Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/l4KSf9OK0ihu_CAuXr-SVQcbAEs.roa
File: l4KSf9OK0ihu_CAuXr-SVQcbAEs.roa (raw, json)
Hash identifier: mfYC6RD/m/v4hisVttYsfJ1BUyAxecncIrclyrsDuFc=
Subject key identifier: 97:82:92:7F:D3:8A:D2:28:6E:FC:20:2E:5E:BF:92:55:07:1B:00:4B
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018DD665BD438BC303DB8335117B355EC26A
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/l4KSf9OK0ihu_CAuXr-SVQcbAEs.roa
Signing time: Fri 23 Feb 2024 14:36:48 +0000
ROA not before: Fri 23 Feb 2024 14:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203346
IP address blocks: 37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
37.156.173.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
77.81.89.0/24 maxlen: 24
86.104.222.0/23 maxlen: 23
86.104.224.0/23 maxlen: 23
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.184.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.105.243.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.105.0/24 maxlen: 24
86.106.106.0/23 maxlen: 23
86.106.110.0/23 maxlen: 23
86.106.114.0/23 maxlen: 23
86.106.118.0/24 maxlen: 24
86.106.138.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
89.32.43.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.116.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
89.33.198.0/23 maxlen: 23
89.33.200.0/23 maxlen: 23
89.33.206.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.35.54.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.139.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.37.129.0/24 maxlen: 24
89.37.130.0/23 maxlen: 23
89.37.132.0/23 maxlen: 23
89.37.134.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
89.39.212.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.39.241.0/24 maxlen: 24
89.40.140.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
89.41.28.0/23 maxlen: 23
89.41.49.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.41.189.0/24 maxlen: 24
89.41.190.0/23 maxlen: 23
89.42.10.0/24 maxlen: 24
89.42.152.0/23 maxlen: 23
89.45.82.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
93.114.58.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
93.119.124.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
185.80.112.0/23 maxlen: 23
185.80.114.0/23 maxlen: 23
188.172.176.0/20 maxlen: 20
188.208.48.0/22 maxlen: 22
188.208.52.0/22 maxlen: 22
188.208.222.0/23 maxlen: 23
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
188.211.167.0/24 maxlen: 24
188.212.254.0/24 maxlen: 24
188.213.206.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
188.213.248.0/22 maxlen: 22
188.213.252.0/22 maxlen: 22
188.214.95.0/24 maxlen: 24
188.241.211.0/24 maxlen: 24
193.30.254.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.254.48.0/21 maxlen: 21
