Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa
File: Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa (raw, json)
Hash identifier: R9xWi9BNSSwcGXEc8iJXQHOFaaQnnZvq83WcJjO5BE8=
Subject key identifier: 36:2B:F9:09:7C:E3:66:5C:E9:3F:77:D3:79:89:8F:1C:9F:A2:D2:55
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F86E1B13C148AE4EA1FD8225C94CC
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8262
IP address blocks: 82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
82.119.83.0/24 maxlen: 24
82.119.84.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
85.14.0.0/18 maxlen: 18
85.14.0.0/23 maxlen: 23
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
89.252.192.0/18 maxlen: 18
89.252.192.0/22 maxlen: 22
89.252.199.0/24 maxlen: 24
89.252.200.0/21 maxlen: 21
89.252.208.0/20 maxlen: 20
89.252.223.0/24 maxlen: 24
89.252.224.0/19 maxlen: 19
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
176.67.234.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
194.12.224.0/19 maxlen: 19
194.12.231.0/24 maxlen: 24
194.12.234.0/24 maxlen: 24
194.12.249.0/24 maxlen: 24
194.12.253.0/24 maxlen: 32
194.12.254.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:86:e1:b1:3c:14:8a:e4:ea:1f:d8:22:5c:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=362bf9097ce3665ce93f77d379898f1c9fa2d255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:f0:5a:a7:f8:da:0d:ea:79:2a:cc:fb:e0:
46:0b:e0:b8:47:3c:0c:dd:9a:e2:22:13:c0:9d:21:
08:a0:3a:11:4e:60:22:94:f3:67:1f:5b:ed:a4:a6:
38:d1:a0:6d:f8:ba:96:72:f9:6a:5a:cc:b8:e2:fc:
68:e9:c9:86:31:ed:8b:f3:ff:2d:5c:a0:7a:d0:b7:
63:c2:41:37:35:5c:44:d5:bb:d1:03:d0:20:b4:98:
05:cb:68:9e:47:02:83:fb:f5:e0:fb:23:8c:b1:d7:
79:20:ad:d4:c4:15:6f:fe:fb:11:84:55:7d:d4:b9:
39:e6:ce:f5:7c:7f:2d:f4:db:c1:c7:68:a2:36:68:
1d:28:58:d0:aa:e6:77:99:62:0f:78:a8:08:96:a0:
8e:48:e6:c3:9a:87:2b:e1:a5:80:fa:6e:c2:6e:6e:
f5:02:57:e7:28:36:61:0e:cd:13:6e:01:2e:af:b9:
6b:db:f4:66:ed:a9:f0:ec:d4:6a:b8:6a:4a:bb:e8:
99:47:89:b4:b7:b5:6f:09:1f:50:c0:56:9c:f4:d8:
a0:ff:14:ff:23:b7:8b:ae:cf:95:8f:f3:12:9a:cf:
96:a4:5f:b6:59:b5:70:c5:df:bb:f8:3d:fd:ff:13:
46:e5:86:67:66:9a:bd:6f:dd:c3:37:82:17:19:29:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:F9:09:7C:E3:66:5C:E9:3F:77:D3:79:89:8F:1C:9F:A2:D2:55
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
48:6b:a6:be:91:cb:1c:06:c6:6c:f7:b2:6d:bc:d5:9f:c5:7c:
4c:9b:a0:47:3c:45:2b:ad:0a:59:f9:a4:ad:be:76:ee:a6:8d:
a8:d1:83:4d:23:f7:35:31:10:c9:da:ef:d2:cf:28:3b:4a:63:
49:df:78:ab:9d:40:b0:9b:63:66:6b:37:3d:36:a1:9b:e9:e3:
fd:85:f6:7b:b3:e2:c1:e4:63:c4:1d:d0:1b:c3:de:2a:39:31:
74:2f:a7:08:21:16:a7:0a:56:da:a3:a9:0f:47:bc:af:a8:6d:
3c:56:a7:21:ef:76:7d:7d:c0:8e:9c:80:a8:1e:79:24:ca:b0:
84:78:85:b4:48:ac:9d:60:dc:5e:68:88:af:40:b2:95:cf:9e:
f4:3a:24:68:98:e7:5b:80:80:8f:7f:8f:d0:5d:23:93:3e:08:
f2:e9:42:bc:7a:0c:22:76:6f:cd:b4:8b:26:cf:78:f0:a4:02:
a2:91:9f:25:39:f1:cf:39:1a:51:90:68:e9:f0:df:3b:76:73:
b9:8a:c3:8e:d4:0a:34:da:15:4e:02:66:31:5e:80:0d:23:6b:
bb:99:b9:c2:f2:e0:7a:01:80:c1:1e:99:4a:18:cc:ef:83:7a:
5d:3e:ab:56:ab:aa:82:a5:b8:d6:d7:ab:7d:37:49:8f:58:86:
21:f2:56:e4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZQiH4bhsTwUiuTqH9giXJTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjUwMTAxMTM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjJiZjkwOTdjZTM2NjVjZTkzZjc3ZDM3OTg5OGYxYzlmYTJkMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEbwWqf42g3qeSrM++BGC+C4RzwM
3ZriIhPAnSEIoDoRTmAilPNnH1vtpKY40aBt+LqWcvlqWsy44vxo6cmGMe2L8/8t
XKB60LdjwkE3NVxE1bvRA9AgtJgFy2ieRwKD+/Xg+yOMsdd5IK3UxBVv/vsRhFV9
1Lk55s71fH8t9NvBx2iiNmgdKFjQquZ3mWIPeKgIlqCOSObDmocr4aWA+m7Cbm71
AlfnKDZhDs0TbgEur7lr2/Rm7anw7NRquGpKu+iZR4m0t7VvCR9QwFac9Nig/xT/
I7eLrs+Vj/MSms+WpF+2WbVwxd+7+D39/xNG5YZnZpq9b93DN4IXGSkqNQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFDYr+Ql842Zc6T9303mJjxyfotJVMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvTml2NUNYempabHpwUDNmVGVZbVBISi1pMGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQFUndAAwQG
VQ4AAwQGWfzAMAwDBACwQ+kDBACwQ+oDBAK5XIQDBAXCDOAwDQQCAAIwBwMFACAB
GuAwDQYJKoZIhvcNAQELBQADggEBAEhrpr6RyxwGxmz3sm281Z/FfEyboEc8RSut
Cln5pK2+du6mjajRg00j9zUxEMna79LPKDtKY0nfeKudQLCbY2ZrNz02oZvp4/2F
9nuz4sHkY8Qd0BvD3io5MXQvpwghFqcKVtqjqQ9HvK+obTxWpyHvdn19wI6cgKge
eSTKsIR4hbRIrJ1g3F5oiK9AspXPnvQ6JGiY51uAgI9/j9BdI5M+CPLpQrx6DCJ2
b820iybPePCkAqKRnyU58c85GlGQaOnw3zt2c7mKw47UCjTaFU4CZjFegA0ja7uZ
ucLy4HoBgMEemUoYzO+Del0+q1arqoKluNbXq303SY9YhiHyVuQ=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:13:20 2025 by rpki-client