Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/tedYlf87S78MkPQe8A70plM_Ngw.roa
File: tedYlf87S78MkPQe8A70plM_Ngw.roa (raw, json)
Hash identifier: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=
Subject key identifier: B5:E7:58:95:FF:3B:4B:BF:0C:90:F4:1E:F0:0E:F4:A6:53:3F:36:0C
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0196D8FF93C53E34545DAAB0520BC1EEF2D0
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/tedYlf87S78MkPQe8A70plM_Ngw.roa
Signing time: Fri 16 May 2025 12:09:10 +0000
ROA not before: Fri 16 May 2025 12:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204720
IP address blocks: 91.231.238.0/24 maxlen: 24
91.238.111.0/24 maxlen: 24
151.236.66.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.69.0/24 maxlen: 24
151.236.71.0/24 maxlen: 24
151.236.79.0/24 maxlen: 24
151.236.82.0/24 maxlen: 24
151.236.92.0/24 maxlen: 24
151.236.93.0/24 maxlen: 24
151.236.97.0/24 maxlen: 24
151.236.98.0/24 maxlen: 24
151.236.101.0/24 maxlen: 24
151.236.103.0/24 maxlen: 24
151.236.104.0/24 maxlen: 24
151.236.105.0/24 maxlen: 24
151.236.108.0/24 maxlen: 24
151.236.110.0/24 maxlen: 24
151.236.112.0/24 maxlen: 24
151.236.114.0/24 maxlen: 24
151.236.115.0/24 maxlen: 24
151.236.116.0/24 maxlen: 24
151.236.117.0/24 maxlen: 24
151.236.118.0/24 maxlen: 24
151.236.119.0/24 maxlen: 24
151.236.120.0/24 maxlen: 24
151.236.121.0/24 maxlen: 24
151.236.124.0/24 maxlen: 24
151.236.126.0/24 maxlen: 24
185.31.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:ff:93:c5:3e:34:54:5d:aa:b0:52:0b:c1:ee:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: May 16 12:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e75895ff3b4bbf0c90f41ef00ef4a6533f360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:a2:de:fc:96:53:95:74:03:ff:be:c2:87:
05:6c:6b:63:26:1d:a9:d8:71:a3:e1:c3:91:70:53:
61:84:16:6e:c4:10:b5:21:47:db:67:d1:3c:34:16:
00:6a:28:b4:ca:8c:ee:b3:ae:e8:8e:39:42:67:a2:
11:a9:a5:ca:13:62:ae:38:26:bb:8f:a6:90:98:74:
5b:36:f5:74:95:86:91:65:81:8d:94:e1:0d:12:25:
33:d9:07:67:de:43:29:4f:33:62:97:c4:96:3e:03:
52:ba:60:7b:9d:46:37:fc:e5:9c:da:cf:b9:2a:c3:
3f:d5:b6:6e:d0:6f:ec:32:fc:b1:44:a3:af:2b:e9:
a3:69:9a:e1:eb:32:17:4a:0d:7f:35:47:13:75:1e:
55:5e:b3:d8:ea:0d:e3:e1:37:94:c2:72:bf:02:7b:
4c:0c:7f:73:d6:cc:04:57:0f:f6:d7:53:89:8b:95:
a8:26:e6:15:bf:da:61:c4:cf:3b:77:e2:95:68:ca:
64:8f:21:fa:94:fd:23:7e:07:c1:1d:c3:64:71:ea:
98:f0:33:b7:7b:ce:51:08:f7:13:ba:90:e8:55:43:
71:97:ef:39:7c:c2:12:b1:c5:a0:91:37:aa:be:c4:
41:23:3e:13:08:4d:63:6e:b7:d8:1a:99:74:fa:8b:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E7:58:95:FF:3B:4B:BF:0C:90:F4:1E:F0:0E:F4:A6:53:3F:36:0C
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/tedYlf87S78MkPQe8A70plM_Ngw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.238.0/24
91.238.111.0/24
151.236.66.0/24
151.236.68.0/23
151.236.71.0/24
151.236.79.0/24
151.236.82.0/24
151.236.92.0/23
151.236.97.0-151.236.98.255
151.236.101.0/24
151.236.103.0-151.236.105.255
151.236.108.0/24
151.236.110.0/24
151.236.112.0/24
151.236.114.0-151.236.121.255
151.236.124.0/24
151.236.126.0/24
185.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
96:51:95:6e:0f:0d:be:5f:87:f9:82:df:30:58:cf:01:83:6b:
02:4f:10:ea:31:39:96:43:7e:34:1a:4b:dc:52:5b:79:df:24:
57:9d:3d:c4:9d:8b:de:5f:f3:e5:e3:8e:d4:1a:aa:07:40:ee:
7c:8f:74:2f:7b:18:75:e0:e6:14:14:5e:61:0b:50:ea:64:60:
ca:7e:92:4b:a1:4a:f8:cc:bf:25:d7:ef:36:06:8d:4b:18:24:
16:d7:f9:b2:cc:dc:e0:ac:37:ea:ff:33:8a:e1:79:cd:e6:93:
3f:e1:81:8a:a9:1f:17:fc:87:cf:9b:34:4c:6c:bb:23:b2:be:
33:25:46:0f:49:aa:34:aa:cd:b6:6b:b1:9d:bb:ff:68:0f:18:
a5:df:78:7a:c3:9e:73:2b:95:58:9e:e3:58:df:67:65:96:8b:
db:09:f4:b3:33:2c:e7:64:40:a1:6c:09:8c:cf:fb:c2:4e:5b:
c7:8c:7b:61:26:3b:a4:6d:02:87:59:b7:82:b1:93:dc:e2:4e:
88:b5:42:b4:04:dc:e0:e6:70:27:06:8b:2c:b3:01:a6:6c:70:
37:59:5c:b9:15:a4:ac:a8:ac:03:f8:4c:b8:14:d6:1d:b1:14:
76:1b:8c:6e:ea:3d:c7:d6:47:71:25:63:cc:44:99:d2:fd:fa:
ae:c3:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:57:03 2025 by rpki-client