Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/biqyFypLLQNkv7SioX50S6Sicvg.roa
File: biqyFypLLQNkv7SioX50S6Sicvg.roa (raw, json)
Hash identifier: LF7o3l8/q2c8dQh0AVrayQ/2mZza3ObHjFmvPVVd/nE=
Subject key identifier: 6E:2A:B2:17:2A:4B:2D:03:64:BF:B4:A2:A1:7E:74:4B:A4:A2:72:F8
Certificate issuer: /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial: 0194214468BAB8BCCBB1FC86A27B9958AE54
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/biqyFypLLQNkv7SioX50S6Sicvg.roa
Signing time: Wed 01 Jan 2025 09:48:38 +0000
ROA not before: Wed 01 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.91.40.0/22 maxlen: 22
83.229.28.0/23 maxlen: 23
89.35.228.0/24 maxlen: 24
89.147.104.0/22 maxlen: 22
91.208.213.0/24 maxlen: 24
94.140.5.0/24 maxlen: 24
94.140.6.0/23 maxlen: 23
185.126.33.0/24 maxlen: 24
185.212.7.0/24 maxlen: 24
194.127.98.0/23 maxlen: 23
195.85.6.0/23 maxlen: 23
195.158.236.0/23 maxlen: 23
2a10:13c0:da7a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:68:ba:b8:bc:cb:b1:fc:86:a2:7b:99:58:ae:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2ab2172a4b2d0364bfb4a2a17e744ba4a272f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:28:91:c6:fc:0f:a0:38:fd:dc:5b:62:79:
cf:1b:89:e9:72:63:1f:1b:fb:7c:27:9c:4f:77:3e:
17:cd:45:ab:4d:21:90:68:f1:5c:4c:bc:77:69:6c:
e9:e3:b2:c4:d8:31:86:4d:c9:74:81:17:f1:8e:7a:
f4:5d:97:6d:55:a9:b6:b6:10:d3:39:83:38:c5:e5:
b6:40:88:0a:e8:52:43:6b:d8:3c:43:87:ea:8a:a0:
30:f9:25:0a:dc:97:8c:10:f8:78:15:5a:46:9e:1d:
2d:1e:ed:c6:8b:72:8a:1a:f5:ce:40:28:d3:cd:73:
50:73:9a:99:44:f0:fb:f9:df:e9:61:2c:a4:c9:b4:
0b:0d:17:70:d2:e8:29:41:76:e0:07:8b:65:3f:42:
2e:41:b4:17:f7:f9:42:ed:27:3b:12:bd:ef:64:4c:
ff:2c:92:6f:c4:2f:97:93:8f:74:51:1f:e9:ee:b8:
68:34:c0:cc:9b:9c:0e:e7:bc:85:e4:d7:ee:fd:e2:
06:64:1e:05:69:56:29:9c:e6:80:44:cc:24:38:52:
27:7b:8a:3c:5c:9d:da:56:23:4d:5b:f6:1f:ee:dc:
a1:ec:1d:e2:c3:81:df:2e:91:85:6b:4b:0c:1d:39:
90:90:b9:a3:0b:bf:49:6a:b8:a1:db:0e:5f:1f:f2:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:B2:17:2A:4B:2D:03:64:BF:B4:A2:A1:7E:74:4B:A4:A2:72:F8
X509v3 Authority Key Identifier:
keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/biqyFypLLQNkv7SioX50S6Sicvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.40.0/22
83.229.28.0/23
89.35.228.0/24
89.147.104.0/22
91.208.213.0/24
94.140.5.0-94.140.7.255
185.126.33.0/24
185.212.7.0/24
194.127.98.0/23
195.85.6.0/23
195.158.236.0/23
IPv6:
