Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/MYE4-6Z5Xj2T0N4Zr1zjN4EpQhc.roa
File: MYE4-6Z5Xj2T0N4Zr1zjN4EpQhc.roa (raw, json)
Hash identifier: ZnNqulOiB+cymToT/52VvNa1rfFFIHJMaeQgFhSQ+AU=
Subject key identifier: 31:81:38:FB:A6:79:5E:3D:93:D0:DE:19:AF:5C:E3:37:81:29:42:17
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 0196F2FC78422032CB45F44CE477B64CAB44
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/MYE4-6Z5Xj2T0N4Zr1zjN4EpQhc.roa
Signing time: Wed 21 May 2025 13:15:54 +0000
ROA not before: Wed 21 May 2025 13:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50436
IP address blocks: 5.28.64.0/18 maxlen: 19
5.28.64.0/19 maxlen: 19
5.28.96.0/19 maxlen: 19
37.120.0.0/17 maxlen: 18
77.64.183.0/24 maxlen: 24
77.64.220.0/23 maxlen: 24
92.206.8.0/21 maxlen: 24
92.206.22.0/23 maxlen: 24
92.206.32.0/20 maxlen: 24
92.206.48.0/20 maxlen: 24
92.206.76.0/22 maxlen: 24
92.206.208.0/24 maxlen: 24
92.206.209.0/24 maxlen: 24
92.206.250.0/23 maxlen: 23
92.206.254.0/23 maxlen: 24
94.139.0.0/19 maxlen: 20
217.68.167.0/24 maxlen: 24
2a02:2455:8000::/36 maxlen: 36
2a02:2455:9000::/36 maxlen: 40
2a02:2455:a000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:fc:78:42:20:32:cb:45:f4:4c:e4:77:b6:4c:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: May 21 13:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=318138fba6795e3d93d0de19af5ce33781294217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:f7:54:ef:55:57:ee:4e:be:2c:90:8c:1b:
51:dd:b9:57:e4:da:98:2f:72:5e:ca:73:f7:e6:50:
28:3c:e6:a0:55:ff:5d:cc:17:d7:c3:69:8e:86:15:
21:c9:84:60:06:dc:f3:e8:87:81:43:47:10:d7:da:
5b:d8:71:89:b2:d6:f8:44:2f:0b:fc:b8:46:d8:e3:
75:74:35:e9:90:e0:31:b0:ba:9c:b2:50:33:da:97:
71:b3:6d:39:0f:77:cc:d8:fe:fc:dd:6c:ae:ad:24:
ad:10:04:be:5c:f9:61:0d:e2:e7:79:f2:4e:df:5f:
39:83:60:36:0d:16:c9:22:ce:09:ec:7b:34:f5:51:
1f:dc:73:a9:7f:5b:e1:fd:d1:50:8f:e2:1f:e9:56:
bd:79:19:9d:e2:05:22:ca:c7:cd:38:34:5c:43:1f:
50:b1:0d:1f:e9:41:38:f0:31:71:02:99:7e:bf:d2:
34:ad:fd:6e:0d:3f:0d:1f:94:3a:6b:e5:cc:ff:88:
98:26:66:f6:ed:61:82:32:43:07:cf:bb:2c:7d:a8:
5f:b8:e5:1e:49:3c:7a:6c:9c:5f:a1:76:2e:b7:bc:
c3:8b:1b:72:a0:1e:42:3b:e8:cc:bb:85:b3:1a:bd:
0d:27:78:95:c3:54:be:7c:a4:59:0b:56:f4:96:c2:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:81:38:FB:A6:79:5E:3D:93:D0:DE:19:AF:5C:E3:37:81:29:42:17
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/MYE4-6Z5Xj2T0N4Zr1zjN4EpQhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
37.120.0.0/17
77.64.183.0/24