193.254.56.0/21 maxlen: 21
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:65:bd:43:8b:c3:03:db:83:35:11:7b:35:5e:c2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Feb 23 14:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9782927fd38ad2286efc202e5ebf9255071b004b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:23:4b:7c:20:ff:2c:fa:5b:b2:f6:1b:5c:
d7:20:cc:77:c6:c4:4b:17:c4:6f:4e:8e:9c:d2:b9:
e9:fc:75:2f:da:db:4a:be:a0:d6:b4:cc:73:f7:4c:
2f:f3:82:67:cd:17:71:8e:13:c0:9f:8f:de:b7:98:
dc:e5:89:14:8d:89:b2:b7:ce:0a:da:47:7b:d7:ab:
f3:0b:31:ad:65:2a:79:4c:7b:7f:1f:fd:dc:72:86:
bd:8b:aa:2c:7a:bc:07:fd:ff:48:b1:44:23:cd:df:
c9:b5:97:37:d4:e0:48:08:a4:99:85:d8:4a:cb:38:
25:3c:c9:9a:34:0e:5a:32:07:d9:8c:84:83:e4:44:
a6:f5:bb:63:29:fb:77:90:bc:82:22:71:1d:f3:96:
85:1f:fc:ea:f7:fa:b1:0a:13:37:8c:e7:a4:e8:3e:
d5:38:67:34:75:f7:56:5c:aa:57:62:8d:7f:90:43:
cc:93:64:74:84:c2:51:34:a4:71:3f:e5:04:89:da:
cc:ff:dc:05:46:e1:4e:da:21:b6:b2:5f:9b:22:e5:
ce:04:88:b9:30:84:7e:4f:fb:c6:53:62:0b:62:69:
ae:7d:04:70:e3:be:7d:59:8f:3f:7c:56:56:ce:c5:
86:79:46:69:7a:a2:20:d9:9d:12:fc:22:b7:d4:a5:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:92:7F:D3:8A:D2:28:6E:FC:20:2E:5E:BF:92:55:07:1B:00:4B
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/l4KSf9OK0ihu_CAuXr-SVQcbAEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
37.156.173.0/24
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.184.0/23
86.105.229.0-86.105.230.255
86.105.242.0/23
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.105.0-86.106.107.255
86.106.110.0/23
86.106.114.0/23
86.106.118.0/24
86.106.138.0-86.106.141.255
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.116.0/24
89.33.134.0/24
89.33.198.0-89.33.201.255
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.54.0/24
89.35.89.0-89.35.90.255
89.36.38.0/23
89.36.136.0/24
89.36.138.0/23
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.37.129.0-89.37.134.255
89.38.240.0/24
89.39.69.0/24
89.39.212.0/24
89.39.215.0/24
89.39.241.0/24
89.40.140.0/23
89.40.207.0/24
89.40.209.0/24
89.41.28.0/23
89.41.49.0-89.41.51.255
89.41.189.0-89.41.191.255
89.42.10.0/24
89.42.152.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
185.80.112.0/22
188.172.176.0/20
188.208.48.0/21
188.208.222.0/23
188.209.120.0/21
188.211.167.0/24
188.212.254.0/24
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
188.214.95.0/24
188.241.211.0/24
193.30.254.0/24
193.32.66.0/23
193.254.48.0/20
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:f9:fd:a3:11:fd:9e:27:66:ca:1e:9c:dd:a9:27:44:17:93:
64:2c:84:81:51:4c:7c:b7:54:ad:65:e3:4e:d0:21:a6:c9:84:
94:7a:e9:bd:6b:61:5a:62:a8:aa:3b:94:dd:df:7f:85:cd:98:
9c:cf:7b:19:04:ba:a8:65:27:ad:fe:e5:f6:21:2f:e0:d2:81:
13:d0:23:58:5d:40:c9:76:9f:53:a9:8a:6d:e1:ad:92:0d:e8:
