Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa
File: X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa (raw, json)
Hash identifier: arcjlfWRdddSSndOkjcyUSHuh1XDl/Fc5uW5b/PuIbI=
Subject key identifier: 5F:A0:77:C8:CE:89:3E:E4:68:36:21:DB:CF:56:5A:22:07:D8:9E:EC
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01961FBBEFBF9E41E93BDE995C7E3431F39B
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa
Signing time: Thu 10 Apr 2025 12:45:32 +0000
ROA not before: Thu 10 Apr 2025 12:45:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48452
IP address blocks: 94.26.0.0/22 maxlen: 22
94.26.0.0/24 maxlen: 24
94.26.1.0/24 maxlen: 24
94.26.3.0/24 maxlen: 24
94.26.32.0/21 maxlen: 21
94.26.32.0/24 maxlen: 24
94.26.33.0/24 maxlen: 24
94.26.34.0/24 maxlen: 24
94.26.35.0/24 maxlen: 24
94.26.36.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.39.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.43.0/24 maxlen: 24
94.26.48.0/20 maxlen: 20
94.26.48.0/24 maxlen: 24
94.26.49.0/24 maxlen: 24
94.26.50.0/24 maxlen: 24
94.26.51.0/24 maxlen: 24
94.26.52.0/24 maxlen: 24
94.26.53.0/24 maxlen: 24
94.26.54.0/24 maxlen: 24
94.26.55.0/24 maxlen: 24
94.26.56.0/24 maxlen: 24
94.26.57.0/24 maxlen: 24
94.26.58.0/24 maxlen: 24
94.26.59.0/24 maxlen: 24
94.26.60.0/24 maxlen: 24
94.26.61.0/24 maxlen: 24
94.26.62.0/24 maxlen: 24
94.26.63.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.71.0/24 maxlen: 24
94.26.80.0/22 maxlen: 22
94.26.81.0/24 maxlen: 24
94.26.82.0/24 maxlen: 24
94.26.83.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
94.26.91.0/24 maxlen: 24
94.26.92.0/24 maxlen: 24
94.26.104.0/22 maxlen: 24
94.26.104.0/24 maxlen: 24
94.26.105.0/24 maxlen: 24
94.26.106.0/24 maxlen: 24
94.26.107.0/24 maxlen: 24
2a00:6f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:bb:ef:bf:9e:41:e9:3b:de:99:5c:7e:34:31:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Apr 10 12:45:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fa077c8ce893ee4683621dbcf565a2207d89eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:b3:d0:0e:73:91:ec:0d:37:44:24:84:bd:
b6:5f:4e:6b:2d:f0:09:59:df:e6:ee:1e:cc:7f:eb:
db:d9:4a:35:eb:e4:36:27:d6:aa:76:4a:05:f2:ff:
26:96:59:01:f0:fc:77:94:3c:b6:b9:76:07:98:ca:
fe:25:ff:b5:5b:e7:61:d1:78:76:22:ca:1b:9f:e7:
0b:36:34:c8:5f:13:46:e4:33:92:02:f3:68:67:1b:
94:39:b7:d3:c0:db:58:58:c4:d5:b5:69:e8:aa:ee:
0f:a5:31:be:91:80:80:83:a4:39:e8:91:e7:25:17:
85:53:55:2c:f6:19:dc:ef:99:d9:bf:3a:f1:e6:3d:
82:b1:0d:16:92:14:8c:37:44:0f:3c:ad:5c:b8:f7:
bf:57:d8:28:eb:c4:ce:31:2d:1d:0e:31:71:8a:84:
4d:fb:9c:26:b2:7a:8b:90:be:2b:9c:f5:49:ad:b5:
e3:df:2c:e3:1e:69:22:53:74:20:3f:ed:f3:9d:05:
57:c2:52:f3:f2:16:7d:cf:03:52:a6:4a:2d:14:9e:
93:21:bf:89:e9:a8:13:8c:56:cf:e3:6f:f1:e9:1c:
d9:45:73:cc:4d:4e:71:c4:21:07:74:bd:65:cd:b0:
85:c2:ee:19:fa:32:e8:29:93:36:1d:a6:38:12:f0:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:77:C8:CE:89:3E:E4:68:36:21:DB:CF:56:5A:22:07:D8:9E:EC
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/X6B3yM6JPuRoNiHbz1ZaIgfYnuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/22
94.26.32.0/21
94.26.41.0-94.26.43.255
94.26.48.0/20
94.26.68.0/22
94.26.80.0/22
94.26.88.0/24
94.26.91.0-94.26.92.255
94.26.104.0/22
IPv6:
2a00:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
b4:f0:0d:3f:03:ab:0f:4e:36:25:5c:88:69:60:a6:ba:8e:09:
76:80:21:a6:6d:4c:22:c0:10:92:40:a0:dd:22:57:aa:6b:c7:
66:59:9c:f6:1c:95:b2:a0:1a:b7:a3:75:fd:a1:6c:59:3b:f3:
68:86:0a:c7:3e:1f:9e:af:33:8e:50:f6:01:d6:70:7e:43:75:
e6:90:0c:03:c8:bd:88:d3:3f:34:7c:96:de:9d:91:2b:e1:c3:
cf:97:db:07:62:4b:60:0e:74:3a:59:fb:b9:84:0c:15:3f:36:
6a:13:e5:61:42:3d:55:54:98:6e:e8:6a:b1:87:21:dd:61:82:
3e:7b:be:f2:64:61:01:be:56:1d:e7:2e:13:0c:eb:5a:f6:81:
a5:44:f5:86:17:e5:c7:a8:e0:6f:3a:74:f6:b5:ed:60:87:8b:
4c:50:c2:be:ef:09:e9:51:f9:ee:a0:47:73:0a:78:63:d0:db:
fc:ca:b6:6e:88:31:02:4a:e3:0c:80:68:60:97:f3:5a:a9:30:
aa:3c:91:f8:67:8d:f1:1f:11:a6:1a:11:dd:91:24:f1:ca:f8:
0d:9f:6f:16:59:4d:e7:5c:15:27:e2:fe:e4:2f:23:c8:22:89:
e1:8a:f9:c6:91:71:eb:77:00:13:37:8a:ab:b7:cb:0e:73:17:
2f:dd:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:20 2025 by rpki-client