Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/gVnp1GyPS4abmIJpGuAWK8toPWQ.roa
File: gVnp1GyPS4abmIJpGuAWK8toPWQ.roa (raw, json)
Hash identifier: rb/TTJnaDc7dzUv3alJpl7oBmt/eOfqnWnO6SSzAp0g=
Subject key identifier: 81:59:E9:D4:6C:8F:4B:86:9B:98:82:69:1A:E0:16:2B:CB:68:3D:64
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB13C4089D1F83C0F9F18147D63D8
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/gVnp1GyPS4abmIJpGuAWK8toPWQ.roa
Signing time: Wed 01 Jan 2025 01:48:21 +0000
ROA not before: Wed 01 Jan 2025 01:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62235
IP address blocks: 5.183.56.0/22 maxlen: 24
5.183.56.0/23 maxlen: 24
5.183.58.0/23 maxlen: 24
37.156.76.0/22 maxlen: 24
37.156.108.0/22 maxlen: 24
37.156.108.0/23 maxlen: 24
37.156.110.0/23 maxlen: 24
45.14.204.0/22 maxlen: 24
45.14.204.0/23 maxlen: 24
45.14.206.0/24 maxlen: 24
45.14.207.0/24 maxlen: 24
45.86.184.0/23 maxlen: 24
45.86.186.0/23 maxlen: 24
85.204.200.0/21 maxlen: 24
85.204.200.0/22 maxlen: 24
85.204.204.0/22 maxlen: 24
87.247.128.0/22 maxlen: 24
87.247.128.0/23 maxlen: 24
87.247.130.0/23 maxlen: 24
89.35.231.0/24 maxlen: 24
89.39.167.0/24 maxlen: 24
89.44.82.0/24 maxlen: 24
89.45.220.0/22 maxlen: 24
89.45.220.0/23 maxlen: 24
89.45.222.0/23 maxlen: 24
89.46.32.0/24 maxlen: 24
89.46.35.0/24 maxlen: 24
89.46.37.0/24 maxlen: 24
89.46.39.0/24 maxlen: 24
89.46.247.0/24 maxlen: 24
92.119.0.0/22 maxlen: 24
92.119.0.0/23 maxlen: 24
92.119.2.0/23 maxlen: 24
94.177.0.0/22 maxlen: 24
94.177.0.0/23 maxlen: 24
94.177.2.0/23 maxlen: 24
139.28.88.0/22 maxlen: 24
185.41.244.0/22 maxlen: 24
185.41.244.0/23 maxlen: 24
185.41.246.0/23 maxlen: 24
185.56.76.0/22 maxlen: 24
185.56.76.0/23 maxlen: 24
185.56.78.0/23 maxlen: 24
185.87.128.0/22 maxlen: 24
185.87.128.0/23 maxlen: 24
185.87.130.0/23 maxlen: 24
185.228.244.0/22 maxlen: 24
185.228.246.0/23 maxlen: 24
188.212.16.0/22 maxlen: 24
188.212.16.0/23 maxlen: 24
188.212.18.0/23 maxlen: 24
188.213.80.0/22 maxlen: 24
188.213.80.0/23 maxlen: 24
188.213.82.0/23 maxlen: 24
188.213.83.0/24 maxlen: 24
188.214.112.0/21 maxlen: 24
188.214.112.0/22 maxlen: 24
188.214.116.0/22 maxlen: 24
188.214.118.0/24 maxlen: 24
194.124.56.0/22 maxlen: 24
194.124.56.0/23 maxlen: 24
194.124.58.0/23 maxlen: 24
195.82.98.0/23 maxlen: 24
195.82.98.0/24 maxlen: 24
195.82.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b1:3c:40:89:d1:f8:3c:0f:9f:18:14:7d:63:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8159e9d46c8f4b869b9882691ae0162bcb683d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:19:80:66:4d:78:9c:b5:4c:11:25:21:cc:
54:ac:92:cd:2c:e6:f9:62:a6:29:7c:f9:91:d4:69:
aa:95:f5:5b:2d:d2:11:fb:41:73:82:eb:ef:77:59:
d3:b3:23:af:d9:d4:f7:c7:79:9c:7d:19:cf:15:fa:
3d:13:f3:79:b1:d1:7e:7e:70:1e:f0:85:b7:9e:6c:
47:ac:d8:01:f7:92:c9:28:7b:0b:66:61:5a:7e:fb:
67:bb:22:b5:a3:1b:32:f5:11:c9:05:e3:05:1e:d9:
77:0f:7f:1c:a8:4d:a1:85:6b:0d:6c:c9:df:bc:18:
ea:bc:62:17:a0:a9:4a:5e:d3:da:2e:b2:81:7d:a3:
f6:02:f1:02:82:95:a2:1a:c5:4d:04:09:b2:82:ef:
3c:1b:0b:34:00:da:f4:c4:e7:4c:1b:bf:9a:32:5c:
81:5c:8f:81:ec:14:d3:71:57:35:69:2a:f6:18:d8:
61:a6:50:b3:41:a7:5e:5a:01:2c:58:24:fc:60:56:
a0:c2:67:33:ce:d9:bb:fe:d4:3e:06:aa:67:3e:61:
3d:b7:a2:52:4d:d6:c9:b4:58:51:f8:db:f1:ed:fd:
07:d4:e3:11:27:38:04:ce:87:e5:6a:03:84:79:7f:
0f:01:e3:21:f2:da:ea:d4:f5:79:49:58:a1:7c:d9:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:E9:D4:6C:8F:4B:86:9B:98:82:69:1A:E0:16:2B:CB:68:3D:64
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/gVnp1GyPS4abmIJpGuAWK8toPWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.56.0/22
37.156.76.0/22
37.156.108.0/22
45.14.204.0/22
45.86.184.0/22
85.204.200.0/21
87.247.128.0/22
89.35.231.0/24
89.39.167.0/24
89.44.82.0/24
89.45.220.0/22
89.46.32.0/24
89.46.35.0/24
89.46.37.0/24
89.46.39.0/24
89.46.247.0/24
92.119.0.0/22
94.177.0.0/22
139.28.88.0/22
185.41.244.0/22
185.56.76.0/22
185.87.128.0/22
185.228.244.0/22
188.212.16.0/22
188.213.80.0/22
188.214.112.0/21
194.124.56.0/22
195.82.98.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f0:b8:a6:b3:20:c0:09:39:64:ab:d3:4b:83:ef:4a:cc:05:
bb:84:a6:6d:5d:5d:f7:62:cd:c5:36:07:38:6b:70:76:b9:18:
3d:54:7f:fe:3d:e8:2e:74:55:80:e8:29:9d:5d:ee:d8:7b:9f:
75:39:d2:57:06:44:98:f0:ed:e1:05:bc:9e:56:84:b9:b7:05:
d6:33:5f:a2:f3:ba:20:94:ea:61:ec:d4:a8:41:fc:4b:33:24:
20:af:d5:06:bf:0b:3e:fc:09:3f:9e:de:a1:f0:aa:9d:a2:f6:
9e:ae:70:8b:66:65:c9:ca:4d:f7:5c:29:24:14:c7:4d:90:da:
9c:b6:b1:8e:9a:a2:cd:29:68:61:e6:f3:8a:bd:77:e5:3c:9b:
88:e1:0d:f4:58:5f:94:2d:ad:70:ef:10:fe:d9:a4:9d:89:22:
ac:d2:3a:d7:46:f0:e3:53:f1:6f:80:86:b3:9b:da:d5:a8:86:
a9:da:1d:b8:fd:64:eb:12:31:3b:18:4b:ed:17:ea:ef:01:d5:
ae:fc:fa:cd:d4:2d:c7:99:e0:e5:c6:d6:81:a4:96:82:81:2f:
84:9e:76:6e:df:77:1e:d3:00:d1:6d:97:b3:f0:e6:da:68:10:
4a:95:25:7d:d5:a6:84:4d:80:07:6e:32:14:d3:28:bc:31:39:
43:d3:20:94
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZQfjLE8QInR+DwPnxgUfWPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjUwMTAxMDE0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTU5ZTlkNDZjOGY0Yjg2OWI5ODgyNjkxYWUwMTYyYmNiNjgzZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/0ZgGZNeJy1TBElIcxUrJLNLOb5
YqYpfPmR1GmqlfVbLdIR+0Fzguvvd1nTsyOv2dT3x3mcfRnPFfo9E/N5sdF+fnAe
8IW3nmxHrNgB95LJKHsLZmFafvtnuyK1oxsy9RHJBeMFHtl3D38cqE2hhWsNbMnf
vBjqvGIXoKlKXtPaLrKBfaP2AvECgpWiGsVNBAmygu88Gws0ANr0xOdMG7+aMlyB
XI+B7BTTcVc1aSr2GNhhplCzQadeWgEsWCT8YFagwmczztm7/tQ+BqpnPmE9t6JS
TdbJtFhR+Nvx7f0H1OMRJzgEzoflagOEeX8PAeMh8trq1PV5SVihfNkkBwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFIFZ6dRsj0uGm5iCaRrgFivLaD1kMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvZ1ZucDFHeVBTNGFibUlKcEd1QVdLOHRvUFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAIF
tzgDBAIlnEwDBAIlnGwDBAItDswDBAItVrgDBANVzMgDBAJX94ADBABZI+cDBABZ
J6cDBABZLFIDBAJZLdwDBABZLiADBABZLiMDBABZLiUDBABZLicDBABZLvcDBAJc
dwADBAJesQADBAKLHFgDBAK5KfQDBAK5OEwDBAK5V4ADBAK55PQDBAK81BADBAK8
1VADBAO81nADBALCfDgDBAHDUmIwDQYJKoZIhvcNAQELBQADggEBAEbwuKazIMAJ
OWSr00uD70rMBbuEpm1dXfdizcU2BzhrcHa5GD1Uf/496C50VYDoKZ1d7th7n3U5
0lcGRJjw7eEFvJ5WhLm3BdYzX6LzuiCU6mHs1KhB/EszJCCv1Qa/Cz78CT+e3qHw
qp2i9p6ucItmZcnKTfdcKSQUx02Q2py2sY6aos0paGHm84q9d+U8m4jhDfRYX5Qt
rXDvEP7ZpJ2JIqzSOtdG8ONT8W+AhrOb2tWohqnaHbj9ZOsSMTsYS+0X6u8B1a78
+s3ULceZ4OXG1oGkloKBL4Sedm7fdx7TANFtl7Pw5tpoEEqVJX3VpoRNgAduMhTT
KLwxOUPTIJQ=
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:54 2025 by rpki-client