Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa
File: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (raw, json)
Hash identifier: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=
Subject key identifier: 6E:F9:04:39:26:BC:05:62:EB:B0:95:E8:39:2E:AF:3D:D5:1B:FB:7A
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 019427464FAC9674E896D098FE4119A66DF1
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa
Signing time: Thu 02 Jan 2025 13:48:26 +0000
ROA not before: Thu 02 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57814
IP address blocks: 185.139.56.0/22 maxlen: 32
185.229.108.0/22 maxlen: 32
185.229.108.0/24 maxlen: 32
185.229.109.0/24 maxlen: 32
185.229.110.0/24 maxlen: 32
185.229.111.0/24 maxlen: 32
188.93.88.0/24 maxlen: 32
188.93.89.0/24 maxlen: 32
188.93.90.0/24 maxlen: 32
188.93.91.0/24 maxlen: 32
188.93.92.0/24 maxlen: 32
188.93.94.0/24 maxlen: 32
188.93.95.0/24 maxlen: 32
2a0a:5000::/29 maxlen: 128
2a0d:8a00::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:4f:ac:96:74:e8:96:d0:98:fe:41:19:a6:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Jan 2 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef9043926bc0562ebb095e8392eaf3dd51bfb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:57:d4:52:af:47:3e:e0:58:99:f0:fe:32:
d1:6c:46:a3:75:97:18:18:38:d9:86:c8:91:a8:11:
f3:d1:dc:86:3b:a0:ba:9a:c9:a8:35:65:70:a1:ca:
8c:df:5a:9a:e5:e6:1a:eb:a9:bc:3b:07:11:cf:30:
e5:fc:ad:31:d6:19:77:e9:f5:7c:44:0b:67:a6:9f:
03:76:49:18:81:0d:80:0d:17:a5:a8:e7:11:95:c7:
74:67:39:ef:2b:06:7a:68:21:15:40:a7:a2:f3:9d:
13:b1:1b:e1:e2:64:5c:bc:71:a7:76:65:3d:c5:83:
bf:cb:03:2e:07:f2:92:37:c3:51:17:16:12:df:18:
45:43:d7:ff:bf:24:11:31:57:f3:3f:56:68:b8:63:
be:be:14:ff:4f:62:6d:dd:c7:a4:13:9d:4b:cf:c3:
4f:ea:1a:e9:48:79:b7:b5:c8:aa:81:a2:98:b7:e7:
ed:37:2d:a9:32:84:e9:ff:16:9e:4d:0b:16:f2:4f:
83:b4:6e:5d:71:2c:2c:e9:1a:c0:1b:c5:a1:4f:ee:
01:e6:63:48:f5:08:8a:ba:60:d8:80:77:08:95:8b:
e4:35:1c:50:26:35:bb:91:c9:d2:b1:0e:27:6a:2c:
b2:ac:d7:4c:87:1e:07:e8:59:d8:a2:c4:72:21:ba:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:04:39:26:BC:05:62:EB:B0:95:E8:39:2E:AF:3D:D5:1B:FB:7A
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.56.0/22
185.229.108.0/22
188.93.88.0-188.93.92.255
188.93.94.0/23
IPv6:
2a0a:5000::/29
2a0d:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
9f:5c:55:b7:36:b3:c5:fe:21:23:e4:98:d7:61:c6:e5:83:90:
b6:ea:5f:ef:0d:0d:32:38:47:5b:4c:3f:06:61:27:9f:91:44:
d3:e4:35:04:ae:c2:07:1c:70:86:17:bd:cc:4c:6c:7f:c5:ae:
16:db:d7:51:07:8d:b8:8b:a0:de:b1:cb:c0:fe:6a:2f:d0:c6:
42:b9:30:cf:4f:f1:19:d0:5c:cf:40:88:4d:af:49:73:5d:7b:
d8:f7:28:f6:4e:56:88:99:ec:7c:e6:40:50:6d:ec:ba:5c:fe:
0c:be:78:aa:25:90:56:55:be:04:da:5a:49:95:c5:9f:07:cb:
80:9f:0e:47:76:17:d6:c4:45:ae:b1:f0:0d:13:f2:a0:6d:bf:
30:f2:8a:74:52:fd:c9:75:58:0c:ac:2b:ef:af:8c:1e:88:93:
5c:d9:0f:4c:06:14:56:84:17:d2:83:d0:e3:d2:37:a8:47:7e:
f8:4e:c2:a5:31:cc:8c:3e:c9:d5:87:f8:ce:a5:b4:57:fb:3a:
1f:d3:af:c4:05:0e:fb:48:2a:65:4f:86:df:33:fe:d0:80:a2:
f8:1e:ce:86:fd:91:d3:24:9e:a8:39:31:d4:99:0c:e3:e6:b1:
d9:fd:6b:ea:9a:09:f8:43:8f:8f:2a:bc:bb:c3:76:24:97:e9:
94:84:f9:fc
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQnRk+slnToltCY/kEZpm3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh
ZjljYTYwHhcNMjUwMTAyMTM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWY5MDQzOTI2YmMwNTYyZWJiMDk1ZTgzOTJlYWYzZGQ1MWJmYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWxX1FKvRz7gWJnw/jLRbEajdZcY
GDjZhsiRqBHz0dyGO6C6msmoNWVwocqM31qa5eYa66m8OwcRzzDl/K0x1hl36fV8
RAtnpp8DdkkYgQ2ADRelqOcRlcd0ZznvKwZ6aCEVQKei850TsRvh4mRcvHGndmU9
xYO/ywMuB/KSN8NRFxYS3xhFQ9f/vyQRMVfzP1ZouGO+vhT/T2Jt3cekE51Lz8NP
6hrpSHm3tciqgaKYt+ftNy2pMoTp/xaeTQsW8k+DtG5dcSws6RrAG8WhT+4B5mNI
9QiKumDYgHcIlYvkNRxQJjW7kcnSsQ4naiyyrNdMhx4H6FnYosRyIbobxQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFG75BDkmvAVi67CV6Dkurz3VG/t6MB8GA1UdIwQY
MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt
MTlhM2M1NjQ5YjU3LzEvYnZrRU9TYThCV0xyc0pYb09TNnZQZFViLTNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3
LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAmBAIAATAgAwQCuYs4AwQC
ueVsMAwDBAO8XVgDBAC8XVwDBAG8XV4wFAQCAAIwDgMFAyoKUAADBQAqDYoAMA0G
CSqGSIb3DQEBCwUAA4IBAQCfXFW3NrPF/iEj5JjXYcblg5C26l/vDQ0yOEdbTD8G
YSefkUTT5DUErsIHHHCGF73MTGx/xa4W29dRB424i6DescvA/mov0MZCuTDPT/EZ
0FzPQIhNr0lzXXvY9yj2TlaImex85kBQbey6XP4MvniqJZBWVb4E2lpJlcWfB8uA
nw5HdhfWxEWusfANE/Kgbb8w8op0Uv3JdVgMrCvvr4weiJNc2Q9MBhRWhBfSg9Dj
0jeoR374TsKlMcyMPsnVh/jOpbRX+zof06/EBQ77SCplT4bfM/7QgKL4Hs6G/ZHT
JJ6oOTHUmQzj5rHZ/Wvqmgn4Q4+PKry7w3Ykl+mUhPn8
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:52 2025 by rpki-client