Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/luOuJQnFXQhNggwM6MUJDK19PDQ.roa
File: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (raw, json)
Hash identifier: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=
Subject key identifier: 96:E3:AE:25:09:C5:5D:08:4D:82:0C:0C:E8:C5:09:0C:AD:7D:3C:34
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 0196C5A953EBBAB0653786ACF164A8B6F437
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/luOuJQnFXQhNggwM6MUJDK19PDQ.roa
Signing time: Mon 12 May 2025 18:02:10 +0000
ROA not before: Mon 12 May 2025 18:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49788
IP address blocks: 45.153.104.0/22 maxlen: 22
79.141.96.0/20 maxlen: 20
91.90.104.0/21 maxlen: 21
91.189.120.0/21 maxlen: 21
91.193.0.0/22 maxlen: 24
91.209.212.0/24 maxlen: 24
91.218.184.0/22 maxlen: 22
91.220.165.0/24 maxlen: 24
91.221.130.0/23 maxlen: 23
91.223.100.0/24 maxlen: 24
91.225.60.0/22 maxlen: 22
93.184.112.0/21 maxlen: 21
151.252.8.0/21 maxlen: 24
176.111.206.0/23 maxlen: 23
185.7.192.0/22 maxlen: 22
185.55.104.0/22 maxlen: 22
185.80.180.0/22 maxlen: 24
185.168.72.0/22 maxlen: 22
193.202.115.0/24 maxlen: 24
2001:67c:230::/48 maxlen: 48
2001:67c:206c::/48 maxlen: 48
2a02:d140::/29 maxlen: 29
2a04:d340::/29 maxlen: 29
2a0b:f200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a9:53:eb:ba:b0:65:37:86:ac:f1:64:a8:b6:f4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: May 12 18:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96e3ae2509c55d084d820c0ce8c5090cad7d3c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b9:d5:36:5c:c2:da:c4:f4:c4:bd:f7:23:2f:
0b:9f:da:ed:1b:06:b2:4b:6a:de:68:4c:8c:3f:14:
b7:41:db:6c:c3:fb:10:68:89:10:9e:4b:78:d8:16:
b0:00:c7:11:be:70:4e:90:ea:81:f5:2b:c4:07:a1:
2a:ad:89:d5:88:fb:67:a2:70:9e:fb:a7:99:39:15:
23:69:7e:53:b0:49:bc:38:9a:5f:6f:14:5c:84:d4:
80:c8:5b:3a:09:ea:57:82:79:e8:5d:02:08:16:cf:
7f:0a:77:2b:8f:8d:3f:5f:b8:a9:16:89:8f:1b:43:
38:66:58:05:e5:22:da:b2:31:48:d7:61:01:83:be:
0d:d8:50:01:70:b6:82:7c:1f:92:88:21:17:e6:1f:
21:dd:2f:57:32:c2:95:05:4c:2b:47:bf:d8:cf:33:
06:7d:26:f6:ff:99:cb:6d:05:76:40:2e:22:1e:0d:
f2:87:94:35:75:3a:57:ff:d1:79:4f:dc:88:14:00:
58:f4:94:e5:6e:6a:04:78:ca:f9:76:92:07:2d:7c:
05:db:1b:27:96:bd:27:5c:99:81:02:b5:07:49:4d:
68:a0:cd:8e:cc:9f:70:7b:1e:38:08:ff:9c:78:ab:
08:52:fd:12:3c:9d:2b:dd:b6:5e:ce:81:c7:13:09:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E3:AE:25:09:C5:5D:08:4D:82:0C:0C:E8:C5:09:0C:AD:7D:3C:34
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/luOuJQnFXQhNggwM6MUJDK19PDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.104.0/22
79.141.96.0/20
91.90.104.0/21
91.189.120.0/21
91.193.0.0/22
91.209.212.0/24
91.218.184.0/22
91.220.165.0/24
91.221.130.0/23
