Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Gt9u7lGK6MTYhh5UPHPef6OnL_o.roa
File: Gt9u7lGK6MTYhh5UPHPef6OnL_o.roa (raw, json)
Hash identifier: V/m4Bedouc+Qlr+RU90Iu9aNEyeD2A8PPeDz1Vg/+W4=
Subject key identifier: 1A:DF:6E:EE:51:8A:E8:C4:D8:86:1E:54:3C:73:DE:7F:A3:A7:2F:FA
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01956B3D74FB11F5C3275C87F66FE1C180C1
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Gt9u7lGK6MTYhh5UPHPef6OnL_o.roa
Signing time: Thu 06 Mar 2025 11:35:44 +0000
ROA not before: Thu 06 Mar 2025 11:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 185.205.16.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
185.237.80.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
194.145.139.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
2a0a:fa40::/29 maxlen: 29
2a0c:580::/29 maxlen: 29
2a0c:4a40::/29 maxlen: 29
2a0c:4a45::/32 maxlen: 32
2a0c:4a46::/32 maxlen: 32
2a0c:4a47::/32 maxlen: 32
2a0d:d380::/29 maxlen: 29
2a0d:d380::/32 maxlen: 32
2a0d:d381::/32 maxlen: 32
2a0d:d383::/32 maxlen: 32
2a0d:d384::/32 maxlen: 32
2a0d:d385::/32 maxlen: 32
2a0d:d386::/32 maxlen: 32
2a0d:d387::/32 maxlen: 32
2a10:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:3d:74:fb:11:f5:c3:27:5c:87:f6:6f:e1:c1:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 6 11:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1adf6eee518ae8c4d8861e543c73de7fa3a72ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:73:67:42:ba:9d:f5:1c:1a:8b:c5:09:8d:
17:d4:a5:eb:3c:b3:57:7b:20:fd:a9:dd:66:39:20:
5f:84:bc:b2:3d:02:66:d9:4d:d6:f6:3e:e8:54:c1:
83:c3:16:2e:57:3e:d6:f5:da:e8:c8:eb:91:66:49:
c1:ee:c5:b5:76:09:1c:6a:6e:5c:88:b6:21:4b:45:
f4:c7:ab:c5:42:6e:e6:7b:40:fd:8b:27:a6:bb:69:
5f:ce:d7:17:2d:a7:b3:40:80:a2:6b:50:35:d9:ed:
49:ed:2c:20:51:86:cd:d4:fb:05:a7:26:e7:55:bb:
d7:12:c9:98:ae:0a:c4:6a:7e:7d:d1:23:c9:1b:58:
15:d7:ed:af:f6:3b:d9:e2:97:0c:1b:ed:8c:73:f1:
e9:42:e7:b7:d1:2f:c6:73:cb:ee:30:9c:2a:c0:5d:
f7:7a:a4:8e:9a:33:b4:cb:a6:29:08:de:af:17:83:
87:88:d5:88:33:80:dc:d5:57:48:16:12:4e:c9:83:
72:4e:77:f3:1b:ec:47:39:71:ea:cf:cb:b9:74:86:
4d:dd:e6:2c:51:96:d3:0d:38:2d:cd:5d:31:83:9e:
a5:e5:5b:86:93:c8:a8:0d:4f:a2:95:e9:e7:2a:d6:
c4:56:06:2c:8a:e6:34:e7:50:c2:18:5e:69:aa:32:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:6E:EE:51:8A:E8:C4:D8:86:1E:54:3C:73:DE:7F:A3:A7:2F:FA
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Gt9u7lGK6MTYhh5UPHPef6OnL_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.16.0/24
