Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/cC9Kn5RNwJ59ItW6IXpERzZosPw.roa
File: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (raw, json)
Hash identifier: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=
Subject key identifier: 70:2F:4A:9F:94:4D:C0:9E:7D:22:D5:BA:21:7A:44:47:36:68:B0:FC
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01972EC90334CCFC3086BE17CDD26637680C
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/cC9Kn5RNwJ59ItW6IXpERzZosPw.roa
Signing time: Mon 02 Jun 2025 03:56:54 +0000
ROA not before: Mon 02 Jun 2025 03:56:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57822
IP address blocks: 94.247.106.0/24 maxlen: 24
94.247.107.0/24 maxlen: 24
94.247.109.0/24 maxlen: 24
185.54.245.0/24 maxlen: 24
185.54.246.0/24 maxlen: 24
185.54.247.0/24 maxlen: 24
2a02:47a0:3::/48 maxlen: 48
2a02:47a0:4::/48 maxlen: 48
2a02:47a0:201::/48 maxlen: 48
2a02:47a0:202::/48 maxlen: 48
2a02:47a0:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2e:c9:03:34:cc:fc:30:86:be:17:cd:d2:66:37:68:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jun 2 03:56:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=702f4a9f944dc09e7d22d5ba217a44473668b0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:2d:29:10:3c:e2:ad:38:98:3c:3d:4b:25:
1e:00:2e:cf:e4:7b:5b:7b:a0:2f:eb:12:b3:f1:72:
1b:77:27:f0:fa:6c:a0:a9:e5:43:e7:f0:b6:87:c8:
a0:e8:ba:69:a2:2a:19:d9:2d:0a:32:cb:ec:e5:49:
64:62:d0:fa:03:c6:6b:ef:22:8d:f2:d8:ee:ad:7c:
7f:4b:93:a9:f1:63:65:b6:4c:44:fc:d9:56:03:5f:
25:96:08:d8:7b:2b:9e:7d:b1:a7:04:c2:25:8c:6f:
42:49:42:24:6f:8a:47:07:b9:31:a4:43:77:ff:1d:
ec:c3:13:bd:41:2d:8b:1c:8c:45:e7:46:71:82:23:
8a:a9:1b:b2:b1:2f:3d:4f:55:9a:35:93:b9:c6:5c:
a2:f9:1f:49:f2:e3:6a:3f:2f:aa:ee:74:9f:42:d9:
36:ed:ba:2a:6e:63:7d:e3:4c:db:ba:91:b5:67:cb:
4d:0b:04:dd:e9:cd:97:57:e3:cc:fd:a2:04:61:f5:
07:46:44:6e:a7:b8:25:2c:6f:7a:a2:a7:f1:e9:60:
6d:2f:ba:6b:37:d7:29:6a:3f:6e:16:73:94:ae:04:
c3:df:84:99:da:46:30:27:ad:b2:ae:00:bf:dd:d0:
f0:38:62:9f:3b:cf:f8:30:72:7c:ab:cc:07:27:36:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:4A:9F:94:4D:C0:9E:7D:22:D5:BA:21:7A:44:47:36:68:B0:FC
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/cC9Kn5RNwJ59ItW6IXpERzZosPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.106.0/23
94.247.109.0/24
185.54.245.0-185.54.247.255
IPv6:
2a02:47a0:3::-2a02:47a0:4:ffff:ffff:ffff:ffff:ffff
2a02:47a0:201::-2a02:47a0:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:37:89:83:d3:56:1e:9f:b2:4b:b1:aa:5f:c7:a9:c4:06:ec:
33:ad:32:2c:23:43:05:48:c5:9c:07:4a:2a:fd:cc:1d:df:a9:
62:9c:e6:d2:15:4a:1f:52:61:94:42:2b:8b:99:83:c0:be:53:
12:c3:ac:0b:6d:c6:29:43:30:da:6a:48:60:c2:c7:02:e6:a1:
53:61:d5:0f:b3:d9:e5:55:ce:d8:8e:af:9a:73:1c:58:b9:55:
b0:77:d6:8e:6c:a8:94:cb:97:eb:23:dd:a9:5e:c1:8f:cb:9a:
09:93:0d:b6:b5:53:f6:5e:b0:75:4e:a1:c3:ad:d8:07:3d:c9:
bb:e3:33:fe:85:1c:2f:5f:9c:f3:a4:58:96:a0:86:90:88:00:
31:b6:19:00:b3:19:20:1e:32:c1:90:39:ac:70:88:df:d5:bb:
7e:91:97:f0:5a:33:4e:57:00:ff:ea:f6:b9:ed:83:cd:b7:66:
52:06:94:79:d5:3e:3d:7b:70:7a:76:6f:53:4c:90:66:ad:6a:
ec:56:e0:63:ab:cc:77:55:0e:2e:a1:0d:26:81:23:cd:44:86:
14:e3:1b:c8:a2:26:5a:a2:a4:7e:19:e0:ba:30:b2:4c:45:63:
4d:8d:43:17:36:74:4b:0d:80:46:3c:ea:84:96:9b:81:88:bb:
19:3e:93:eb
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZcuyQM0zPwwhr4XzdJmN2gMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4
MGIxZTMwHhcNMjUwNjAyMDM1NjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDJmNGE5Zjk0NGRjMDllN2QyMmQ1YmEyMTdhNDQ0NzM2NjhiMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuMtKRA84q04mDw9SyUeAC7P5Htb
e6Av6xKz8XIbdyfw+mygqeVD5/C2h8ig6LppoioZ2S0KMsvs5UlkYtD6A8Zr7yKN
8tjurXx/S5Op8WNltkxE/NlWA18llgjYeyuefbGnBMIljG9CSUIkb4pHB7kxpEN3
/x3swxO9QS2LHIxF50ZxgiOKqRuysS89T1WaNZO5xlyi+R9J8uNqPy+q7nSfQtk2
7boqbmN940zbupG1Z8tNCwTd6c2XV+PM/aIEYfUHRkRup7glLG96oqfx6WBtL7pr
N9cpaj9uFnOUrgTD34SZ2kYwJ62yrgC/3dDwOGKfO8/4MHJ8q8wHJzZn0QIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFHAvSp+UTcCefSLVuiF6REc2aLD8MB8GA1UdIwQY
MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct
ZmZiNzA5Zjc2NjhjLzEvY0M5S241Uk53SjU5SXRXNklYcEVSelpvc1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj
LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjAgBAIAATAaAwQBXvdqAwQA
XvdtMAwDBAC5NvUDBAO5NvAwLgQCAAIwKDASAwcAKgJHoAADAwcAKgJHoAAEMBID
BwAqAkegAgEDBwIqAkegAgAwDQYJKoZIhvcNAQELBQADggEBAJk3iYPTVh6fskux
ql/HqcQG7DOtMiwjQwVIxZwHSir9zB3fqWKc5tIVSh9SYZRCK4uZg8C+UxLDrAtt
xilDMNpqSGDCxwLmoVNh1Q+z2eVVztiOr5pzHFi5VbB31o5sqJTLl+sj3alewY/L
mgmTDba1U/ZesHVOocOt2Ac9ybvjM/6FHC9fnPOkWJaghpCIADG2GQCzGSAeMsGQ
OaxwiN/Vu36Rl/BaM05XAP/q9rntg823ZlIGlHnVPj17cHp2b1NMkGatauxW4GOr
zHdVDi6hDSaBI81EhhTjG8iiJlqipH4Z4LowskxFY02NQxc2dEsNgEY86oSWm4GI
uxk+k+s=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:52 2025 by rpki-client