Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0I7cwOW3xH34MnyarOAbNOSm9yU.roa
File: 0I7cwOW3xH34MnyarOAbNOSm9yU.roa (raw, json)
Hash identifier: jtEuvpe2xUUjrNu9ihVIBPIqR8sLMTsMYiU0wFM9u4w=
Subject key identifier: D0:8E:DC:C0:E5:B7:C4:7D:F8:32:7C:9A:AC:E0:1B:34:E4:A6:F7:25
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01971C6F7153380AD478C741809EF6C4CF73
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0I7cwOW3xH34MnyarOAbNOSm9yU.roa
Signing time: Thu 29 May 2025 14:25:54 +0000
ROA not before: Thu 29 May 2025 14:25:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 79.132.180.0/24 maxlen: 24
79.132.183.0/24 maxlen: 24
79.132.188.0/24 maxlen: 24
79.132.190.0/24 maxlen: 24
88.223.154.0/23 maxlen: 24
88.223.167.0/24 maxlen: 24
88.223.168.0/21 maxlen: 21
88.223.176.0/20 maxlen: 24
88.223.180.0/24 maxlen: 24
88.223.183.0/24 maxlen: 24
88.223.189.0/24 maxlen: 24
88.223.190.0/24 maxlen: 24
88.223.191.0/24 maxlen: 24
88.223.208.0/24 maxlen: 24
88.223.218.0/24 maxlen: 24
88.223.224.0/19 maxlen: 24
95.173.40.0/21 maxlen: 21
95.173.48.0/20 maxlen: 20
213.164.96.0/20 maxlen: 24
213.164.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:6f:71:53:38:0a:d4:78:c7:41:80:9e:f6:c4:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: May 29 14:25:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08edcc0e5b7c47df8327c9aace01b34e4a6f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:6d:23:5d:f8:ac:ba:8d:11:bd:e4:a9:7f:
98:ad:56:25:95:0d:f6:cf:2a:f8:ec:a5:f7:f1:56:
fc:5a:7b:f1:80:8d:ce:12:3d:d0:c6:3a:35:e6:e8:
54:32:9b:7f:c4:a4:5c:62:a5:70:0b:19:08:9d:42:
cc:c8:2e:5a:5c:32:f1:9e:c8:dd:9b:bd:9a:72:cd:
75:c1:62:17:35:03:cf:96:02:2a:39:2a:b8:19:84:
bb:df:dd:a6:5e:d6:d9:f6:9a:53:f3:d5:66:a1:94:
0b:e7:73:61:0b:fd:59:36:b3:1e:8b:69:b9:34:ac:
0f:d6:ea:fd:32:3e:d8:cb:df:f6:33:70:1e:f7:c3:
70:d1:c0:ae:ab:cf:d4:1d:3e:d7:14:fb:eb:b4:22:
89:33:f9:f9:08:34:bb:18:9b:77:68:bc:7a:9c:b0:
64:68:54:a1:6a:d4:4a:95:73:ab:f4:39:e7:64:1d:
43:fa:96:b7:a3:b9:2b:65:4b:30:9d:51:7e:a2:62:
dc:3c:2f:84:d3:82:f0:5e:d9:55:07:1a:5d:96:a6:
e7:6b:1c:ab:bd:cf:8f:34:49:11:88:66:9c:00:d7:
d8:ec:f7:ca:52:96:a9:eb:d2:e4:0d:5e:c7:a5:04:
22:7a:ee:fe:d7:e3:77:f8:61:9c:8c:c0:be:6d:07:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8E:DC:C0:E5:B7:C4:7D:F8:32:7C:9A:AC:E0:1B:34:E4:A6:F7:25
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0I7cwOW3xH34MnyarOAbNOSm9yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.180.0/24
