Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa
File: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (raw, json)
Hash identifier: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=
Subject key identifier: A3:D5:39:0D:FC:9D:FA:94:80:8A:7F:D9:75:35:E2:6D:23:99:76:BF
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0196106EAA2EE5F976A3E7FC231057440084
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa
Signing time: Mon 07 Apr 2025 13:26:49 +0000
ROA not before: Mon 07 Apr 2025 13:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.42.199.0/24 maxlen: 24
5.253.63.0/24 maxlen: 24
45.129.78.0/24 maxlen: 24
45.159.181.0/24 maxlen: 24
77.83.85.0/24 maxlen: 24
77.83.86.0/24 maxlen: 24
77.83.87.0/24 maxlen: 24
79.133.180.0/24 maxlen: 24
89.191.234.0/24 maxlen: 24
176.119.141.0/24 maxlen: 24
194.113.153.0/24 maxlen: 24
194.147.215.0/24 maxlen: 24
195.226.194.0/24 maxlen: 24
195.245.239.0/24 maxlen: 24
217.11.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:6e:aa:2e:e5:f9:76:a3:e7:fc:23:10:57:44:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Apr 7 13:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3d5390dfc9dfa94808a7fd97535e26d239976bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:e4:93:cb:12:9e:6e:de:f0:6d:cb:37:2a:
a8:21:b4:2e:e2:60:d7:65:71:85:da:65:ac:0e:4e:
b2:e2:82:57:e4:90:a3:6b:5f:98:4c:83:6d:47:48:
eb:7a:1c:fb:c7:3b:28:1a:75:2b:e0:79:df:82:e5:
6e:bf:a7:81:97:e1:c5:dc:4d:51:5e:21:2d:48:88:
72:87:ae:9a:ee:2b:f4:f0:8f:aa:ac:07:64:73:bb:
10:7a:90:17:19:66:09:6b:43:ce:c9:d8:81:93:87:
8b:82:f7:87:00:46:1a:70:89:6f:5b:2a:8d:49:8e:
45:89:2e:11:37:70:69:e0:ec:16:14:0c:b1:ea:e6:
54:37:83:05:58:44:b6:46:cf:df:b9:0a:3c:b1:23:
81:93:1b:3c:d7:71:ac:0d:98:f5:54:b0:f4:60:b4:
9b:be:df:33:95:f9:96:ac:4a:aa:37:ec:24:ce:c0:
af:30:06:97:82:ca:75:89:e0:2f:fb:8e:d4:27:df:
58:86:92:ad:09:10:68:1f:c4:8c:20:83:f7:93:d6:
08:28:7d:54:8b:f7:f6:20:81:1c:da:5a:b5:e4:71:
c9:e6:fd:3e:0e:a7:ee:88:65:89:22:95:b5:4e:9e:
c5:e0:fd:2f:bc:1a:44:6c:59:5a:bb:19:80:a9:79:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:39:0D:FC:9D:FA:94:80:8A:7F:D9:75:35:E2:6D:23:99:76:BF
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.199.0/24
5.253.63.0/24
45.129.78.0/24
45.159.181.0/24
77.83.85.0-77.83.87.255
79.133.180.0/24
89.191.234.0/24
176.119.141.0/24
194.113.153.0/24
194.147.215.0/24
195.226.194.0/24
195.245.239.0/24
217.11.166.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9b:f8:18:da:78:b4:d5:b0:4b:42:8a:52:b4:ac:a6:70:d4:
c1:75:ca:64:51:02:22:df:e2:6f:f4:23:27:90:97:fb:c2:6b:
96:6b:b5:05:e8:03:1d:19:f2:4f:86:d9:9b:bb:e7:b1:8c:6a:
48:99:13:37:bb:e0:03:e5:bf:86:00:26:90:00:47:eb:c7:df:
27:e9:31:09:c4:20:4d:41:76:0b:9b:c1:95:4f:79:a4:df:46:
93:9c:7c:74:66:92:a1:c3:c4:e0:10:e5:b4:5f:5b:05:08:2c:
70:de:a7:91:af:9d:9e:30:a2:10:5f:dc:47:3a:e1:f9:0e:33:
34:32:ce:89:4e:2b:e2:d4:f7:7f:e9:65:28:fa:c0:d5:dd:4e:
16:44:7e:d4:aa:ec:c2:17:63:01:da:59:d1:54:74:0e:db:91:
0c:d5:dc:dc:09:e5:b7:91:2c:bc:fa:59:fe:fc:d9:7c:4c:e4:
be:76:cd:1a:50:8b:cc:ef:ad:bf:6e:3e:32:f6:33:0e:f8:0c:
59:cf:fa:40:ba:9f:08:25:31:19:c5:fb:39:f1:e7:d6:5a:8a:
d3:6f:96:b1:61:44:a9:66:5c:10:04:82:84:8f:94:3b:21:e4:
83:38:49:f6:5a:99:70:d5:ec:92:7e:c8:91:92:bc:59:33:68:
3f:6c:c0:4d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZYQbqou5fl2o+f8IxBXRACEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjUwNDA3MTMyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2Q1MzkwZGZjOWRmYTk0ODA4YTdmZDk3NTM1ZTI2ZDIzOTk3NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H/kk8sSnm7e8G3LNyqoIbQu4mDX
ZXGF2mWsDk6y4oJX5JCja1+YTINtR0jrehz7xzsoGnUr4HnfguVuv6eBl+HF3E1R
XiEtSIhyh66a7iv08I+qrAdkc7sQepAXGWYJa0POydiBk4eLgveHAEYacIlvWyqN
SY5FiS4RN3Bp4OwWFAyx6uZUN4MFWES2Rs/fuQo8sSOBkxs813GsDZj1VLD0YLSb
vt8zlfmWrEqqN+wkzsCvMAaXgsp1ieAv+47UJ99YhpKtCRBoH8SMIIP3k9YIKH1U
i/f2IIEc2lq15HHJ5v0+DqfuiGWJIpW1Tp7F4P0vvBpEbFlauxmAqXns9QIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFKPVOQ38nfqUgIp/2XU14m0jmXa/MB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvbzlVNURmeWQtcFNBaW5fWmRUWGliU09aZHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQABSrHAwQA
Bf0/AwQALYFOAwQALZ+1MAwDBABNU1UDBANNU1ADBABPhbQDBABZv+oDBACwd40D
BADCcZkDBADCk9cDBADD4sIDBADD9e8DBADZC6YwDQYJKoZIhvcNAQELBQADggEB
AAeb+BjaeLTVsEtCilK0rKZw1MF1ymRRAiLf4m/0IyeQl/vCa5ZrtQXoAx0Z8k+G
2Zu757GMakiZEze74APlv4YAJpAAR+vH3yfpMQnEIE1BdgubwZVPeaTfRpOcfHRm
kqHDxOAQ5bRfWwUILHDep5GvnZ4wohBf3Ec64fkOMzQyzolOK+LU93/pZSj6wNXd
ThZEftSq7MIXYwHaWdFUdA7bkQzV3NwJ5beRLLz6Wf782XxM5L52zRpQi8zvrb9u
PjL2Mw74DFnP+kC6nwglMRnF+znx59ZaitNvlrFhRKlmXBAEgoSPlDsh5IM4SfZa
mXDV7JJ+yJGSvFkzaD9swE0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 23:52:58 2025 by rpki-client