9b:92:73:66:fa:0f:f9:31:6a:32:1b:d1:4b:a4:26:af:bd:aa:
a8:5e:e7:05:26:8f:6f:86:d6:e0:18:df:43:62:39:c9:4b:f8:
34:c6:fa:c2:b5:1f:5a:09:dd:dd:80:9f:6f:0c:57:4c:3f:53:
a4:b1:ba:43:12:72:3b:13:cd:0f:88:d3:fd:3f:e4:23:42:35:
83:ba:8d:0e:41:f1:f4:49:ea:cc:cb:84:f0:f2:dd:7e:e2:e5:
5b:c7:0d:68:da:a0:1a:8f:ad:f0:63:ec:3e:73:d7:5e:2c:b6:
5c:a2:db:fa:c7:cf:c3:7f:60:5d:e8:aa:9f:b8:5a:3d:ac:28:
bd:65:fe:ac:de:8e:10:ca:ce:59:7f:06:6e:1e:44:da:cd:d4:
2b:a5:42:d0:3d:02:e7:65:86:7f:3e:d1:93:f8:64:1c:67:7a:
c3:21:75:e4
-----BEGIN CERTIFICATE-----
MIIHhTCCBm2gAwIBAgISAY3WZb1Di8MD24M1EXs1XsJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjQwMjIzMTQzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzgyOTI3ZmQzOGFkMjI4NmVmYzIwMmU1ZWJmOTI1NTA3MWIwMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns0jS3wg/yz6W7L2G1zXIMx3xsRL
F8RvTo6c0rnp/HUv2ttKvqDWtMxz90wv84JnzRdxjhPAn4/et5jc5YkUjYmyt84K
2kd716vzCzGtZSp5THt/H/3ccoa9i6oserwH/f9IsUQjzd/JtZc31OBICKSZhdhK
yzglPMmaNA5aMgfZjISD5ESm9btjKft3kLyCInEd85aFH/zq9/qxChM3jOek6D7V
OGc0dfdWXKpXYo1/kEPMk2R0hMJRNKRxP+UEidrM/9wFRuFO2iG2sl+bIuXOBIi5
MIR+T/vGU2ILYmmufQRw4759WY8/fFZWzsWGeUZpeqIg2Z0S/CK31KUNcwIDAQAB
o4IEkTCCBI0wHQYDVR0OBBYEFJeCkn/TitIobvwgLl6/klUHGwBLMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvbDRLU2Y5T0swaWh1X0NBdVhyLVNWUWNiQUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICpQYIKwYBBQUHAQcBAf8EggKUMIICkDCCAowEAgABMIIC
hAMEASWcQAMEACWcrQMEAS5mtjAMAwQCTVFUAwQATVFWAwQATVFZMAwDBAFWaN4D
BAFWaOADBABWaQIDBABWaQYDBABWabADBABWabIDBAFWabgwDAMEAFZp5QMEAFZp
5gMEAVZp8gMEAFZqCjAMAwQAVmoNAwQEVmoAAwQBVmpeMAwDBABWamkDBAJWamgD
BAFWam4DBAFWanIDBABWanYwDAMEAVZqigMEAVZqjAMEAVZqrgMEAFZrSDAMAwQA
VmvBAwQCVmvAAwQAWSArAwQAWSCqAwQBWSEuAwQAWSF0AwQAWSGGMAwDBAFZIcYD
BAFZIcgDBABZIc4DBAFZIfoDBAFZIf4DBABZImYDBAFZImgDBABZIzYwDAMEAFkj
WQMEAFkjWgMEAVkkJgMEAFkkiAMEAVkkigMEAFkkjQMEAFklXAMEAFklYDAMAwQA
WSWBAwQAWSWGAwQAWSbwAwQAWSdFAwQAWSfUAwQAWSfXAwQAWSfxAwQBWSiMAwQA
WSjPAwQAWSjRAwQBWSkcMAwDBABZKTEDBAJZKTAwDAMEAFkpvQMEBlkpgAMEAFkq
CgMEAVkqmAMEAFktUgMEAFkuLwMEAlva7AMEAVvrgjAMAwQAXXIzAwQAXXI2AwQB
XXI6AwQAXXM7MAwDBAFdd3YDBAFdd3gDBABdd3wDBABesX4wDAMEBrB+wAMEALB+
wjAMAwQCsN90AwQAsN92AwQAsN+hAwQCuVBwAwQEvKywAwQDvNAwAwQBvNDeAwQD
vNF4AwQAvNOnAwQAvNT+AwQBvNXOAwQBvNXWAwQDvNX4AwQAvNZfAwQAvPHTAwQA
wR7+AwQBwSBCAwQEwf4wAwQBwik8MA0GCSqGSIb3DQEBCwUAA4IBAQCz+f2jEf2e
J2bKHpzdqSdEF5NkLISBUUx8t1StZeNO0CGmyYSUeum9a2FaYqiqO5Td33+FzZic
z3sZBLqoZSet/uX2IS/g0oET0CNYXUDJdp9TqYpt4a2SDeibknNm+g/5MWoyG9FL
pCavvaqoXucFJo9vhtbgGN9DYjnJS/g0xvrCtR9aCd3dgJ9vDFdMP1OksbpDEnI7
E80PiNP9P+QjQjWDuo0OQfH0SerMy4Tw8t1+4uVbxw1o2qAaj63wY+w+c9deLLZc
otv6x8/Df2Bd6KqfuFo9rCi9Zf6s3o4Qys5ZfwZuHkTazdQrpULQPQLnZYZ/PtGT
+GQcZ3rDIXXk
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:38:51 2024 by rpki-client on console-ams.rpki-client.org