Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nE2a0V1FGnkO9Q5vU0j7YGKRHhc.roa
File: nE2a0V1FGnkO9Q5vU0j7YGKRHhc.roa (raw, json)
Hash identifier: yEgxhmAOLtvFAnglcN5nKl/youZM5+M8Ch5L3f7vIeM=
Subject key identifier: 9C:4D:9A:D1:5D:45:1A:79:0E:F5:0E:6F:53:48:FB:60:62:91:1E:17
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019540F65E333FBAA1A92CD699C402EE0312
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nE2a0V1FGnkO9Q5vU0j7YGKRHhc.roa
Signing time: Wed 26 Feb 2025 06:34:02 +0000
ROA not before: Wed 26 Feb 2025 06:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49199
IP address blocks: 62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
62.76.194.0/24 maxlen: 24
193.232.161.0/24 maxlen: 24
193.232.169.0/24 maxlen: 24
193.232.183.0/24 maxlen: 24
194.190.11.0/24 maxlen: 24
194.190.94.0/23 maxlen: 24
194.226.34.0/23 maxlen: 24
194.226.137.0/24 maxlen: 24
195.19.10.0/23 maxlen: 24
195.208.16.0/24 maxlen: 24
195.208.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:f6:5e:33:3f:ba:a1:a9:2c:d6:99:c4:02:ee:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Feb 26 06:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c4d9ad15d451a790ef50e6f5348fb6062911e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:22:d9:10:ca:dd:6d:89:5b:04:90:4a:73:
cd:27:56:e8:00:c7:28:05:d8:2f:f4:6b:36:ce:96:
23:79:7b:ce:87:ef:14:eb:73:82:ef:38:18:55:39:
1d:ec:8e:53:4e:4e:c5:4e:56:c5:df:95:c5:6a:68:
74:b0:76:0f:b2:5b:18:5e:d3:bf:2b:23:da:4a:f2:
74:4a:3d:7e:87:c9:47:94:58:29:06:18:a5:e7:a6:
8a:ff:2a:47:a2:8e:54:98:d2:fe:8c:6a:24:63:2c:
b5:34:f8:5c:ee:7b:a2:ef:53:58:e4:bd:82:b9:96:
91:00:96:2d:b3:7d:40:cb:ab:0e:39:8c:ec:3a:0f:
61:d7:a0:1a:1f:fa:da:fb:d6:96:aa:3c:bd:38:df:
79:82:7b:84:2b:0b:a3:8a:76:dd:7b:8b:d7:55:0f:
fa:aa:b4:ab:37:a7:9c:b2:cf:09:8d:c0:73:9e:f1:
56:d6:cb:79:cf:ba:19:71:63:cc:a9:46:82:bb:38:
a2:46:b3:cb:0f:b6:fa:2c:72:38:0f:7b:81:63:23:
ac:ba:31:6f:41:68:00:71:0a:35:11:fb:b7:be:69:
99:f5:4b:00:47:6c:6a:47:84:2b:20:a4:ed:3f:da:
1d:71:0f:2c:01:3f:62:a3:a4:dd:dc:b7:ad:4b:46:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:9A:D1:5D:45:1A:79:0E:F5:0E:6F:53:48:FB:60:62:91:1E:17
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nE2a0V1FGnkO9Q5vU0j7YGKRHhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
62.76.194.0/24
193.232.161.0/24
193.232.169.0/24
193.232.183.0/24
194.190.11.0/24
194.190.94.0/23
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.16.0/24
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
70:4e:6a:75:7a:43:01:4b:9d:58:80:7c:a0:27:a7:a0:aa:f0:
a3:6c:03:1f:43:88:76:be:32:b7:10:bb:9e:d3:cc:d2:e7:8e:
cd:d5:d0:e1:1f:3c:dc:a9:9e:99:89:2a:f3:95:70:09:e1:b1:
63:0e:ac:5c:09:14:db:de:fd:ae:39:36:d4:f0:b2:9e:df:d5:
3e:65:8f:19:91:6e:b3:b0:31:e0:b4:5a:35:6e:5f:e4:59:7f:
62:d4:b7:b8:59:3c:88:f5:6c:bf:fd:79:37:c2:6b:82:e6:be:
d5:ea:c3:0b:86:74:f0:ca:06:07:73:5c:2a:6d:e4:58:c7:c4:
92:55:a0:0f:59:39:24:71:bd:14:ad:8f:21:da:f0:01:87:17:
52:ca:6d:b8:57:7e:d4:47:8a:05:f1:e7:5a:f4:2e:03:63:75:
33:43:c2:86:fa:29:a2:6f:cd:04:a8:f2:62:92:f8:b4:f3:7b:
db:48:90:33:d9:c5:d1:07:34:8e:7e:c1:25:01:bb:02:1d:72:
67:f4:e0:84:1f:1d:80:a6:f6:1f:53:c2:d0:2e:52:69:39:ff:
12:70:b1:07:72:62:43:72:af:0c:16:a4:ee:ba:ce:18:9b:e7:
5b:d8:96:c5:5d:d4:55:ea:95:e7:a2:4a:85:14:f0:cf:77:68:
5a:9e:97:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZVA9l4zP7qhqSzWmcQC7gMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjUwMjI2MDYzNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzRkOWFkMTVkNDUxYTc5MGVmNTBlNmY1MzQ4ZmI2MDYyOTExZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHoi2RDK3W2JWwSQSnPNJ1boAMco
Bdgv9Gs2zpYjeXvOh+8U63OC7zgYVTkd7I5TTk7FTlbF35XFamh0sHYPslsYXtO/
KyPaSvJ0Sj1+h8lHlFgpBhil56aK/ypHoo5UmNL+jGokYyy1NPhc7nui71NY5L2C
uZaRAJYts31Ay6sOOYzsOg9h16AaH/ra+9aWqjy9ON95gnuEKwujinbde4vXVQ/6
qrSrN6ecss8JjcBznvFW1st5z7oZcWPMqUaCuziiRrPLD7b6LHI4D3uBYyOsujFv
QWgAcQo1Efu3vmmZ9UsAR2xqR4QrIKTtP9odcQ8sAT9io6Td3LetS0YxZQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFJxNmtFdRRp5DvUOb1NI+2BikR4XMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvbkUyYTBWMUZHbmtPOVE1dlUwajdZR0tSSGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBPkxKAwQB
PkxgAwQAPkzCAwQAweihAwQAweipAwQAwei3AwQAwr4LAwQBwr5eAwQBwuIiAwQA
wuKJAwQBwxMKAwQAw9AQAwQBw9DcMA0GCSqGSIb3DQEBCwUAA4IBAQBwTmp1ekMB
S51YgHygJ6egqvCjbAMfQ4h2vjK3ELue08zS547N1dDhHzzcqZ6ZiSrzlXAJ4bFj
DqxcCRTb3v2uOTbU8LKe39U+ZY8ZkW6zsDHgtFo1bl/kWX9i1Le4WTyI9Wy//Xk3
wmuC5r7V6sMLhnTwygYHc1wqbeRYx8SSVaAPWTkkcb0UrY8h2vABhxdSym24V37U
R4oF8eda9C4DY3UzQ8KG+imib80EqPJikvi083vbSJAz2cXRBzSOfsElAbsCHXJn
9OCEHx2ApvYfU8LQLlJpOf8ScLEHcmJDcq8MFqTuus4Ym+db2JbFXdRV6pXnokqF
FPDPd2hanpd6
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:59:51 2025 by rpki-client