Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/6kZ_6RA1c05XKAsrc1py9ac9dvg.roa
File: 6kZ_6RA1c05XKAsrc1py9ac9dvg.roa (raw, json)
Hash identifier: bYRwgzFxPMcxI/PivW6gp2CdYrzJ3/Fe3PD9f8xJzGc=
Subject key identifier: EA:46:7F:E9:10:35:73:4E:57:28:0B:2B:73:5A:72:F5:A7:3D:76:F8
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019586759035FA4FA3F50F1911A435DE6409
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/6kZ_6RA1c05XKAsrc1py9ac9dvg.roa
Signing time: Tue 11 Mar 2025 18:26:46 +0000
ROA not before: Tue 11 Mar 2025 18:26:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214790
IP address blocks: 5.181.201.0/24 maxlen: 24
45.12.28.0/24 maxlen: 24
45.155.120.0/24 maxlen: 24
45.158.81.0/24 maxlen: 24
89.22.192.0/23 maxlen: 24
185.36.140.0/23 maxlen: 24
185.36.142.0/23 maxlen: 24
185.225.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:75:90:35:fa:4f:a3:f5:0f:19:11:a4:35:de:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Mar 11 18:26:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea467fe91035734e57280b2b735a72f5a73d76f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:50:81:84:cd:b5:4c:2e:62:37:6f:97:b9:
2e:8d:17:f7:89:55:56:6a:11:b5:4c:22:aa:6c:37:
cd:ec:5a:a7:c0:67:3d:f4:58:43:1a:55:83:43:c6:
7a:c7:e6:92:91:a3:31:f7:39:5c:9f:d2:b8:ce:95:
cb:69:60:58:64:ab:d6:9a:0c:0e:31:8c:20:6d:88:
b3:97:a8:b9:28:4a:79:55:fe:3b:d6:5e:d2:6b:61:
45:7c:36:6f:41:cb:b7:26:8a:60:a5:8f:e1:d7:7b:
a2:fa:b2:a0:ff:39:74:af:d7:6c:4e:93:e4:24:d9:
68:1c:1c:01:b4:2b:84:c7:58:bb:df:37:00:cd:a4:
9c:1f:0e:ba:54:cf:01:55:3d:23:a6:b1:2a:ca:1b:
fb:44:b8:5a:16:6a:84:c6:cb:b1:fb:1d:8a:60:3c:
77:39:64:68:60:d9:1a:45:d6:31:0d:79:51:57:f4:
ce:fa:83:18:1e:20:40:47:0d:1b:87:7e:ed:02:3c:
b5:92:86:1d:a1:a2:a0:44:3c:40:4c:71:e3:48:70:
e9:aa:d6:b4:39:5e:a5:19:2d:74:4b:08:1a:22:5b:
eb:cf:98:4d:d2:0b:1c:c9:18:d8:83:b0:e3:0a:78:
4c:4d:1d:6c:3c:9d:66:c3:57:44:d1:9d:7f:ae:0d:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:7F:E9:10:35:73:4E:57:28:0B:2B:73:5A:72:F5:A7:3D:76:F8
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/6kZ_6RA1c05XKAsrc1py9ac9dvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.201.0/24
45.12.28.0/24
45.155.120.0/24
45.158.81.0/24
89.22.192.0/23
185.36.140.0/22
185.225.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d2:e7:80:2f:06:41:cc:d8:ae:ec:ea:6c:14:1f:ee:06:22:
8f:99:ce:e9:78:f0:9b:b7:ce:9a:49:be:91:78:2a:c6:ef:c9:
c5:b7:24:8a:fa:12:c7:fc:2c:fd:bf:03:a1:f1:e0:96:20:e8:
7e:f3:ed:ee:70:b6:66:f7:7c:8d:2e:54:a7:94:b3:00:bc:e9:
e0:df:64:d7:39:ec:4f:23:55:56:49:48:0d:b9:07:6a:95:31:
eb:37:3e:61:10:d3:42:a3:56:ec:21:7f:65:4d:82:ee:ff:e1:
1c:cd:c9:f6:63:9e:57:4f:04:1c:66:8e:ae:6c:01:ae:0b:61:
c2:4b:7d:ed:09:0f:2b:d3:4e:bc:72:72:9a:04:d7:44:99:f5:
6b:66:58:9c:99:51:35:7f:e5:e0:0a:b7:f7:81:da:bf:d2:c2:
e2:cb:24:da:01:aa:4e:88:60:c7:ce:ed:ba:53:5d:46:fe:55:
aa:6c:e0:1f:17:26:2b:2b:52:d4:7d:b4:84:a1:e8:02:d6:21:
6e:fa:09:4d:5b:1b:17:e7:f8:19:e5:f4:fa:33:bf:fb:0b:4e:
74:1b:dc:00:91:d8:d1:de:46:90:16:b0:3a:6a:a7:71:60:28:
2f:e2:2c:1a:78:87:e5:79:17:06:2f:a3:fd:d7:0b:d3:db:33:
7b:5b:5a:36
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZWGdZA1+k+j9Q8ZEaQ13mQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjUwMzExMTgyNjQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTQ2N2ZlOTEwMzU3MzRlNTcyODBiMmI3MzVhNzJmNWE3M2Q3NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhQgYTNtUwuYjdvl7kujRf3iVVW
ahG1TCKqbDfN7FqnwGc99FhDGlWDQ8Z6x+aSkaMx9zlcn9K4zpXLaWBYZKvWmgwO
MYwgbYizl6i5KEp5Vf471l7Sa2FFfDZvQcu3JopgpY/h13ui+rKg/zl0r9dsTpPk
JNloHBwBtCuEx1i73zcAzaScHw66VM8BVT0jprEqyhv7RLhaFmqExsux+x2KYDx3
OWRoYNkaRdYxDXlRV/TO+oMYHiBARw0bh37tAjy1koYdoaKgRDxATHHjSHDpqta0
OV6lGS10SwgaIlvrz5hN0gscyRjYg7DjCnhMTR1sPJ1mw1dE0Z1/rg1H8wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOpGf+kQNXNOVygLK3NacvWnPXb4MB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvNmtaXzZSQTFjMDVYS0FzcmMxcHk5YWM5ZHZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABbXJAwQA
LQwcAwQALZt4AwQALZ5RAwQBWRbAAwQCuSSMAwQAueHNMA0GCSqGSIb3DQEBCwUA
A4IBAQBL0ueALwZBzNiu7OpsFB/uBiKPmc7pePCbt86aSb6ReCrG78nFtySK+hLH
/Cz9vwOh8eCWIOh+8+3ucLZm93yNLlSnlLMAvOng32TXOexPI1VWSUgNuQdqlTHr
Nz5hENNCo1bsIX9lTYLu/+Eczcn2Y55XTwQcZo6ubAGuC2HCS33tCQ8r0068cnKa
BNdEmfVrZlicmVE1f+XgCrf3gdq/0sLiyyTaAapOiGDHzu26U11G/lWqbOAfFyYr
K1LUfbSEoegC1iFu+glNWxsX5/gZ5fT6M7/7C050G9wAkdjR3kaQFrA6aqdxYCgv
4iwaeIfleRcGL6P91wvT2zN7W1o2
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:40 2025 by rpki-client