Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/bE9Rz-JEgnY1OAj9NvLaQK985n4.roa
File: bE9Rz-JEgnY1OAj9NvLaQK985n4.roa (raw, json)
Hash identifier: oGUETehCghwYm99EJnoOLB6Ay5aT0Q2AYzU5/8NcyJg=
Subject key identifier: 6C:4F:51:CF:E2:44:82:76:35:38:08:FD:36:F2:DA:40:AF:7C:E6:7E
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0195C7EC5861BBE6F0A0D11F458CE2A23836
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/bE9Rz-JEgnY1OAj9NvLaQK985n4.roa
Signing time: Mon 24 Mar 2025 11:31:49 +0000
ROA not before: Mon 24 Mar 2025 11:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199335
IP address blocks: 80.94.192.0/20 maxlen: 20
85.12.112.0/21 maxlen: 21
85.92.160.0/22 maxlen: 22
85.92.164.0/22 maxlen: 22
85.92.168.0/22 maxlen: 22
85.92.172.0/22 maxlen: 22
85.92.176.0/22 maxlen: 22
85.92.180.0/22 maxlen: 22
85.92.184.0/22 maxlen: 22
85.92.188.0/22 maxlen: 22
176.126.224.0/21 maxlen: 21
185.5.64.0/22 maxlen: 22
185.99.21.0/24 maxlen: 24
185.113.60.0/22 maxlen: 22
188.241.40.0/21 maxlen: 21
2a02:77c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:ec:58:61:bb:e6:f0:a0:d1:1f:45:8c:e2:a2:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Mar 24 11:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4f51cfe2448276353808fd36f2da40af7ce67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7b:3e:6c:1d:00:4d:38:52:6a:50:cb:24:8f:
ea:dd:66:95:37:93:77:01:a8:31:48:2b:d6:64:a6:
93:a5:30:41:32:2c:22:72:b4:29:c7:95:7b:7e:c1:
ac:a9:93:94:f3:67:cc:24:1f:89:e4:fc:2f:de:1a:
e1:b6:62:94:44:b2:ea:1e:19:97:8f:09:6d:95:bb:
fa:85:a0:d4:92:83:4c:da:d2:d0:32:80:0f:06:8a:
34:ad:17:bf:e9:47:4f:c9:27:c6:ef:e5:e3:52:6b:
7c:33:7f:89:c4:d9:c2:20:13:70:6f:55:88:14:71:
26:02:b1:c1:4c:d8:e4:45:1c:0b:3d:f5:d8:67:b2:
d9:dd:17:06:5a:e0:de:c8:88:7e:d3:3d:e1:97:51:
a9:55:66:c8:33:ad:a9:f0:9d:bf:75:15:8a:2a:a1:
b6:d3:ff:72:f8:01:2c:bf:2d:93:5e:5d:af:63:34:
57:75:d9:46:c5:ec:d2:12:32:44:5a:85:c3:04:5b:
64:2b:b3:9e:2d:46:f3:13:37:bf:47:b1:91:a4:d4:
12:c2:ec:8d:10:fd:19:15:5f:a9:46:82:d1:9d:d9:
e2:69:87:0e:ec:cd:c5:e5:5d:c6:11:0d:d5:ce:da:
30:c3:5a:a4:17:15:7f:ff:41:8a:62:e8:4f:c6:e4:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:51:CF:E2:44:82:76:35:38:08:FD:36:F2:DA:40:AF:7C:E6:7E
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/bE9Rz-JEgnY1OAj9NvLaQK985n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.192.0/20
85.12.112.0/21
85.92.160.0/19
176.126.224.0/21
185.5.64.0/22
185.99.21.0/24
185.113.60.0/22
188.241.40.0/21
IPv6:
2a02:77c0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:d8:f5:07:2a:21:6e:5e:ab:09:c9:6b:c4:d1:88:9f:e4:92:
cf:0c:2d:d2:9d:c0:28:58:92:54:fa:b1:5a:32:39:ae:2c:58:
ca:b8:b3:d5:10:b5:8b:78:e8:6a:dd:a6:45:4e:17:10:94:1b:
db:db:61:67:8d:6c:21:c4:27:a5:d7:e5:15:04:fe:23:2f:ce:
b9:a4:f4:61:e6:0c:53:3e:d3:79:c6:9c:3c:bd:7b:4e:1a:eb:
7f:fc:27:cf:79:00:82:8c:64:87:80:2a:62:0b:49:42:7b:06:
b4:93:4d:90:c2:f2:6a:5f:20:1b:c2:ad:16:61:c2:d5:df:36:
56:65:7f:82:14:48:04:9e:ff:83:0f:89:15:ce:ff:fe:9b:bb:
ae:95:02:37:7d:2a:f9:aa:e6:ef:ad:01:1c:0a:e1:7d:ef:6b:
fb:7a:2a:d7:4b:b7:c6:97:d2:79:79:cf:5b:6e:27:c8:15:12:
85:e4:ef:b3:48:c3:c7:36:71:bf:ce:b2:ff:50:49:fb:ef:90:
6c:0a:0f:86:94:3f:7d:05:e3:cc:1c:be:0d:2c:9f:ab:81:d8:
94:83:ac:37:08:4d:2c:36:fc:3c:84:0a:1d:43:a0:ec:c0:2f:
6d:35:c1:2b:2e:32:fb:c3:8a:81:f8:02:24:6e:cd:aa:7a:96:
84:92:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:05:24 2025 by rpki-client