Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/zaxDDa76odJm9ePdrwAGeOqRpTk.roa
File: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (raw, json)
Hash identifier: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=
Subject key identifier: CD:AC:43:0D:AE:FA:A1:D2:66:F5:E3:DD:AF:00:06:78:EA:91:A5:39
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01955B218B0FD3A3382D291B0D014EC297BC
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/zaxDDa76odJm9ePdrwAGeOqRpTk.roa
Signing time: Mon 03 Mar 2025 08:31:19 +0000
ROA not before: Mon 03 Mar 2025 08:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211261
IP address blocks: 5.253.156.0/24 maxlen: 24
5.253.157.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
91.210.126.0/24 maxlen: 24
185.146.67.0/24 maxlen: 24
185.210.193.0/24 maxlen: 24
185.210.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:21:8b:0f:d3:a3:38:2d:29:1b:0d:01:4e:c2:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Mar 3 08:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdac430daefaa1d266f5e3ddaf000678ea91a539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:1b:20:27:c5:43:8a:fd:55:c9:99:31:d0:
a8:97:09:35:c6:3c:ae:87:c7:50:e0:0f:ec:d4:f0:
fa:32:9a:b9:c3:e7:fd:5c:9f:f4:fe:8c:3b:17:98:
9e:dd:42:0c:ea:3b:8b:1f:da:cc:8b:11:4e:29:89:
0b:ac:9c:5c:b9:64:f1:58:e7:e9:c1:b7:a3:0d:fe:
03:12:30:c1:e6:27:5d:78:60:f7:9d:28:a3:53:b5:
38:32:25:9c:a5:88:54:cc:ec:2c:cf:17:0b:e3:ec:
4d:e8:a8:02:b8:6c:6a:5c:03:11:b2:ba:c1:93:01:
bd:50:7c:c7:ac:56:bf:10:9a:78:d4:9e:bb:44:59:
9e:65:f2:74:d7:dc:e1:67:96:e1:1a:5c:75:93:0a:
eb:ab:f6:02:5b:bc:58:d2:f4:62:69:e6:7a:43:c7:
51:93:6f:e4:d0:e3:05:80:c7:3d:15:dc:c9:b8:4b:
d1:62:2e:71:2c:ef:33:fb:e9:c3:2e:13:13:e6:15:
48:b5:0b:2d:1a:0e:1b:e5:9c:8a:e9:3b:9d:97:e5:
c3:2e:e4:96:eb:4f:e9:30:0c:27:44:4e:59:0c:f9:
10:41:86:b0:7a:95:73:a4:fc:7c:c8:2f:ce:7c:64:
cc:b6:de:93:c6:fb:46:3c:54:c9:59:b9:c3:f1:82:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:43:0D:AE:FA:A1:D2:66:F5:E3:DD:AF:00:06:78:EA:91:A5:39
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/zaxDDa76odJm9ePdrwAGeOqRpTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.156.0/23
5.253.159.0/24
91.210.126.0/24
185.146.67.0/24
185.210.193.0/24
185.210.195.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:3e:5d:fa:70:dc:fd:b8:42:a9:3a:d1:0e:ae:33:0c:7e:
ca:d5:d5:13:ac:65:78:7e:c4:2a:4c:75:86:a0:0f:cf:ed:5e:
ee:49:45:22:09:f1:d3:66:5a:e2:0a:0b:70:3b:14:1e:08:c6:
3f:be:64:88:04:04:a1:27:d3:09:8a:59:f4:40:60:90:01:f1:
83:9a:fc:2e:04:7c:8b:24:bb:37:c9:4f:12:f7:83:a9:76:3f:
c2:18:4b:b0:0f:8a:2f:73:c2:01:d8:f6:55:48:7b:e5:c5:3c:
84:50:5b:89:69:66:7a:9b:82:b6:09:ce:44:f5:91:eb:2a:65:
ff:53:fc:55:2d:df:2c:ca:8b:30:60:bd:85:03:37:32:a8:29:
f2:8e:cc:19:31:b9:61:7f:a0:13:3b:8f:bf:3d:28:94:53:3e:
ba:03:81:42:ee:d9:50:3a:d2:e6:1b:da:dd:6f:a5:ba:2f:ba:
eb:c1:2c:08:65:d5:c5:4e:15:ac:75:bb:24:f0:a0:e2:66:5d:
05:a7:47:1d:36:9b:b9:24:59:59:75:a9:cb:0a:02:6d:58:1a:
6e:9d:4a:16:69:05:d8:e1:dc:87:13:e0:d6:71:3d:12:20:3b:
23:c2:e8:89:83:53:9a:7c:df:98:9e:c1:c0:e0:fe:c9:d8:a2:
96:b1:db:23
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZVbIYsP06M4LSkbDQFOwpe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh
OWZhM2IwHhcNMjUwMzAzMDgzMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGFjNDMwZGFlZmFhMWQyNjZmNWUzZGRhZjAwMDY3OGVhOTFhNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFUbICfFQ4r9VcmZMdColwk1xjyu
h8dQ4A/s1PD6Mpq5w+f9XJ/0/ow7F5ie3UIM6juLH9rMixFOKYkLrJxcuWTxWOfp
wbejDf4DEjDB5iddeGD3nSijU7U4MiWcpYhUzOwszxcL4+xN6KgCuGxqXAMRsrrB
kwG9UHzHrFa/EJp41J67RFmeZfJ019zhZ5bhGlx1kwrrq/YCW7xY0vRiaeZ6Q8dR
k2/k0OMFgMc9FdzJuEvRYi5xLO8z++nDLhMT5hVItQstGg4b5ZyK6Tudl+XDLuSW
60/pMAwnRE5ZDPkQQYawepVzpPx8yC/OfGTMtt6TxvtGPFTJWbnD8YKiWwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFM2sQw2u+qHSZvXj3a8ABnjqkaU5MB8GA1UdIwQY
MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt
YzkwN2FlMWMyMTFlLzEvemF4RERhNzZvZEptOWVQZHJ3QUdlT3FScFRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl
LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBBf2cAwQA
Bf2fAwQAW9J+AwQAuZJDAwQAudLBAwQAudLDMA0GCSqGSIb3DQEBCwUAA4IBAQAT
8D5d+nDc/bhCqTrRDq4zDH7K1dUTrGV4fsQqTHWGoA/P7V7uSUUiCfHTZlriCgtw
OxQeCMY/vmSIBAShJ9MJiln0QGCQAfGDmvwuBHyLJLs3yU8S94Opdj/CGEuwD4ov
c8IB2PZVSHvlxTyEUFuJaWZ6m4K2Cc5E9ZHrKmX/U/xVLd8syoswYL2FAzcyqCny
jswZMblhf6ATO4+/PSiUUz66A4FC7tlQOtLmG9rdb6W6L7rrwSwIZdXFThWsdbsk
8KDiZl0Fp0cdNpu5JFlZdanLCgJtWBpunUoWaQXY4dyHE+DWcT0SIDsjwuiJg1Oa
fN+YnsHA4P7J2KKWsdsj
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:19:13 2025 by rpki-client