91.223.100.0/24
91.225.60.0/22
93.184.112.0/21
151.252.8.0/21
176.111.206.0/23
185.7.192.0/22
185.55.104.0/22
185.80.180.0/22
185.168.72.0/22
193.202.115.0/24
IPv6:
2001:67c:230::/48
2001:67c:206c::/48
2a02:d140::/29
2a04:d340::/29
2a0b:f200::/32
Signature Algorithm: sha256WithRSAEncryption
3f:a2:8f:db:ef:20:2c:65:fc:3f:89:e9:42:57:50:3a:88:af:
95:27:ac:c5:c3:58:bf:61:77:62:d0:c1:e7:65:3f:12:d5:10:
89:7b:cf:df:bb:15:b5:43:4b:66:7d:70:31:44:54:41:0f:4f:
f5:67:d3:6f:03:80:dd:c7:86:07:19:0d:6b:42:b8:3c:8b:bd:
df:e6:4a:12:13:c0:76:37:00:7b:a3:93:e0:a4:21:58:6b:a7:
a9:7a:d5:c6:2e:d4:a9:da:99:7a:b2:05:3b:32:25:08:f3:32:
01:d6:5c:9b:27:9b:e8:0b:87:d0:e3:be:e6:86:a2:96:61:84:
94:19:b2:91:2b:4f:e2:f0:f0:af:e4:56:6c:9f:fe:cc:c1:c1:
53:0f:d4:e2:aa:bd:69:8f:cc:3c:6f:02:ea:d4:fc:ba:16:7d:
cc:25:f1:e3:fb:91:40:40:93:a7:5c:05:59:c7:f3:59:0a:0f:
2e:65:d1:d6:fd:60:44:4f:1b:21:1b:ba:a5:bf:64:49:4a:37:
72:49:3d:39:11:89:97:b0:b7:69:80:4b:04:8c:2a:90:f0:eb:
aa:6a:8a:35:15:99:ea:57:80:e8:f9:41:b1:9c:5b:52:d2:46:
b9:28:17:39:5e:4a:5d:94:55:ba:a3:13:5f:89:cd:c8:b7:cb:
0c:1e:c2:3f
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAZbFqVPrurBlN4as8WSotvQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw
ZmVkOWMwHhcNMjUwNTEyMTgwMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmUzYWUyNTA5YzU1ZDA4NGQ4MjBjMGNlOGM1MDkwY2FkN2QzYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77nVNlzC2sT0xL33Iy8Ln9rtGway
S2reaEyMPxS3Qdtsw/sQaIkQnkt42BawAMcRvnBOkOqB9SvEB6EqrYnViPtnonCe
+6eZORUjaX5TsEm8OJpfbxRchNSAyFs6CepXgnnoXQIIFs9/Cncrj40/X7ipFomP
G0M4ZlgF5SLasjFI12EBg74N2FABcLaCfB+SiCEX5h8h3S9XMsKVBUwrR7/YzzMG
fSb2/5nLbQV2QC4iHg3yh5Q1dTpX/9F5T9yIFABY9JTlbmoEeMr5dpIHLXwF2xsn
lr0nXJmBArUHSU1ooM2OzJ9wex44CP+ceKsIUv0SPJ0r3bZezoHHEwmpOwIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFJbjriUJxV0ITYIMDOjFCQytfTw0MB8GA1UdIwQY
MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It
ODkyOTZjY2IzNWY1LzEvbHVPdUpRbkZYUWhOZ2d3TTZNVUpESzE5UERRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1
LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTB4BAIAATByAwQCLZlo
AwQET41gAwQDW1poAwQDW714AwQCW8EAAwQAW9HUAwQCW9q4AwQAW9ylAwQBW92C
AwQAW99kAwQCW+E8AwQDXbhwAwQDl/wIAwQBsG/OAwQCuQfAAwQCuTdoAwQCuVC0
AwQCuahIAwQAwcpzMC0EAgACMCcDBwAgAQZ8AjADBwAgAQZ8IGwDBQMqAtFAAwUD
KgTTQAMFACoL8gAwDQYJKoZIhvcNAQELBQADggEBAD+ij9vvICxl/D+J6UJXUDqI
r5UnrMXDWL9hd2LQwedlPxLVEIl7z9+7FbVDS2Z9cDFEVEEPT/Vn028DgN3HhgcZ
DWtCuDyLvd/mShITwHY3AHujk+CkIVhrp6l61cYu1KnamXqyBTsyJQjzMgHWXJsn
m+gLh9DjvuaGopZhhJQZspErT+Lw8K/kVmyf/szBwVMP1OKqvWmPzDxvAurU/LoW
fcwl8eP7kUBAk6dcBVnH81kKDy5l0db9YERPGyEbuqW/ZElKN3JJPTkRiZewt2mA
SwSMKpDw66pqijUVmepXgOj5QbGcW1LSRrkoFzleSl2UVbqjE1+Jzci3ywwewj8=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:34 2025 by rpki-client