77.64.220.0/23
92.206.8.0/21
92.206.22.0/23
92.206.32.0/19
92.206.76.0/22
92.206.208.0/23
92.206.250.0/23
92.206.254.0/23
94.139.0.0/19
217.68.167.0/24
IPv6:
2a02:2455:8000::-2a02:2455:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:c6:61:46:9c:cb:19:ac:a2:91:52:f0:48:6f:ee:00:e4:c8:
b1:a3:89:21:19:6b:82:e9:c8:2e:61:60:a2:d2:52:a1:d6:41:
d2:b7:1c:8c:1e:32:4d:90:04:66:90:dc:12:14:76:b4:76:a5:
26:43:82:6b:08:d6:7f:cd:e9:d5:17:66:29:2f:64:ed:9a:31:
b8:d8:cd:cb:2c:a6:c4:f8:85:fb:9b:83:3e:45:98:69:cd:81:
4e:8b:b0:db:74:e1:79:5f:68:8c:cc:63:23:84:a3:55:47:a7:
5b:52:f3:71:e1:29:39:f2:3b:94:77:cc:ff:f5:50:9d:b0:6f:
84:8f:fd:bc:c6:b3:a1:a9:1b:1b:e7:ac:cd:26:28:85:12:12:
fa:ba:1b:94:34:35:00:b6:a1:d6:a7:c3:2e:87:9c:6b:c0:f6:
f7:f4:f8:4d:e4:45:40:28:8c:2d:f2:a9:00:90:37:43:dc:62:
46:52:31:7c:1a:e7:88:b8:c6:19:a8:be:61:da:ef:c9:0e:cd:
ef:80:62:1a:92:55:20:2b:08:a2:c3:be:ba:03:58:09:16:d8:
3f:58:ad:0a:31:04:55:d1:0a:e3:f1:48:c3:42:e0:5b:bc:39:
8c:3a:50:2a:13:b7:17:16:83:58:7b:f4:b0:4f:39:aa:1d:23:
13:5c:49:66
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZby/HhCIDLLRfRM5He2TKtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjUwNTIxMTMxNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTgxMzhmYmE2Nzk1ZTNkOTNkMGRlMTlhZjVjZTMzNzgxMjk0MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uz3VO9VV+5OviyQjBtR3blX5NqY
L3JeynP35lAoPOagVf9dzBfXw2mOhhUhyYRgBtzz6IeBQ0cQ19pb2HGJstb4RC8L
/LhG2ON1dDXpkOAxsLqcslAz2pdxs205D3fM2P783WyurSStEAS+XPlhDeLnefJO
3185g2A2DRbJIs4J7Hs09VEf3HOpf1vh/dFQj+If6Va9eRmd4gUiysfNODRcQx9Q
sQ0f6UE48DFxApl+v9I0rf1uDT8NH5Q6a+XM/4iYJmb27WGCMkMHz7ssfahfuOUe
STx6bJxfoXYut7zDixtyoB5CO+jMu4WzGr0NJ3iVw1S+fKRZC1b0lsIshwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFDGBOPumeV49k9DeGa9c4zeBKUIXMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvTVlFNC02WjVYajJUME40WnIxempONEVwUWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwVAQCAAEwTgMEBgUcQAME
ByV4AAMEAE1AtwMEAU1A3AMEA1zOCAMEAVzOFgMEBVzOIAMEAlzOTAMEAVzO0AME
AVzO+gMEAVzO/gMEBV6LAAMEANlEpzAYBAIAAjASMBADBgcqAiRVgAMGBCoCJFWg
MA0GCSqGSIb3DQEBCwUAA4IBAQBUxmFGnMsZrKKRUvBIb+4A5Mixo4khGWuC6cgu
YWCi0lKh1kHStxyMHjJNkARmkNwSFHa0dqUmQ4JrCNZ/zenVF2YpL2TtmjG42M3L
LKbE+IX7m4M+RZhpzYFOi7DbdOF5X2iMzGMjhKNVR6dbUvNx4Sk58juUd8z/9VCd
sG+Ej/28xrOhqRsb56zNJiiFEhL6uhuUNDUAtqHWp8Muh5xrwPb39PhN5EVAKIwt
8qkAkDdD3GJGUjF8GueIuMYZqL5h2u/JDs3vgGIaklUgKwiiw766A1gJFtg/WK0K
MQRV0Qrj8UjDQuBbvDmMOlAqE7cXFoNYe/SwTzmqHSMTXElm
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:59 2025 by rpki-client