Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/w1YFiFJuDkLwfH12b8HVWrrgIyw.roa
File: w1YFiFJuDkLwfH12b8HVWrrgIyw.roa (raw, json)
Hash identifier: h5Vx7euEqT+VQik2aflSAR/E4FJIYJap6VE9d19PiSk=
Subject key identifier: C3:56:05:88:52:6E:0E:42:F0:7C:7D:76:6F:C1:D5:5A:BA:E0:23:2C
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 0196FDC3E1C20FB596BAE69807E8322B2101
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/w1YFiFJuDkLwfH12b8HVWrrgIyw.roa
Signing time: Fri 23 May 2025 15:29:54 +0000
ROA not before: Fri 23 May 2025 15:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.67.0/24 maxlen: 24
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
84.22.86.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
213.180.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:c3:e1:c2:0f:b5:96:ba:e6:98:07:e8:32:2b:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: May 23 15:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3560588526e0e42f07c7d766fc1d55abae0232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:e1:e9:3a:2b:26:0a:79:ce:22:f0:8c:17:
a1:de:02:de:da:1e:5c:da:8c:3f:2a:cf:b0:c7:f1:
5b:cb:78:1e:0b:30:ed:de:45:e5:d7:67:f5:72:7e:
d8:e2:5c:4a:92:a3:f8:8b:26:e5:c1:8f:03:5c:9a:
0c:6b:62:3f:98:f5:80:03:aa:3f:78:70:78:a7:72:
8b:67:15:2b:c0:5d:ba:f8:26:c7:76:6c:26:b7:8f:
a0:4f:cb:61:6e:2e:a4:48:6b:22:00:04:c2:1e:e7:
a9:15:83:af:9d:1f:fb:6c:38:a7:e0:47:86:d9:4f:
85:c3:be:3c:3f:c5:a9:47:1c:7f:41:00:da:f3:b9:
88:06:b7:ee:dc:1f:b7:50:89:ba:9b:18:b5:da:ec:
83:c8:59:3f:41:3c:18:3c:04:1f:ff:8b:fe:09:2b:
81:fc:f7:3e:a9:c1:1b:54:9e:72:0a:df:7b:18:df:
8d:62:8a:ff:2c:77:87:94:44:13:6d:f0:ec:89:8d:
40:1c:bc:f2:59:d5:52:74:97:91:a7:46:84:0a:be:
80:cd:e4:94:69:5e:67:9e:8a:a9:cd:0b:a1:56:a0:
a3:bb:34:6d:bd:5a:69:b4:b9:b6:0b:03:0d:e9:65:
9f:75:62:19:5c:6e:b8:40:8e:8a:33:2d:56:2e:34:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:05:88:52:6E:0E:42:F0:7C:7D:76:6F:C1:D5:5A:BA:E0:23:2C
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/w1YFiFJuDkLwfH12b8HVWrrgIyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
22:34:ea:a1:88:ff:ac:8c:ed:51:4c:88:0b:48:01:d5:b9:5b:
ce:c1:72:b9:a3:9a:54:de:20:9a:d7:8c:43:2b:f7:05:42:3b:
bb:95:e2:58:8e:30:4c:86:66:26:91:c6:52:7f:ed:5a:ac:ad:
6a:91:ea:8f:eb:20:9d:2e:15:94:8b:c4:b9:59:7d:65:63:1c:
56:38:6c:a2:5a:88:79:f6:10:02:b2:ea:d3:be:78:99:43:59:
3c:25:84:54:71:b7:c4:06:df:12:f7:f1:67:73:8e:3b:c1:10:
32:e8:81:61:51:a4:95:f7:30:6c:7a:33:5f:31:b6:3e:de:40:
95:dc:f7:f4:90:a3:92:7e:6a:00:c6:fc:57:8d:40:c7:e1:b6:
72:40:36:52:91:38:1b:86:43:6a:ff:e8:32:92:89:21:4b:a4:
71:ec:57:38:67:83:15:7f:67:52:fb:36:fa:73:0f:aa:a3:f3:
00:08:f8:e6:62:30:22:e1:a6:21:58:ca:cb:3e:38:ea:95:f5:
07:e1:0a:e4:1f:d8:93:71:00:19:34:98:ad:0c:34:4a:1c:4e:
f6:40:da:33:5d:07:b3:1c:49:ff:78:e6:7b:c2:46:83:34:91:
0f:8c:46:d1:8a:c0:09:37:1c:83:a4:82:25:07:26:7b:35:7a:
42:00:df:0a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZb9w+HCD7WWuuaYB+gyKyEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjUwNTIzMTUyOTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzU2MDU4ODUyNmUwZTQyZjA3YzdkNzY2ZmMxZDU1YWJhZTAyMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWHh6TorJgp5ziLwjBeh3gLe2h5c
2ow/Ks+wx/Fby3geCzDt3kXl12f1cn7Y4lxKkqP4iyblwY8DXJoMa2I/mPWAA6o/
eHB4p3KLZxUrwF26+CbHdmwmt4+gT8thbi6kSGsiAATCHuepFYOvnR/7bDin4EeG
2U+Fw748P8WpRxx/QQDa87mIBrfu3B+3UIm6mxi12uyDyFk/QTwYPAQf/4v+CSuB
/Pc+qcEbVJ5yCt97GN+NYor/LHeHlEQTbfDsiY1AHLzyWdVSdJeRp0aECr6AzeSU
aV5nnoqpzQuhVqCjuzRtvVpptLm2CwMN6WWfdWIZXG64QI6KMy1WLjR1SQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFMNWBYhSbg5C8Hx9dm/B1Vq64CMsMB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvdzFZRmlGSnVEa0x3ZkgxMmI4SFZXcnJnSXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQFVBZAAwQC
w+r4MAwDBADVtOEDBADVtOIwDAMEAtW05AMEANW05gMEA9W08DANBgkqhkiG9w0B
AQsFAAOCAQEAIjTqoYj/rIztUUyIC0gB1blbzsFyuaOaVN4gmteMQyv3BUI7u5Xi
WI4wTIZmJpHGUn/tWqytapHqj+sgnS4VlIvEuVl9ZWMcVjhsolqIefYQArLq0754
mUNZPCWEVHG3xAbfEvfxZ3OOO8EQMuiBYVGklfcwbHozXzG2Pt5Aldz39JCjkn5q
AMb8V41Ax+G2ckA2UpE4G4ZDav/oMpKJIUukcexXOGeDFX9nUvs2+nMPqqPzAAj4
5mIwIuGmIVjKyz446pX1B+EK5B/Yk3EAGTSYrQw0ShxO9kDaM10HsxxJ/3jme8JG
gzSRD4xG0YrACTccg6SCJQcmezV6QgDfCg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:18:16 2025 by rpki-client