Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0OZkbbyiMfqEfV6yyCrB9dZN96k.roa
File: 0OZkbbyiMfqEfV6yyCrB9dZN96k.roa (raw, json)
Hash identifier: yh5A+U+9EnV2n5u+gDax0tr2hQqxxV1tomwYV6gGiGM=
Subject key identifier: D0:E6:64:6D:BC:A2:31:FA:84:7D:5E:B2:C8:2A:C1:F5:D6:4D:F7:A9
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01971DC982B83BAFF30E1237197C8264B5DF
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0OZkbbyiMfqEfV6yyCrB9dZN96k.roa
Signing time: Thu 29 May 2025 20:43:54 +0000
ROA not before: Thu 29 May 2025 20:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 45.67.141.0/24 maxlen: 24
45.67.145.0/24 maxlen: 24
94.154.183.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
185.205.204.0/24 maxlen: 24
212.60.16.0/23 maxlen: 23
217.197.168.0/24 maxlen: 24
217.197.170.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:c9:82:b8:3b:af:f3:0e:12:37:19:7c:82:64:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 29 20:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0e6646dbca231fa847d5eb2c82ac1f5d64df7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:30:4a:c2:6b:64:a4:c2:a4:ae:fb:f1:6c:
d3:ff:59:b6:66:f4:e4:65:41:38:a6:e4:50:05:90:
6d:75:a1:ac:76:aa:8b:82:dc:0e:10:7c:e8:27:f1:
b7:1c:1d:f3:80:40:ba:a2:7d:50:95:f6:44:d3:50:
e2:c0:1c:0a:61:d3:23:81:94:0f:2c:9a:17:72:68:
1d:eb:f4:53:71:4f:00:98:59:6b:f7:b4:72:17:70:
3d:07:18:8b:db:fc:5d:00:04:1e:29:98:50:36:9b:
b4:3e:a9:a6:63:f6:35:72:18:16:2e:a4:f4:29:b5:
25:e9:77:df:ad:cd:36:50:a0:50:81:f8:c1:e1:ee:
f9:74:8b:47:2c:a3:94:2d:e1:9c:0e:39:d5:01:01:
40:35:4e:ea:5c:b8:54:ef:cf:c1:df:f8:e2:11:86:
57:57:7e:38:42:3d:fc:27:5b:60:ee:2c:80:b6:34:
f2:cd:9a:64:9b:dc:67:29:c3:76:09:61:ca:af:ab:
02:b0:89:be:03:21:26:8a:ec:8a:9e:0d:af:fe:94:
f6:d0:79:87:a1:c1:4a:80:8e:cb:43:7e:b3:79:62:
72:df:d5:15:23:a4:c0:9e:7a:87:7e:9a:f7:3e:5b:
f1:cd:74:34:96:b6:fb:43:99:ce:aa:4b:81:71:bf:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:64:6D:BC:A2:31:FA:84:7D:5E:B2:C8:2A:C1:F5:D6:4D:F7:A9
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0OZkbbyiMfqEfV6yyCrB9dZN96k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.141.0/24
45.67.145.0/24
94.154.183.0/24
162.218.95.0/24
185.205.204.0/24
212.60.16.0/23
217.197.168.0/24
217.197.170.0/23
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
5f:58:4d:e9:43:7c:5a:29:e9:d5:57:35:92:c5:e3:a8:46:20:
ae:c3:84:ae:fb:e1:85:6b:22:e6:8d:f2:90:e5:bf:be:a3:29:
64:ac:b1:aa:11:09:c3:f5:09:98:38:0b:9e:fb:41:4e:a6:f2:
7c:ee:9c:c0:6c:9b:b3:4b:35:50:89:29:88:9d:52:ce:74:50:
ab:fa:01:7b:dc:52:29:34:c3:15:31:6e:8d:b3:4a:78:0a:04:
2f:99:63:a6:e5:d6:a0:fd:98:8f:6c:a4:f2:42:c0:50:05:0a:
0e:04:2c:d3:b0:d4:10:0e:9f:55:e7:20:0d:7a:a0:d4:27:ab:
78:b0:3e:19:94:1b:bf:22:7e:ca:00:8e:5d:7f:0e:84:64:4a:
4e:9d:8b:23:0c:f2:64:81:ec:52:e5:61:b5:5c:3d:34:ef:4c:
cb:28:7a:b8:1c:73:ff:37:6e:e8:83:5d:8d:a3:26:3d:c6:40:
08:6c:33:c1:47:4b:be:ff:c9:24:80:c4:09:47:71:4a:c8:8a:
bf:a0:94:4f:21:02:c6:e7:fb:f9:6a:ee:1c:b2:e4:c7:88:2f:
3a:e2:b1:4f:50:0b:8e:1f:60:47:8d:64:d4:33:2d:f4:13:e6:
b4:5b:19:27:0c:ae:04:63:ed:ac:b3:42:ee:be:05:68:eb:b9:
10:3e:5d:74
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZcdyYK4O6/zDhI3GXyCZLXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwNTI5MjA0MzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGU2NjQ2ZGJjYTIzMWZhODQ3ZDVlYjJjODJhYzFmNWQ2NGRmN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9swSsJrZKTCpK778WzT/1m2ZvTk
ZUE4puRQBZBtdaGsdqqLgtwOEHzoJ/G3HB3zgEC6on1QlfZE01DiwBwKYdMjgZQP
LJoXcmgd6/RTcU8AmFlr97RyF3A9BxiL2/xdAAQeKZhQNpu0PqmmY/Y1chgWLqT0
KbUl6Xffrc02UKBQgfjB4e75dItHLKOULeGcDjnVAQFANU7qXLhU78/B3/jiEYZX
V344Qj38J1tg7iyAtjTyzZpkm9xnKcN2CWHKr6sCsIm+AyEmiuyKng2v/pT20HmH
ocFKgI7LQ36zeWJy39UVI6TAnnqHfpr3PlvxzXQ0lrb7Q5nOqkuBcb9pVwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFNDmZG28ojH6hH1essgqwfXWTfepMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvME9aa2JieWlNZnFFZlY2eXlDckI5ZFpOOTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA2BAIAATAwAwQALUONAwQA
LUORAwQAXpq3AwQAotpfAwQAuc3MAwQB1DwQAwQA2cWoAwQB2cWqMA8EAgACMAkD
BwAqB8bAAAkwDQYJKoZIhvcNAQELBQADggEBAF9YTelDfFop6dVXNZLF46hGIK7D
hK774YVrIuaN8pDlv76jKWSssaoRCcP1CZg4C577QU6m8nzunMBsm7NLNVCJKYid
Us50UKv6AXvcUik0wxUxbo2zSngKBC+ZY6bl1qD9mI9spPJCwFAFCg4ELNOw1BAO
n1XnIA16oNQnq3iwPhmUG78ifsoAjl1/DoRkSk6diyMM8mSB7FLlYbVcPTTvTMso
ergcc/83buiDXY2jJj3GQAhsM8FHS77/ySSAxAlHcUrIir+glE8hAsbn+/lq7hyy
5MeILzrisU9QC44fYEeNZNQzLfQT5rRbGScMrgRj7ayzQu6+BWjruRA+XXQ=
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:40:08 2025 by rpki-client