79.132.183.0/24
79.132.188.0/24
79.132.190.0/24
88.223.154.0/23
88.223.167.0-88.223.191.255
88.223.208.0/24
88.223.218.0/24
88.223.224.0/19
95.173.40.0-95.173.63.255
213.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:72:fe:91:aa:28:29:bd:01:7b:64:43:7c:94:b4:a6:26:cc:
53:b4:e2:81:be:d1:b8:36:01:80:a0:e1:bb:f5:79:f7:7c:1e:
66:b2:cd:c8:bc:a0:be:c3:32:7c:ad:72:e3:52:46:14:2f:18:
e3:45:e3:3a:c5:c0:2b:24:63:a7:bc:14:c8:cd:32:b9:ba:63:
22:30:92:9f:11:7c:c7:33:b6:ad:6f:bc:9d:ec:e4:fc:dc:3a:
ee:cd:91:ac:5e:bb:28:58:b7:51:6e:a0:05:18:a5:88:56:7e:
fc:b6:30:18:8d:cf:42:bd:cf:42:ff:e5:f2:f0:ed:9d:22:61:
bc:28:85:7f:d0:0c:15:c8:de:aa:a0:1e:47:de:8c:4a:4f:1d:
2c:1e:50:1d:e6:62:a2:f0:cf:c9:af:46:14:92:4d:ee:fe:84:
0b:05:98:6f:f7:2c:f0:9e:46:c5:4a:0b:a1:c7:66:76:fc:d4:
c3:84:64:51:fa:ae:18:fe:f5:72:cf:73:bf:72:3c:c2:29:c7:
ef:47:40:d6:5e:0b:27:54:3b:4e:19:13:21:e9:95:18:e8:cf:
38:9e:ed:75:66:44:5f:b0:65:f1:25:5a:8e:67:bb:05:f9:aa:
d1:3e:1d:9d:aa:29:44:eb:47:f7:c8:3a:e7:a5:bf:41:bc:9f:
11:9b:c7:21
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZccb3FTOArUeMdBgJ72xM9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwNTI5MTQyNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDhlZGNjMGU1YjdjNDdkZjgzMjdjOWFhY2UwMWIzNGU0YTZmNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8NtI134rLqNEb3kqX+YrVYllQ32
zyr47KX38Vb8WnvxgI3OEj3Qxjo15uhUMpt/xKRcYqVwCxkInULMyC5aXDLxnsjd
m72acs11wWIXNQPPlgIqOSq4GYS7392mXtbZ9ppT89VmoZQL53NhC/1ZNrMei2m5
NKwP1ur9Mj7Yy9/2M3Ae98Nw0cCuq8/UHT7XFPvrtCKJM/n5CDS7GJt3aLx6nLBk
aFShatRKlXOr9DnnZB1D+pa3o7krZUswnVF+omLcPC+E04LwXtlVBxpdlqbnaxyr
vc+PNEkRiGacANfY7PfKUpap69LkDV7HpQQieu7+1+N3+GGcjMC+bQceAQIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFNCO3MDlt8R9+DJ8mqzgGzTkpvclMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvMEk3Y3dPVzN4SDM0TW55YXJPQWJOT1NtOXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAT4S0AwQA
T4S3AwQAT4S8AwQAT4S+AwQBWN+aMAwDBABY36cDBAZY34ADBABY39ADBABY39oD
BAVY3+AwDAMEA1+tKAMEBl+tAAMEBNWkYDANBgkqhkiG9w0BAQsFAAOCAQEAGnL+
kaooKb0Be2RDfJS0pibMU7Tigb7RuDYBgKDhu/V593weZrLNyLygvsMyfK1y41JG
FC8Y40XjOsXAKyRjp7wUyM0yubpjIjCSnxF8xzO2rW+8nezk/Nw67s2RrF67KFi3
UW6gBRiliFZ+/LYwGI3PQr3PQv/l8vDtnSJhvCiFf9AMFcjeqqAeR96MSk8dLB5Q
HeZiovDPya9GFJJN7v6ECwWYb/cs8J5GxUoLocdmdvzUw4RkUfquGP71cs9zv3I8
winH70dA1l4LJ1Q7ThkTIemVGOjPOJ7tdWZEX7Bl8SVajme7Bfmq0T4dnaopROtH
98g656W/QbyfEZvHIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:56 2025 by rpki-client