Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa
File: zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa (raw, json)
Hash identifier: NeJZaXwcRx4Bl+3WoFWMtQtTNrN4F35s8GQu8H57fPM=
Subject key identifier: CC:48:D9:23:69:DB:B3:D3:58:53:CD:E2:F6:70:00:FE:A2:17:E8:BB
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019425FC4D80F017035CF13DB2EB4D715C15
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa
Signing time: Thu 02 Jan 2025 07:47:59 +0000
ROA not before: Thu 02 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.171.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.76.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.94.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4d:80:f0:17:03:5c:f1:3d:b2:eb:4d:71:5c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc48d92369dbb3d35853cde2f67000fea217e8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:ed:81:53:01:c4:eb:aa:5d:6f:09:f9:ea:
11:83:3e:9a:f6:ca:dd:46:71:7c:58:1d:70:de:16:
08:67:f4:eb:f2:aa:83:6f:d8:e7:2f:5b:28:f1:36:
7a:26:b2:18:e5:9a:1d:d7:ff:ee:fe:e4:4b:e8:b2:
48:64:29:58:83:bf:e1:b0:da:09:39:d7:c5:4f:c4:
38:e7:b7:76:fb:9a:9e:7b:e4:20:9f:51:04:82:de:
89:5d:83:f4:a2:e9:68:e4:4e:c1:92:3b:10:cd:5e:
53:10:c0:82:88:fd:20:26:69:ae:b1:9d:43:c8:dd:
2b:9f:71:89:10:af:7e:92:b8:ed:99:e7:46:10:84:
12:c2:36:29:72:2f:79:95:3b:63:62:4b:18:80:60:
1b:b8:07:73:a0:34:f2:2b:87:e9:d6:32:08:a4:2a:
44:0b:71:e0:dc:40:23:5b:16:29:2d:81:9d:8c:d7:
50:14:c0:cc:8d:0d:70:11:9c:ad:fa:65:2b:4b:0e:
90:1a:43:27:99:0a:f3:c2:bc:c6:86:10:2a:e7:7f:
b1:50:e1:39:c3:24:31:df:fd:1c:28:39:12:f4:34:
31:bf:44:96:aa:e7:7d:c1:53:e3:4a:15:20:e8:ed:
0d:be:b9:b7:4f:8a:eb:c2:89:c2:05:4c:78:4c:ba:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:D9:23:69:DB:B3:D3:58:53:CD:E2:F6:70:00:FE:A2:17:E8:BB
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0/22
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.94.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
185.31.112.0/24
185.31.114.0/23
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:22:8c:87:ea:df:b9:a5:4f:3a:a8:9c:7b:81:02:bb:58:bd:
57:1f:bc:88:fe:b9:77:ca:03:5f:be:70:6c:17:32:c3:da:f7:
21:29:bb:b6:39:92:0c:b3:ba:9b:6c:20:c9:8d:02:42:29:91:
09:46:ac:a5:11:6b:53:78:9b:93:a0:0c:f5:5b:79:ee:65:c2:
25:9d:cb:7a:54:6f:1d:df:ec:7c:9c:59:5b:ca:bc:e0:cb:ba:
05:ad:9d:bb:cf:d2:92:88:ff:95:17:17:61:7e:a9:f1:02:aa:
7f:75:74:d5:71:70:fe:e1:82:85:55:85:c0:24:57:2f:24:12:
1f:81:03:8d:f7:45:87:b6:f6:8c:ec:d9:a3:4a:0a:96:1e:cb:
15:e3:46:81:07:98:36:81:7d:0d:ab:54:5e:dc:ae:1d:1e:99:
89:d5:52:68:58:ff:4b:c4:6c:ab:7f:57:f0:ef:06:10:a1:78:
0c:a3:7d:87:45:f6:27:d7:83:39:38:1c:d9:78:92:5c:16:1b:
07:06:9f:84:5b:d8:37:ea:d4:53:3a:19:2f:f4:93:5a:ba:32:
58:5a:44:f9:92:9f:f0:5e:98:fc:83:7a:31:4f:97:7e:2a:31:
f2:6a:2d:d1:fb:3f:1e:a1:a7:f9:bc:bf:6b:06:f8:67:75:a2:
af:be:f9:42
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAZQl/E2A8BcDXPE9sutNcVwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjUwMTAyMDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzQ4ZDkyMzY5ZGJiM2QzNTg1M2NkZTJmNjcwMDBmZWEyMTdlOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ntgVMBxOuqXW8J+eoRgz6a9srd
RnF8WB1w3hYIZ/Tr8qqDb9jnL1so8TZ6JrIY5Zod1//u/uRL6LJIZClYg7/hsNoJ
OdfFT8Q457d2+5qee+Qgn1EEgt6JXYP0oulo5E7BkjsQzV5TEMCCiP0gJmmusZ1D
yN0rn3GJEK9+krjtmedGEIQSwjYpci95lTtjYksYgGAbuAdzoDTyK4fp1jIIpCpE
C3Hg3EAjWxYpLYGdjNdQFMDMjQ1wEZyt+mUrSw6QGkMnmQrzwrzGhhAq53+xUOE5
wyQx3/0cKDkS9DQxv0SWqud9wVPjShUg6O0Nvrm3T4rrwonCBUx4TLqegQIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFMxI2SNp27PTWFPN4vZwAP6iF+i7MB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvekVqWkkybmJzOU5ZVTgzaTluQUFfcUlYNkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwgb8EAgABMIG4MAwD
BAFb5+oDBAFb5+wDBABb5+8wDAMEAlvubAMEAFvubgMEAlvwqAMEAZfsQDAMAwQA
l+xDAwQAl+xEAwQAl+xGMAwDBAOX7EgDBACX7E4DBAGX7FAwDAMEAJfsUwMEApfs
WDAMAwQBl+xeAwQAl+xgMAwDBACX7GMDBACX7GQDBACX7GYDBAGX7GowDAMEAJfs
bQMEBJfsYAMEAJfscQMEAZfsegMEAJfsfQMEALkfcAMEAbkfcjAuBAIAAjAoMBID
BwAqAq7AAAEDBwIqAq7AAAAwEgMHACoCrsAABQMHASoCrsAACDANBgkqhkiG9w0B
AQsFAAOCAQEATiKMh+rfuaVPOqice4ECu1i9Vx+8iP65d8oDX75wbBcyw9r3ISm7
tjmSDLO6m2wgyY0CQimRCUaspRFrU3ibk6AM9Vt57mXCJZ3LelRvHd/sfJxZW8q8
4Mu6Ba2du8/Skoj/lRcXYX6p8QKqf3V01XFw/uGChVWFwCRXLyQSH4EDjfdFh7b2
jOzZo0oKlh7LFeNGgQeYNoF9DatUXtyuHR6ZidVSaFj/S8Rsq39X8O8GEKF4DKN9
h0X2J9eDOTgc2XiSXBYbBwafhFvYN+rUUzoZL/STWroyWFpE+ZKf8F6Y/IN6MU+X
fiox8mot0fs/HqGn+by/awb4Z3Wir775Qg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:24 2025 by rpki-client