Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/dXRI8ZNIu9D76mrvMRGdaf85E3A.roa
File: dXRI8ZNIu9D76mrvMRGdaf85E3A.roa (raw, json)
Hash identifier: hd47Uyg7dVPG9ZzO9mScvs2pesptw9wRf4q9yECscGM=
Subject key identifier: 75:74:48:F1:93:48:BB:D0:FB:EA:6A:EF:31:11:9D:69:FF:39:13:70
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 01973C43FC04B37B7C893CD444DCDD3E4455
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/dXRI8ZNIu9D76mrvMRGdaf85E3A.roa
Signing time: Wed 04 Jun 2025 18:46:17 +0000
ROA not before: Wed 04 Jun 2025 18:46:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211680
IP address blocks: 45.156.128.0/24 maxlen: 24
45.156.129.0/24 maxlen: 24
45.156.130.0/24 maxlen: 24
185.180.140.0/24 maxlen: 24
185.180.143.0/24 maxlen: 24
185.226.198.0/24 maxlen: 24
2a10:3c0:1::/48 maxlen: 48
2a10:3c0:2::/48 maxlen: 48
2a10:3c0:100::/44 maxlen: 44
2a10:3c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:43:fc:04:b3:7b:7c:89:3c:d4:44:dc:dd:3e:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Jun 4 18:46:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=757448f19348bbd0fbea6aef31119d69ff391370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:86:31:78:32:e4:f7:d6:af:13:67:ad:58:
51:9a:37:65:45:86:06:f6:b3:fe:6d:20:31:af:1b:
3e:b4:a5:ca:cf:37:c9:47:8c:14:64:a8:0e:57:bd:
b6:01:dd:1b:c7:9f:4c:6c:1b:c9:99:11:70:d5:39:
5a:1f:2d:84:40:3e:67:bf:38:13:ff:e9:55:92:b5:
96:dc:ea:a3:d1:bf:a2:7f:fe:81:6e:07:4f:de:c6:
4c:45:7f:35:f8:3a:14:87:f7:6c:09:f2:ce:8b:0d:
9c:46:16:10:34:60:57:32:46:4b:85:dd:4a:f3:3b:
11:ae:d1:e1:3d:59:2b:ca:87:a2:55:78:a0:42:ec:
40:91:00:e8:e6:0b:99:23:58:8b:33:3e:1b:aa:10:
43:bf:d6:72:7e:32:2b:0e:a9:c6:3e:a9:d5:cf:2b:
a9:e1:cc:ce:fb:5b:5e:a7:41:a6:62:ac:3d:ce:4c:
f4:24:9e:f5:18:90:c7:30:f0:a5:29:9e:13:9c:9c:
ba:e3:64:c7:c7:48:5b:5c:a3:b6:1f:d0:51:45:a4:
da:70:0c:e9:55:9b:86:cf:3e:3d:eb:64:61:4a:45:
f4:48:51:ca:75:a2:b9:f7:f0:ca:49:98:21:51:76:
b0:95:fd:ab:40:98:e8:33:87:32:51:fa:f3:03:9f:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:74:48:F1:93:48:BB:D0:FB:EA:6A:EF:31:11:9D:69:FF:39:13:70
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/dXRI8ZNIu9D76mrvMRGdaf85E3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.128.0-45.156.130.255
185.180.140.0/24
185.180.143.0/24
185.226.198.0/24
IPv6:
2a10:3c0:1::-2a10:3c0:2:ffff:ffff:ffff:ffff:ffff
2a10:3c0:100::/44
Signature Algorithm: sha256WithRSAEncryption
5b:a9:a4:04:d1:af:c6:23:be:75:5a:79:6e:28:32:f7:85:cd:
19:a0:63:34:68:a9:65:64:c2:5d:56:93:31:1d:24:d6:fe:07:
25:49:67:33:e2:e6:c1:d3:1c:4d:39:a5:4c:0e:c0:89:02:dc:
9b:0b:63:bd:f4:74:a0:87:08:ed:7c:ba:54:f8:f6:aa:69:0c:
22:b6:4a:55:23:b2:26:a3:33:9e:90:a7:e1:48:93:15:71:04:
f0:d4:03:80:69:6b:52:b1:60:19:5b:d5:8b:0b:9d:74:0d:4a:
29:d7:8f:3e:83:6b:99:45:34:c2:bb:49:8b:6b:c8:25:8a:c3:
4d:99:b0:d3:ce:ba:bf:57:21:b3:a0:a3:f9:46:8f:12:24:1c:
e3:6e:00:16:b1:c2:61:9f:c3:c3:9d:3f:5b:34:2b:1d:d5:75:
51:a3:c7:4d:b3:64:72:47:77:5f:b3:be:13:f8:26:66:1e:d8:
13:88:9a:d8:3d:12:1e:ed:87:cd:ae:32:2c:91:d2:da:12:35:
18:38:65:ac:89:db:d7:3d:25:c0:a6:87:f4:9f:4e:3b:73:a0:
d3:81:a5:20:c6:d7:7e:a4:38:a4:24:c0:b6:e7:b1:7d:c3:d6:
bd:63:61:3a:b7:45:b6:ad:f8:4e:d5:8d:a7:ef:38:2c:5a:1b:
1d:9f:41:d5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZc8Q/wEs3t8iTzURNzdPkRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2
YWYxN2EwHhcNMjUwNjA0MTg0NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTc0NDhmMTkzNDhiYmQwZmJlYTZhZWYzMTExOWQ2OWZmMzkxMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLiGMXgy5PfWrxNnrVhRmjdlRYYG
9rP+bSAxrxs+tKXKzzfJR4wUZKgOV722Ad0bx59MbBvJmRFw1TlaHy2EQD5nvzgT
/+lVkrWW3Oqj0b+if/6BbgdP3sZMRX81+DoUh/dsCfLOiw2cRhYQNGBXMkZLhd1K
8zsRrtHhPVkryoeiVXigQuxAkQDo5guZI1iLMz4bqhBDv9ZyfjIrDqnGPqnVzyup
4czO+1tep0GmYqw9zkz0JJ71GJDHMPClKZ4TnJy642THx0hbXKO2H9BRRaTacAzp
VZuGzz4962RhSkX0SFHKdaK59/DKSZghUXawlf2rQJjoM4cyUfrzA59rSwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFHV0SPGTSLvQ++pq7zERnWn/ORNwMB8GA1UdIwQY
MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt
N2JmODI3N2Q4YTJmLzEvZFhSSThaTkl1OUQ3Nm1ydk1SR2RhZjg1RTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm
LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAmBAIAATAgMAwDBActnIAD
BAAtnIIDBAC5tIwDBAC5tI8DBAC54sYwIwQCAAIwHTASAwcAKhADwAABAwcAKhAD
wAACAwcEKhADwAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBbqaQE0a/GI751WnluKDL3
hc0ZoGM0aKllZMJdVpMxHSTW/gclSWcz4ubB0xxNOaVMDsCJAtybC2O99HSghwjt
fLpU+PaqaQwitkpVI7ImozOekKfhSJMVcQTw1AOAaWtSsWAZW9WLC510DUop148+
g2uZRTTCu0mLa8glisNNmbDTzrq/VyGzoKP5Ro8SJBzjbgAWscJhn8PDnT9bNCsd
1XVRo8dNs2RyR3dfs74T+CZmHtgTiJrYPRIe7YfNrjIskdLaEjUYOGWsidvXPSXA
pof0n047c6DTgaUgxtd+pDikJMC257F9w9a9Y2E6t0W2rfhO1Y2n7zgsWhsdn0HV
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:25 2025 by rpki-client