Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gYhg7IFb3-EYq2SBy76oTqdDxvU.roa
File: gYhg7IFb3-EYq2SBy76oTqdDxvU.roa (raw, json)
Hash identifier: tFguGTwYtqSDDfaGEklZu/YlP2Fw7Cz8UAFkatPreco=
Subject key identifier: 81:88:60:EC:81:5B:DF:E1:18:AB:64:81:CB:BE:A8:4E:A7:43:C6:F5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01971CDC64350D3237D8775FD2681403A7B7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gYhg7IFb3-EYq2SBy76oTqdDxvU.roa
Signing time: Thu 29 May 2025 16:24:54 +0000
ROA not before: Thu 29 May 2025 16:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202636
IP address blocks: 37.32.96.0/23 maxlen: 23
45.90.238.0/24 maxlen: 24
45.134.87.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.121.0/24 maxlen: 24
93.189.122.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.150.77.0/24 maxlen: 24
185.150.78.0/23 maxlen: 23
185.179.233.0/24 maxlen: 24
185.179.235.0/24 maxlen: 24
185.191.44.0/22 maxlen: 22
185.199.55.0/24 maxlen: 24
185.218.18.0/24 maxlen: 24
185.224.36.0/22 maxlen: 24
185.227.205.0/24 maxlen: 24
185.239.254.0/24 maxlen: 24
185.248.200.0/22 maxlen: 24
185.252.44.0/22 maxlen: 22
194.35.41.0/24 maxlen: 24
194.41.116.0/23 maxlen: 23
194.41.118.0/23 maxlen: 23
212.80.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:dc:64:35:0d:32:37:d8:77:5f:d2:68:14:03:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 29 16:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=818860ec815bdfe118ab6481cbbea84ea743c6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:36:29:9d:ef:a2:ce:5f:90:0a:35:a7:85:b2:
25:b7:74:79:75:9a:fd:56:65:34:09:46:52:3d:a9:
ba:c1:88:5c:d3:96:c2:6e:39:09:62:62:f3:06:e1:
e6:1f:63:a5:35:83:a3:e0:ab:2f:b4:db:88:ef:16:
7d:98:7c:93:de:6f:f2:c8:e6:ab:8e:c0:b0:a6:73:
2d:37:18:8c:7c:ae:66:0c:05:47:ab:3d:84:ef:79:
2b:e8:2b:43:7d:59:c9:cc:6a:e0:44:f0:b3:6c:d8:
e0:98:c3:a7:cf:db:36:c6:52:b1:a8:74:c3:71:e5:
2a:d4:91:60:b5:ee:34:33:8b:41:9e:04:b1:0c:8b:
69:b4:df:14:a2:36:6d:9f:ee:e9:11:06:db:61:38:
0a:b9:75:c2:5c:d9:f9:80:b0:78:db:a9:6f:26:66:
f4:32:93:f3:d6:d7:95:06:43:e2:5e:51:b2:f7:f6:
f2:b6:78:69:2c:f0:ad:21:0a:14:03:09:5f:73:d8:
2e:5f:c4:58:c4:7f:16:9f:36:b4:ce:65:86:ff:1c:
ac:33:19:5d:d0:10:6c:0b:62:fc:09:b1:cb:7d:61:
2c:00:52:f1:d7:e2:81:38:ba:cc:08:c8:2f:81:8a:
6b:1e:7c:0f:b7:cc:3a:71:ff:4b:82:04:34:6f:2a:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:60:EC:81:5B:DF:E1:18:AB:64:81:CB:BE:A8:4E:A7:43:C6:F5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gYhg7IFb3-EYq2SBy76oTqdDxvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.96.0/23
45.90.238.0/24
45.134.87.0/24
93.92.228.0/22
93.189.121.0-93.189.122.255
95.214.144.0/22
185.150.77.0-185.150.79.255
185.179.233.0/24
185.179.235.0/24
185.191.44.0/22
185.199.55.0/24
185.218.18.0/24
185.224.36.0/22
185.227.205.0/24
185.239.254.0/24
185.248.200.0/22
185.252.44.0/22
194.35.41.0/24
194.41.116.0/22
212.80.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:54:4e:47:0f:79:82:b7:6a:6c:bc:f5:35:d6:c8:47:d2:7f:
46:26:80:c4:f5:50:4a:91:85:00:4a:2b:51:ba:84:8c:be:b3:
76:07:4a:d7:b9:9d:2f:6e:69:82:c6:9c:a5:e0:e4:68:77:36:
bb:a9:50:2d:f9:4b:c0:2f:af:bb:2d:79:11:7f:bd:eb:b0:d0:
b3:1a:78:d0:ca:b7:6c:0a:14:4c:ea:44:cb:33:c5:70:d6:01:
d3:00:98:86:db:18:9a:a9:49:01:02:17:1f:c2:1b:e7:92:c4:
a9:82:f6:48:c5:03:d4:cd:e1:81:3e:8f:41:9e:4a:fa:b1:2a:
03:85:84:20:02:89:74:28:92:c6:33:f4:2e:1a:18:75:aa:0c:
19:8a:83:48:2c:7a:f3:6c:5a:0d:9b:be:e9:42:97:0d:81:c3:
86:3c:a9:08:18:10:be:3b:a2:fa:04:8c:d1:1d:56:8f:5a:6c:
6d:97:b2:45:37:4d:e2:8c:eb:1c:95:28:e5:80:4b:2c:b2:c6:
fc:fa:ca:62:1f:85:de:70:94:fc:fe:c5:b6:ed:dd:6c:96:39:
c5:00:6b:5d:72:5d:06:19:0d:74:ed:70:86:71:a5:66:0f:58:
d3:d6:f2:49:02:f8:04:2f:12:71:1d:d3:67:e1:43:fb:ab:ec:
8e:36:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:09:35 2025 by rpki-client