2a10:13c0:da7a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:fb:5e:a9:76:be:d2:bd:18:9c:f1:71:aa:a1:4e:de:d7:67:
66:dd:35:df:70:59:54:fc:12:75:3a:56:da:68:1f:24:75:cb:
7e:77:00:a5:6b:ec:88:4e:9e:74:b4:50:24:20:6d:73:26:88:
11:87:92:30:9d:18:37:73:a1:76:21:60:13:d6:bb:e6:50:23:
3e:13:d7:e7:09:94:e7:72:7b:29:c2:62:21:bb:90:44:9b:d1:
1e:55:78:e1:12:0e:19:9f:1f:2f:09:82:8c:21:0b:32:22:bd:
0f:73:eb:b7:81:8d:5b:aa:26:83:2e:7f:3d:bc:45:27:00:0f:
ef:9b:b1:d9:f4:81:30:18:0c:a5:cb:69:eb:2f:bf:78:b8:c3:
51:0d:d2:a2:8e:49:74:b6:5b:0b:62:20:fb:3d:ce:c0:ad:1a:
d7:e1:7d:73:73:5d:74:c3:6e:87:68:7d:59:95:c8:62:f7:d1:
33:91:00:b8:97:b6:f4:1a:0e:d5:8e:a6:58:ba:3d:75:6b:5b:
83:c7:a2:e1:b6:7f:8a:e9:a7:9e:c1:07:71:e5:86:fe:2d:c8:
3d:44:cc:a9:12:8f:23:14:c4:3b:50:35:15:f9:28:b6:ae:34:
55:c4:17:bf:24:e1:55:cf:cb:d0:aa:96:a8:62:41:e0:7f:fe:
d9:12:57:3d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAZQhRGi6uLzLsfyGonuZWK5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNGVmZTdjNTQxZjU0MDZkYzdlMGZmMjY4ZDA1NTgyYmFl
ZmM5OTYwHhcNMjUwMTAxMDk0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTJhYjIxNzJhNGIyZDAzNjRiZmI0YTJhMTdlNzQ0YmE0YTI3MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO4okcb8D6A4/dxbYnnPG4npcmMf
G/t8J5xPdz4XzUWrTSGQaPFcTLx3aWzp47LE2DGGTcl0gRfxjnr0XZdtVam2thDT
OYM4xeW2QIgK6FJDa9g8Q4fqiqAw+SUK3JeMEPh4FVpGnh0tHu3Gi3KKGvXOQCjT
zXNQc5qZRPD7+d/pYSykybQLDRdw0ugpQXbgB4tlP0IuQbQX9/lC7Sc7Er3vZEz/
LJJvxC+Xk490UR/p7rhoNMDMm5wO57yF5Nfu/eIGZB4FaVYpnOaARMwkOFIne4o8
XJ3aViNNW/Yf7tyh7B3iw4HfLpGFa0sMHTmQkLmjC79Jarih2w5fH/If/QIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFG4qshcqSy0DZL+0oqF+dEukonL4MB8GA1UdIwQY
MBaAFBNO/nxUH1QG3H4P8mjQVYK678mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2It
YjM2NDkxZWU2ZWU0LzEvYmlxeUZ5cExMUU5rdjdTaW9YNTBTNlNpY3ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2ItYjM2NDkxZWU2ZWU0
LzEvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBQBAIAATBKAwQCLVsoAwQB
U+UcAwQAWSPkAwQCWZNoAwQAW9DVMAwDBABejAUDBANejAADBAC5fiEDBAC51AcD
BAHCf2IDBAHDVQYDBAHDnuwwDwQCAAIwCQMHACoQE8DaejANBgkqhkiG9w0BAQsF
AAOCAQEAjPteqXa+0r0YnPFxqqFO3tdnZt0133BZVPwSdTpW2mgfJHXLfncApWvs
iE6edLRQJCBtcyaIEYeSMJ0YN3OhdiFgE9a75lAjPhPX5wmU53J7KcJiIbuQRJvR
HlV44RIOGZ8fLwmCjCELMiK9D3Prt4GNW6omgy5/PbxFJwAP75ux2fSBMBgMpctp
6y+/eLjDUQ3Soo5JdLZbC2Ig+z3OwK0a1+F9c3NddMNuh2h9WZXIYvfRM5EAuJe2
9BoO1Y6mWLo9dWtbg8ei4bZ/iumnnsEHceWG/i3IPUTMqRKPIxTEO1A1Ffkotq40
VcQXvyThVc/L0KqWqGJB4H/+2RJXPQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:37 2025 by rpki-client