Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/PPDcjsjoszwTm8EI4XbGMJZozgI.roa
File: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (raw, json)
Hash identifier: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=
Subject key identifier: 3C:F0:DC:8E:C8:E8:B3:3C:13:9B:C1:08:E1:76:C6:30:96:68:CE:02
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0196D8FA165F5A789125B3869FF3B6D5675B
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/PPDcjsjoszwTm8EI4XbGMJZozgI.roa
Signing time: Fri 16 May 2025 12:03:10 +0000
ROA not before: Fri 16 May 2025 12:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.171.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.76.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.94.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.113.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
2a02:aec0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:fa:16:5f:5a:78:91:25:b3:86:9f:f3:b6:d5:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: May 16 12:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf0dc8ec8e8b33c139bc108e176c6309668ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:58:30:65:42:7e:c5:d4:ce:32:03:77:cf:
c7:89:91:5a:07:cb:5e:7b:b8:eb:e4:f0:f5:6d:b1:
fa:fa:56:79:96:70:6b:e9:34:37:aa:2c:c3:d1:35:
27:53:a8:f6:cc:a4:06:f9:8c:dc:c6:58:18:77:16:
7f:e0:48:44:a0:de:35:22:9f:1a:c5:fc:05:c5:2a:
7c:12:c6:2b:48:ea:c5:d9:20:97:bb:53:2a:34:b0:
5b:6b:af:ad:a3:bf:a5:92:ac:77:9f:b9:9d:aa:57:
26:e0:72:8a:31:89:9d:e1:f8:86:54:38:d6:14:29:
92:fb:56:39:a8:15:bb:61:08:62:19:19:e7:4a:14:
67:10:5a:7b:f8:1e:9d:c8:00:de:c5:50:db:71:ca:
9e:ae:cf:87:5f:4b:ee:7e:60:44:93:29:85:9f:e3:
33:52:ae:1c:a5:5d:e9:7d:a9:c8:f4:dd:9d:c2:2b:
0b:7d:e3:dd:7c:d5:a7:3e:a2:e6:f1:8b:1e:d0:44:
1d:7a:89:f9:4c:ba:24:5c:b9:6e:25:93:0e:df:6e:
48:ee:8d:fa:02:c5:aa:7d:db:7e:bf:97:d1:cb:36:
03:e1:2f:a9:62:26:d7:eb:36:ee:ef:d4:9f:c4:16:
ad:30:fb:a0:24:1b:81:dc:6d:65:cb:0a:76:16:4f:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:DC:8E:C8:E8:B3:3C:13:9B:C1:08:E1:76:C6:30:96:68:CE:02
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/PPDcjsjoszwTm8EI4XbGMJZozgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0/22
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.94.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
151.236.127.0/24
185.31.112.0/22
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
2a02:aec0:b::/48
Signature Algorithm: sha256WithRSAEncryption
34:bf:60:9d:68:da:bb:89:9e:a5:07:13:4d:d4:44:96:b8:36:
40:e9:a8:0b:b3:b3:33:07:53:96:97:db:12:17:b9:90:f9:81:
46:0e:eb:97:1b:f4:b6:5f:f3:59:90:6c:6d:43:f7:8f:7c:1c:
9c:c2:38:72:b3:74:ac:cf:40:f1:14:0b:d1:17:5f:c6:83:94:
4e:40:3f:84:b0:4e:cd:21:bb:be:6a:97:40:9d:03:df:8d:e5:
5d:08:42:c3:ba:ec:16:4a:06:c0:2c:13:81:5b:7a:5a:04:5b:
e4:56:61:96:c9:d1:71:51:a3:a6:a0:31:3b:b4:a9:07:bf:a0:
53:4c:c7:06:24:23:b7:d7:5c:72:5c:fd:f8:02:a7:c1:b2:95:
a9:9c:81:7b:d3:29:23:e7:16:2f:da:dc:e0:6e:e8:18:cd:c1:
97:3f:e1:07:24:c4:69:11:e3:84:38:71:7a:c8:dd:26:15:31:
36:1d:1e:88:14:27:97:a2:b2:f0:b3:62:64:f0:a9:81:9e:56:
bb:15:b0:49:8d:b0:b2:b7:0e:9b:4f:3a:3c:89:f3:2c:c8:dc:
88:6d:7a:bb:30:52:90:65:2c:ca:36:e3:ed:03:e8:41:43:b5:
ab:95:da:7a:85:b7:19:fc:87:65:09:72:06:3d:79:e1:9c:ac:
97:3c:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:12:57 2025 by rpki-client