Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U5lQ11o9gywB1zVprkCX1bleJio.roa
File: U5lQ11o9gywB1zVprkCX1bleJio.roa (raw, json)
Hash identifier: V5+PZoNplYl5w6LQkK3o7CRnzARBLvCvS8P6503ccFs=
Subject key identifier: 53:99:50:D7:5A:3D:83:2C:01:D7:35:69:AE:40:97:D5:B9:5E:26:2A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01975AB7B3FD0FD6CBC9D6F621B970A38A22
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U5lQ11o9gywB1zVprkCX1bleJio.roa
Signing time: Tue 10 Jun 2025 16:41:17 +0000
ROA not before: Tue 10 Jun 2025 16:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.227.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.15.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:b7:b3:fd:0f:d6:cb:c9:d6:f6:21:b9:70:a3:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 10 16:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539950d75a3d832c01d73569ae4097d5b95e262a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:55:08:f3:10:5d:ef:7e:c6:53:c6:32:f8:
c2:fd:2d:19:c0:6c:ec:27:dc:1a:5f:dc:4e:7b:82:
fb:92:80:ec:73:da:76:b7:ce:28:c2:6f:68:6d:f5:
c3:8a:d1:14:7f:69:13:03:b9:91:be:c6:ee:af:e8:
1b:58:ea:ed:e9:c4:a2:01:66:21:85:a4:b5:59:0a:
10:82:03:24:a3:fe:ac:d7:98:d4:22:bd:8a:ef:1b:
bd:41:98:c9:4e:56:cc:57:0b:65:a3:a1:d0:67:d8:
01:ab:57:55:38:b3:3d:4f:93:5d:ae:27:97:4b:33:
a0:9d:6c:bf:e2:36:5a:7e:b9:98:1c:35:96:23:ed:
cc:78:99:a3:0f:92:03:5d:93:c4:b3:c3:de:4f:91:
ed:1c:bf:39:e1:89:6a:ac:57:58:e2:2f:9a:b2:1e:
8f:25:16:15:6d:e5:f8:56:5d:5d:a6:4f:14:2a:8b:
73:62:be:7e:ab:18:29:59:6b:94:d9:f2:0f:91:bb:
4e:8c:7f:cd:7c:4c:56:15:12:83:38:44:6e:d4:b8:
7b:c6:2b:3d:0d:70:b3:39:99:c4:aa:b3:b5:d1:0c:
e8:5a:57:63:b4:7e:62:1f:cd:82:47:d2:3a:87:3b:
d1:74:f2:c7:69:65:15:09:49:2f:8f:e5:c5:c8:ad:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:50:D7:5A:3D:83:2C:01:D7:35:69:AE:40:97:D5:B9:5E:26:2A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U5lQ11o9gywB1zVprkCX1bleJio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.234.0/24
45.151.140.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
89.106.2.0/24
89.106.15.0/24
94.229.212.0/24
94.229.220.0/24
94.229.222.0/23
103.47.59.0/24
194.36.33.0-194.36.34.255
Signature Algorithm: sha256WithRSAEncryption
10:ce:20:61:74:67:6a:4a:a8:85:ee:0f:3d:a2:d2:e2:d9:a8:
9d:48:18:d4:7a:03:a1:1e:5e:7a:2a:54:0f:8f:33:2b:6c:d0:
0a:c5:57:85:c8:56:8e:9d:57:1d:87:dc:24:aa:35:bd:38:5e:
a1:a1:74:4e:a3:a4:4c:73:da:4e:1c:6d:15:5b:da:c2:0c:f0:
b3:41:fa:59:a1:ba:d2:da:bd:a1:cb:e8:a8:1d:60:89:50:96:
51:24:eb:5d:28:60:73:d4:2c:50:8d:e5:f9:38:f4:7c:ca:61:
9a:7f:f5:56:5b:c6:da:95:67:a9:8e:f0:94:68:a2:c7:9f:7a:
bd:43:fe:76:ea:d2:12:84:40:39:d0:7f:75:dc:f4:a2:b8:38:
86:09:0b:e2:6e:83:e8:33:45:76:3b:76:66:04:26:44:c9:1d:
16:9f:5a:af:fe:3c:ea:05:1b:e6:2e:42:e8:e7:15:4a:73:94:
96:76:e1:b6:34:fc:c6:75:6c:f2:79:6b:a8:a1:74:02:5b:92:
78:5a:fc:2f:50:7b:43:ac:2e:f4:55:eb:1a:01:cf:31:20:70:
e3:8d:34:d7:1e:f4:98:d0:d4:0b:69:e2:81:bf:7e:6b:13:8f:
ed:13:1d:02:69:01:85:ae:31:d8:d8:c6:3d:8c:f6:92:e2:cb:
e4:f6:18:9e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZdat7P9D9bLydb2Iblwo4oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNjEwMTY0MTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzk5NTBkNzVhM2Q4MzJjMDFkNzM1NjlhZTQwOTdkNWI5NWUyNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5lVCPMQXe9+xlPGMvjC/S0ZwGzs
J9waX9xOe4L7koDsc9p2t84owm9obfXDitEUf2kTA7mRvsbur+gbWOrt6cSiAWYh
haS1WQoQggMko/6s15jUIr2K7xu9QZjJTlbMVwtlo6HQZ9gBq1dVOLM9T5NdrieX
SzOgnWy/4jZafrmYHDWWI+3MeJmjD5IDXZPEs8PeT5HtHL854YlqrFdY4i+ash6P
JRYVbeX4Vl1dpk8UKotzYr5+qxgpWWuU2fIPkbtOjH/NfExWFRKDOERu1Lh7xis9
DXCzOZnEqrO10QzoWldjtH5iH82CR9I6hzvRdPLHaWUVCUkvj+XFyK1TbQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFFOZUNdaPYMsAdc1aa5Al9W5XiYqMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvVTVsUTExbzlneXdCMXpWcHJrQ1gxYmxlSmlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQBDmbiAwQA
DmbqAwQALZeMAwQCTW9gAwQBTW9mAwQATW9pAwQAWWoCAwQAWWoPAwQAXuXUAwQA
XuXcAwQBXuXeAwQAZy87MAwDBADCJCEDBADCJCIwDQYJKoZIhvcNAQELBQADggEB
ABDOIGF0Z2pKqIXuDz2i0uLZqJ1IGNR6A6EeXnoqVA+PMyts0ArFV4XIVo6dVx2H
3CSqNb04XqGhdE6jpExz2k4cbRVb2sIM8LNB+lmhutLavaHL6KgdYIlQllEk610o
YHPULFCN5fk49HzKYZp/9VZbxtqVZ6mO8JRoosefer1D/nbq0hKEQDnQf3Xc9KK4
OIYJC+Jug+gzRXY7dmYEJkTJHRafWq/+POoFG+YuQujnFUpzlJZ24bY0/MZ1bPJ5
a6ihdAJbknha/C9Qe0OsLvRV6xoBzzEgcOONNNce9JjQ1Atp4oG/fmsTj+0THQJp
AYWuMdjYxj2M9pLiy+T2GJ4=
-----END CERTIFICATE-----
Generated at Thu Jun 12 19:19:13 2025 by rpki-client