131.255
37.35.40.0/22
178.157.72.0/22
178.157.102.0/23
188.74.132.0/22
188.74.140.0/22
188.74.168.0/23
188.74.182.0/23
188.74.210.0/23
188.74.240.0/22
188.119.156.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:53:a6:2c:22:fa:bf:d8:bf:03:16:a8:6a:e4:2f:7c:a1:b7:
3f:d0:a6:fc:dc:90:67:1b:44:c5:5d:24:cd:0f:1d:50:98:7f:
0d:b8:49:99:67:93:f1:d4:80:05:9c:aa:20:fb:73:4b:95:51:
e8:ea:90:84:56:fc:a2:1b:af:a4:a7:32:58:a4:9b:47:48:4d:
08:24:b1:aa:62:3e:02:45:52:69:30:19:fc:14:50:b1:f9:af:
15:d4:11:5b:72:4d:62:b2:0d:1f:39:9e:23:f5:6e:b5:09:23:
b6:ab:27:9c:d1:73:3a:e6:27:03:e3:43:be:c2:0e:4d:ea:c3:
49:73:ed:81:d9:e6:51:8d:65:71:13:f1:ed:83:bc:6f:1b:a7:
59:f6:c8:04:c6:d2:13:b7:19:a6:ba:48:a3:0a:64:24:fb:64:
d5:e9:28:e7:ee:5a:61:dc:cc:c3:58:92:a4:25:80:a2:ad:3f:
29:d8:2d:64:7a:19:2c:58:e2:53:01:96:6b:a0:b4:a5:5a:87:
00:bb:86:51:04:f7:49:ad:6a:07:a0:fd:6d:48:af:ca:69:0b:
e2:7a:e8:3d:fd:b2:fe:0c:b2:bb:28:71:e4:a9:be:6d:b4:85:
0b:9a:ec:aa:5d:58:20:04:75:fd:0a:cb:ac:39:6f:a1:67:5f:
a4:a7:5d:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZX1JwVto72GyMgpfeWkdgLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjUwNDAyMDYxODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTAyZjM2NGQ4ODQ1OGZiOWZkZjZhOTIwMDFhNGU3ODA0Y2M1YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sJfthvYg5q20VRrvDaYVZoFNj2l
nXo39//xk4cEOFhj7Fqw3DW2jFa5fNMQvb7VttoOPSdzUDP5tklqtLkDrBo5eovK
D7nef92BhHf+OfDnW83RdEW2Klrdu8329eiZi2fRbb/v4b38VJSqPEWsgieEo4h+
zGWUYB5m+PBihf4cC7FI022oig1ISACPaQD0wfMfLP7qtFs8IjWoFasySFbbPZ62
QxxTiqcqEXdMMh4Ka1IhouK/LoVtHfT6/0mvv9kzJsuH08Iig9X7JJQsFXpNZx7u
2GfQtcafEJbtMmGX5yzRGYaMb61GGNf/6PB78ZX718XlpYCzsfnyZ/klxQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFIUC82TYhFj7n99qkgAaTngEzFuhMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvaFFMelpOaUVXUHVmMzJxU0FCcE9lQVRNVzZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQCBZr8MAwD
BAAFnYEDBAIFnYADBAIlIygDBAKynUgDBAGynWYDBAK8SoQDBAK8SowDBAG8SqgD
BAG8SrYDBAG8StIDBAK8SvADBAG8d5wwDQYJKoZIhvcNAQELBQADggEBAF5Tpiwi
+r/YvwMWqGrkL3yhtz/QpvzckGcbRMVdJM0PHVCYfw24SZlnk/HUgAWcqiD7c0uV
UejqkIRW/KIbr6SnMlikm0dITQgksapiPgJFUmkwGfwUULH5rxXUEVtyTWKyDR85
niP1brUJI7arJ5zRczrmJwPjQ77CDk3qw0lz7YHZ5lGNZXET8e2DvG8bp1n2yATG
0hO3Gaa6SKMKZCT7ZNXpKOfuWmHczMNYkqQlgKKtPynYLWR6GSxY4lMBlmugtKVa
hwC7hlEE90mtageg/W1Ir8ppC+J66D39sv4MsrsoceSpvm20hQua7KpdWCAEdf0K
y6w5b6FnX6SnXTc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:34 2025 by rpki-client