Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/lW93GA1GW7tkRrvTWbYjnCQPx5E.roa
File: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (raw, json)
Hash identifier: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=
Subject key identifier: 95:6F:77:18:0D:46:5B:BB:64:46:BB:D3:59:B6:23:9C:24:0F:C7:91
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019740BE390E806598C3A2921D4033F6C759
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/lW93GA1GW7tkRrvTWbYjnCQPx5E.roa
Signing time: Thu 05 Jun 2025 15:38:17 +0000
ROA not before: Thu 05 Jun 2025 15:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49635
IP address blocks: 27.0.172.0/22 maxlen: 24
46.183.112.0/21 maxlen: 24
79.143.88.0/21 maxlen: 24
80.240.126.0/23 maxlen: 24
85.208.20.0/22 maxlen: 24
93.189.88.0/21 maxlen: 24
103.23.60.0/23 maxlen: 24
161.22.40.0/21 maxlen: 24
176.100.200.0/21 maxlen: 24
185.166.212.0/22 maxlen: 24
185.214.80.0/23 maxlen: 24
185.253.152.0/22 maxlen: 24
185.254.204.0/22 maxlen: 24
187.33.144.0/20 maxlen: 24
200.234.224.0/20 maxlen: 24
217.71.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:be:39:0e:80:65:98:c3:a2:92:1d:40:33:f6:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Jun 5 15:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956f77180d465bbb6446bbd359b6239c240fc791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:f7:47:4e:46:67:77:22:8a:71:f0:c6:4a:
0d:fc:f8:7a:09:a0:c7:73:0c:08:af:97:a6:49:b3:
8f:77:3c:d1:19:bc:cc:f6:54:d5:ba:b8:06:dd:e3:
8f:8f:d9:11:d3:e6:22:a2:32:2a:81:9d:b1:81:7f:
6a:f2:05:e2:50:91:3a:e6:8f:a9:e6:43:e0:aa:11:
82:ab:f7:4c:43:ed:29:b3:5d:f7:44:05:24:dc:59:
f7:a2:76:23:19:6b:b1:ad:1b:a1:d7:d8:87:c6:68:
02:b8:1b:15:b3:51:bd:e6:b2:ee:ec:69:bc:7a:09:
aa:aa:2b:dc:94:8e:c0:69:a4:41:dc:81:bd:38:4b:
cb:3e:e9:8c:3a:61:9a:91:e5:93:ad:6d:3f:0a:66:
0b:76:f9:1f:c7:65:83:a7:ca:e5:d3:2a:3a:34:4b:
eb:41:59:1d:2a:e1:d3:ba:aa:eb:28:5f:e4:9a:99:
0e:23:47:ac:9b:03:cd:48:c9:a0:93:af:bf:5d:40:
8c:56:b7:08:75:8c:a9:19:e8:33:bc:ab:94:31:14:
e3:af:77:55:7e:bd:bc:cd:5d:44:4c:77:68:4c:cd:
22:58:bc:f2:f3:ef:33:ec:41:2b:ca:47:c0:84:0e:
26:a2:bc:9d:cb:4a:cf:6f:87:c7:8a:55:82:c3:76:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:77:18:0D:46:5B:BB:64:46:BB:D3:59:B6:23:9C:24:0F:C7:91
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/lW93GA1GW7tkRrvTWbYjnCQPx5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.172.0/22
46.183.112.0/21
79.143.88.0/21
80.240.126.0/23
85.208.20.0/22
93.189.88.0/21
103.23.60.0/23
161.22.40.0/21
176.100.200.0/21
185.166.212.0/22
185.214.80.0/23
185.253.152.0/22
185.254.204.0/22
187.33.144.0/20
200.234.224.0/20
217.71.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:2b:2e:7e:8c:3f:10:ab:16:2f:be:d3:54:a4:31:1e:cd:72:
4b:0e:a2:79:74:5a:52:bd:0e:43:3a:d3:3d:19:ab:ca:bc:39:
a1:cd:54:29:3c:17:10:63:28:1c:94:97:26:d4:3f:46:65:d2:
44:06:f0:f2:01:26:9b:c2:fd:9d:d4:7a:86:a5:d9:70:12:6b:
fe:41:36:27:b7:5d:07:4c:0c:45:8b:34:df:76:67:3d:ee:b6:
6e:12:03:97:a6:5d:18:30:d3:17:04:5d:d9:a8:83:09:5d:38:
63:02:3f:5c:23:49:b8:21:d9:07:85:3a:13:32:48:aa:60:69:
54:0b:f4:2f:e5:b8:91:37:6c:0d:f7:de:9c:5d:cf:17:e9:27:
56:d0:79:9d:6d:e5:63:e0:22:b3:b1:53:b7:aa:bc:aa:86:74:
76:ab:28:ab:3a:f5:a9:b7:63:57:f2:f1:01:3a:cb:51:1e:41:
fd:cf:52:f7:2b:03:68:27:5e:ed:5f:62:5e:8f:45:11:15:48:
67:3c:73:b4:00:af:fb:64:ed:9e:8b:ab:f4:79:c5:cc:0a:fd:
48:f6:96:f6:51:7b:ab:94:37:93:34:c6:1f:46:8e:93:c0:26:
1a:f2:55:78:22:11:13:bc:66:73:da:f1:fb:00:ef:06:57:cd:
95:b2:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:34 2025 by rpki-client