Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa
File: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (raw, json)
Hash identifier: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=
Subject key identifier: 45:28:CC:85:36:86:B6:E0:1F:78:35:CE:5F:7B:B0:C8:04:F5:12:89
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 0196BF76B693C257895ABD416AB3EF917883
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa
Signing time: Sun 11 May 2025 13:09:10 +0000
ROA not before: Sun 11 May 2025 13:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29577
IP address blocks: 92.249.56.0/22 maxlen: 22
92.249.56.0/24 maxlen: 24
92.249.57.0/24 maxlen: 24
92.249.58.0/24 maxlen: 24
92.249.59.0/24 maxlen: 24
176.101.32.0/20 maxlen: 20
176.101.32.0/24 maxlen: 24
176.101.33.0/24 maxlen: 24
176.101.34.0/24 maxlen: 24
176.101.35.0/24 maxlen: 24
176.101.36.0/24 maxlen: 24
176.101.37.0/24 maxlen: 24
176.101.38.0/24 maxlen: 24
176.101.39.0/24 maxlen: 24
176.101.40.0/24 maxlen: 24
176.101.41.0/24 maxlen: 24
176.101.42.0/24 maxlen: 24
176.101.43.0/24 maxlen: 24
176.101.44.0/24 maxlen: 24
176.101.45.0/24 maxlen: 24
176.101.46.0/24 maxlen: 24
176.101.47.0/24 maxlen: 24
176.101.48.0/21 maxlen: 21
176.101.48.0/24 maxlen: 24
176.101.49.0/24 maxlen: 24
176.101.50.0/24 maxlen: 24
176.101.51.0/24 maxlen: 24
176.101.52.0/24 maxlen: 24
176.101.53.0/24 maxlen: 24
176.101.54.0/24 maxlen: 24
176.101.55.0/24 maxlen: 24
194.146.148.0/22 maxlen: 22
194.146.148.0/24 maxlen: 24
194.146.149.0/24 maxlen: 24
194.146.150.0/24 maxlen: 24
194.146.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:76:b6:93:c2:57:89:5a:bd:41:6a:b3:ef:91:78:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: May 11 13:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4528cc853686b6e01f7835ce5f7bb0c804f51289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:d3:70:77:4b:1a:09:3c:f7:18:de:1e:09:
02:ae:32:77:c4:e5:21:ec:e4:be:7a:c5:65:e7:21:
25:7c:3d:15:26:9f:07:f7:e5:99:5c:d5:17:ad:74:
a2:4d:4d:5f:f3:a6:19:f3:52:a0:28:96:38:a4:1e:
ea:4a:5d:d7:64:b0:88:83:a6:1d:d4:21:d1:fa:5a:
a5:22:58:fe:98:ac:6e:2f:6a:ce:f4:1b:6b:7d:a5:
f6:66:1d:30:f5:6d:98:c0:a3:67:e7:7c:38:1b:c4:
e4:be:12:0d:40:e4:f3:26:e3:a5:89:e8:18:2d:31:
ff:16:f0:64:2a:31:5b:c7:dc:11:a1:c0:1d:b0:b3:
95:3d:d8:83:6a:d3:d3:6e:db:0e:4a:8d:f9:ed:ed:
09:83:a2:42:d3:59:ed:90:a7:cb:ed:e6:1e:87:ed:
f0:18:60:70:82:00:e3:8c:f8:f6:f6:ac:eb:74:0a:
4c:5f:d5:9d:f8:01:d9:eb:dc:83:be:e1:5f:27:d2:
46:87:bd:a2:9d:3c:4c:a8:e4:02:58:29:cf:49:34:
fd:9d:b3:ca:ff:3e:00:c8:78:f7:55:ba:7a:a7:49:
30:f0:08:ad:51:c1:87:87:1c:c6:64:e1:f3:c1:5f:
95:3a:e9:94:0d:65:b9:c8:13:8f:10:b0:5c:72:d2:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:CC:85:36:86:B6:E0:1F:78:35:CE:5F:7B:B0:C8:04:F5:12:89
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.56.0/22
176.101.32.0-176.101.55.255
194.146.148.0/22
Signature Algorithm: sha256WithRSAEncryption
93:6d:2b:71:c3:30:1f:02:09:50:03:1b:0b:11:c7:82:9a:1b:
ca:2a:8d:f9:d9:dc:5e:1a:e4:50:86:94:0f:41:98:50:73:0f:
92:31:dd:68:b4:d4:8d:47:49:2c:ec:d6:62:e5:32:60:b9:69:
1d:bc:f4:8e:c4:fc:e0:54:bf:6e:5e:60:65:76:b9:78:49:2a:
66:44:6e:07:93:56:c2:80:9a:78:1f:16:c7:c5:d4:72:6b:43:
d2:a1:ac:ed:14:ff:c2:fa:4b:f4:9a:0d:61:f9:97:3c:db:16:
74:80:34:e2:5f:6f:65:f4:b0:d7:d4:c4:79:b9:e4:0d:af:7d:
ee:7a:7a:26:0a:ce:57:59:f4:e5:a9:23:eb:9d:bc:48:56:cb:
13:97:6b:89:a6:fc:a6:39:e2:9c:d8:e9:09:d2:ba:3e:29:60:
75:24:25:f8:72:96:a3:97:bd:14:8b:5e:c7:9a:70:46:fe:4c:
1d:5b:c4:b3:37:7f:08:ac:95:f7:52:7a:38:e5:47:45:ed:29:
b3:90:51:c0:dd:44:3b:02:2f:c6:20:1e:f4:e4:c5:f4:79:05:
13:21:80:84:dd:54:dd:dd:db:d6:59:dd:4a:bf:c8:2b:65:fc:
d7:79:43:07:ac:f7:74:41:1b:98:36:12:6e:8c:b8:83:bc:5b:
11:6d:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:27:18 2025 by rpki-client