185.205.18.0/24
185.237.80.0/23
185.254.93.0/24
193.36.62.0/24
194.145.136.0/24
194.145.139.0/24
IPv6:
2a05:b700::/29
2a0a:fa40::/29
2a0c:580::/29
2a0c:4a40::/29
2a0d:d380::/29
2a10:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
35:21:d8:8d:bf:66:be:26:85:06:78:8a:ae:d4:3c:60:18:08:
93:cc:14:52:5c:2d:32:e2:10:8b:bf:ab:28:43:91:a6:37:92:
46:90:88:6a:36:50:ae:25:9e:df:27:25:12:13:03:58:cc:7f:
e5:21:db:7a:8c:4c:8f:d6:95:f3:4c:71:61:4c:15:8b:7a:0d:
b8:86:c3:ac:4c:14:de:91:de:91:61:20:fa:4e:b9:68:42:dd:
a3:66:e1:fd:4e:51:f4:db:4b:9a:1c:bf:9c:e4:9a:dd:5e:b4:
6a:4e:7d:16:7f:a2:ee:ec:fa:77:9a:2f:6b:13:41:5e:15:f7:
85:66:43:fe:b5:69:9f:69:06:d4:4c:49:1d:ae:2c:81:ee:ed:
0a:de:e1:65:45:29:7b:56:99:ed:d3:75:e8:89:3d:21:f8:93:
9f:db:fe:47:7a:4e:60:56:9d:e5:f7:cf:7e:1c:f4:fc:3a:13:
6d:c5:29:16:b0:f4:8b:10:d3:a3:ca:42:d5:24:1d:9c:b4:c3:
7b:bc:c2:6b:c9:cc:ac:aa:5d:0e:15:00:c4:76:d6:bd:13:1f:
b6:3e:17:0d:08:c4:21:4f:64:a5:d6:33:bd:e4:f6:36:05:f8:
36:58:63:3f:c7:a0:8d:d6:10:fe:60:bd:bf:d7:2e:f8:73:1f:
8a:27:94:01
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZVrPXT7EfXDJ1yH9m/hwYDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjUwMzA2MTEzNTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWRmNmVlZTUxOGFlOGM0ZDg4NjFlNTQzYzczZGU3ZmEzYTcyZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAxzZ0K6nfUcGovFCY0X1KXrPLNX
eyD9qd1mOSBfhLyyPQJm2U3W9j7oVMGDwxYuVz7W9droyOuRZknB7sW1dgkcam5c
iLYhS0X0x6vFQm7me0D9iyemu2lfztcXLaezQICia1A12e1J7SwgUYbN1PsFpybn
VbvXEsmYrgrEan590SPJG1gV1+2v9jvZ4pcMG+2Mc/HpQue30S/Gc8vuMJwqwF33
eqSOmjO0y6YpCN6vF4OHiNWIM4Dc1VdIFhJOyYNyTnfzG+xHOXHqz8u5dIZN3eYs
UZbTDTgtzV0xg56l5VuGk8ioDU+ilennKtbEVgYsiuY051DCGF5pqjJpaQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFBrfbu5RiujE2IYeVDxz3n+jpy/6MB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvR3Q5dTdsR0s2TVRZaGg1VVBIUGVmNk9uTF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDAwBAIAATAqAwQAuc0QAwQA
uc0SAwQBue1QAwQAuf5dAwQAwSQ+AwQAwpGIAwQAwpGLMDAEAgACMCoDBQMqBbcA
AwUDKgr6QAMFAyoMBYADBQMqDEpAAwUDKg3TgAMFAyoQS0AwDQYJKoZIhvcNAQEL
BQADggEBADUh2I2/Zr4mhQZ4iq7UPGAYCJPMFFJcLTLiEIu/qyhDkaY3kkaQiGo2
UK4lnt8nJRITA1jMf+Uh23qMTI/WlfNMcWFMFYt6DbiGw6xMFN6R3pFhIPpOuWhC
3aNm4f1OUfTbS5ocv5zkmt1etGpOfRZ/ou7s+neaL2sTQV4V94VmQ/61aZ9pBtRM
SR2uLIHu7Qre4WVFKXtWme3TdeiJPSH4k5/b/kd6TmBWneX3z34c9Pw6E23FKRaw
9IsQ06PKQtUkHZy0w3u8wmvJzKyqXQ4VAMR21r0TH7Y+Fw0IxCFPZKXWM73k9jYF
+DZYYz/HoI3WEP5gvb/XLvhzH4onlAE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:34 2025 by rpki-client