Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/R9s7f2WwympRujpexwz_Cfqw9AE.roa
File: R9s7f2WwympRujpexwz_Cfqw9AE.roa (raw, json)
Hash identifier: 985+BT2fuoF7brmb9lo1Hwb8rpSqIgNiOncmQTYZ7YU=
Subject key identifier: 47:DB:3B:7F:65:B0:CA:6A:51:BA:3A:5E:C7:0C:FF:09:FA:B0:F4:01
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0195A35B14DF53EA9B6DB7AC14069DAA3EA5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/R9s7f2WwympRujpexwz_Cfqw9AE.roa
Signing time: Mon 17 Mar 2025 09:06:49 +0000
ROA not before: Mon 17 Mar 2025 09:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 5.57.32.0/24 maxlen: 24
5.57.34.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:5b:14:df:53:ea:9b:6d:b7:ac:14:06:9d:aa:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 17 09:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47db3b7f65b0ca6a51ba3a5ec70cff09fab0f401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:7d:79:ea:c6:e5:8a:0b:c0:d3:3b:01:2b:
a6:25:48:4b:17:31:7d:c3:8b:20:7c:0c:8c:89:3c:
2b:5b:56:fb:55:20:67:ca:10:1b:4e:c3:12:f2:62:
5c:92:8e:9f:16:51:96:7e:5c:46:1a:9b:3b:94:4a:
c7:fb:4a:46:4d:7d:74:a4:3c:c2:3b:55:c1:74:f7:
bb:d8:6d:68:82:a5:e2:61:77:e2:e7:d5:c9:f4:ea:
aa:36:c5:fb:3b:b7:72:e3:70:55:64:2e:26:39:cb:
bf:43:fa:32:2a:95:a0:e2:a9:85:6c:6e:98:8f:fa:
5b:4e:10:75:af:c5:7c:3f:65:aa:07:4f:6b:c7:37:
f6:31:7c:2f:9f:b4:76:ed:01:84:b1:42:67:64:e7:
a9:82:38:c8:d1:f1:a2:e6:e4:8c:40:4b:a6:95:c6:
fa:35:24:e1:20:1e:d6:b0:3c:25:bc:52:96:cb:54:
3a:69:81:de:25:02:7b:9d:f4:9b:82:45:07:ed:f5:
e9:53:f3:47:f6:a4:ac:ea:11:c9:1d:29:1d:f5:be:
0a:54:78:e2:18:dd:de:e6:0d:5d:65:d7:fe:bf:36:
20:f3:e3:02:89:8e:64:20:79:53:48:dd:a8:fa:32:
47:24:1e:18:19:3d:7e:db:21:8e:f1:22:b2:2b:df:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:3B:7F:65:B0:CA:6A:51:BA:3A:5E:C7:0C:FF:09:FA:B0:F4:01
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/R9s7f2WwympRujpexwz_Cfqw9AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.34.0/23
5.57.39.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
27:50:04:94:f8:1e:ec:80:df:e7:0b:55:8c:6e:b2:e9:53:7b:
8f:e1:26:2f:06:e2:f0:7a:3a:b1:a1:5e:8f:03:3f:8f:31:82:
c7:09:e3:0a:4d:61:09:0e:44:6f:41:ea:7e:f3:f4:2f:c7:f0:
96:d4:6d:30:fd:37:80:6c:d4:99:9f:c0:b3:0f:af:97:9c:af:
4a:e3:56:47:1e:8a:df:af:d3:24:c2:68:89:20:36:44:53:37:
fe:8f:34:20:fd:75:34:62:b9:db:19:00:85:93:8e:b0:9d:3f:
1e:77:b0:37:2c:c6:9f:3f:0a:5e:ec:94:dc:12:31:d9:d6:38:
3e:38:3a:8c:cb:c5:21:4e:34:4d:ca:a5:27:17:ff:3c:d5:1f:
18:6c:ca:85:de:d1:0f:9f:cb:43:83:ac:0d:e5:ec:ad:36:82:
5b:4e:2c:01:92:d4:8d:83:4b:7e:d8:d4:89:f4:82:3e:c5:8b:
da:eb:da:62:6b:3d:a1:36:71:2a:7f:d4:ff:35:92:fb:2c:af:
67:7e:7b:6a:e0:64:5e:50:91:f4:2b:a8:ea:81:fe:85:35:d4:
b8:37:8d:45:2f:2b:c3:c1:9a:fb:11:db:94:b1:4d:4e:7c:6e:
db:cf:47:22:5e:68:e7:bc:f7:1d:26:97:41:92:64:ab:2a:98:
bf:82:52:45
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZWjWxTfU+qbbbesFAadqj6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMzE3MDkwNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2RiM2I3ZjY1YjBjYTZhNTFiYTNhNWVjNzBjZmYwOWZhYjBmNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunB9eerG5YoLwNM7ASumJUhLFzF9
w4sgfAyMiTwrW1b7VSBnyhAbTsMS8mJcko6fFlGWflxGGps7lErH+0pGTX10pDzC
O1XBdPe72G1ogqXiYXfi59XJ9OqqNsX7O7dy43BVZC4mOcu/Q/oyKpWg4qmFbG6Y
j/pbThB1r8V8P2WqB09rxzf2MXwvn7R27QGEsUJnZOepgjjI0fGi5uSMQEumlcb6
NSThIB7WsDwlvFKWy1Q6aYHeJQJ7nfSbgkUH7fXpU/NH9qSs6hHJHSkd9b4KVHji
GN3e5g1dZdf+vzYg8+MCiY5kIHlTSN2o+jJHJB4YGT1+2yGO8SKyK99PKwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEfbO39lsMpqUbo6XscM/wn6sPQBMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvUjlzN2YyV3d5bXBSdWpwZXh3el9DZnF3OUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABTkgAwQB
BTkiAwQABTknAwQAudQxMA0GCSqGSIb3DQEBCwUAA4IBAQAnUASU+B7sgN/nC1WM
brLpU3uP4SYvBuLwejqxoV6PAz+PMYLHCeMKTWEJDkRvQep+8/Qvx/CW1G0w/TeA
bNSZn8CzD6+XnK9K41ZHHorfr9MkwmiJIDZEUzf+jzQg/XU0YrnbGQCFk46wnT8e
d7A3LMafPwpe7JTcEjHZ1jg+ODqMy8UhTjRNyqUnF/881R8YbMqF3tEPn8tDg6wN
5eytNoJbTiwBktSNg0t+2NSJ9II+xYva69piaz2hNnEqf9T/NZL7LK9nfntq4GRe
UJH0K6jqgf6FNdS4N41FLyvDwZr7EduUsU1OfG7bz0ciXmjnvPcdJpdBkmSrKpi/
glJF
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:04 2025 by rpki-client