Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/PTDbUIn0Q0I_C1Yhkz7niBznTUM.roa
File: PTDbUIn0Q0I_C1Yhkz7niBznTUM.roa (raw, json)
Hash identifier: J/Q3tBA3oVWuhGFSQ0i5K54Rr9Z/lu/1FwwreS+xCLI=
Subject key identifier: 3D:30:DB:50:89:F4:43:42:3F:0B:56:21:93:3E:E7:88:1C:E7:4D:43
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 0195828AA7DB255B942638C82CC413B4756F
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/PTDbUIn0Q0I_C1Yhkz7niBznTUM.roa
Signing time: Tue 11 Mar 2025 00:11:19 +0000
ROA not before: Tue 11 Mar 2025 00:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8895
IP address blocks: 45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.19.20/30 maxlen: 30
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.26.0/23 maxlen: 24
212.26.28.0/23 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 25
212.26.39.0/24 maxlen: 25
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.210.0/24 maxlen: 24
212.138.210.0/28 maxlen: 28
212.138.250.0/24 maxlen: 24
2001:1490::/32 maxlen: 32
2001:1490::/48 maxlen: 48
2001:1490:0:800::/64 maxlen: 64
2001:1490:0:a00::/64 maxlen: 64
2001:1490:0:c00::/64 maxlen: 64
2001:1490:0:1000::/64 maxlen: 64
2001:1490:1::/48 maxlen: 48
2001:1490:1:800::/64 maxlen: 64
2001:1490:1:a00::/64 maxlen: 64
2001:1490:1:c00::/64 maxlen: 64
2001:1490:1:e00::/64 maxlen: 64
2001:1490:1:1000::/64 maxlen: 64
2001:1490:1:1200::/64 maxlen: 64
2001:1490:1:1600::/64 maxlen: 64
2001:1490:1:1a00::/64 maxlen: 64
2001:1490:1:2000::/64 maxlen: 64
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:112::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 50
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:8a:a7:db:25:5b:94:26:38:c8:2c:c4:13:b4:75:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Mar 11 00:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d30db5089f443423f0b5621933ee7881ce74d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:e5:63:9e:f5:85:86:c0:03:f2:26:67:b0:
0d:92:ee:a9:5f:02:1f:50:57:97:5e:34:01:45:1c:
12:bc:fd:10:84:a3:66:74:77:ec:56:3d:a3:c4:f5:
64:c3:52:e1:ef:11:2b:ad:62:50:c8:c8:c0:91:f4:
ba:cf:f6:b4:eb:2f:46:a5:c0:38:3b:aa:32:f7:b7:
da:61:6f:d5:06:06:4a:88:c7:bd:a7:dc:5c:78:bd:
a0:68:11:fe:84:b0:aa:ef:0e:b2:3e:04:31:4e:b1:
a0:fa:b6:b5:6d:07:1e:69:38:54:24:74:09:47:1f:
aa:06:02:6f:25:7b:1d:82:43:c8:e3:5a:71:1a:62:
f6:27:c4:45:74:ea:09:cd:7e:b4:19:36:39:7d:bb:
16:3b:c4:9e:ca:d2:e6:ef:8b:e8:e9:62:b8:4f:a9:
a9:de:35:00:2f:4c:2f:97:53:5a:10:a0:1d:7a:41:
2e:b8:9a:a7:29:3d:bc:28:bb:24:46:0e:19:d6:92:
08:4e:e4:3c:71:0f:af:e4:42:0e:6d:d7:64:1c:91:
8e:63:0d:56:79:d2:0e:f6:61:ef:27:d7:4a:60:20:
af:8d:8d:9e:10:90:6e:b8:d1:9e:95:db:da:e6:43:
39:20:d9:66:dc:64:27:16:ac:f2:7f:43:99:b0:05:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:DB:50:89:F4:43:42:3F:0B:56:21:93:3E:E7:88:1C:E7:4D:43
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/PTDbUIn0Q0I_C1Yhkz7niBznTUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.15.0/24
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/32
Signature Algorithm: sha256WithRSAEncryption
20:85:26:1b:a2:01:90:c3:db:0b:80:fe:fd:ec:c1:d0:90:ef:
b6:7d:0e:b4:f0:f8:72:4f:f5:be:51:60:1d:e3:a2:7f:3b:04:
8c:42:76:5a:ec:33:e6:4b:43:e5:6d:54:b4:12:1b:70:76:94:
3c:80:87:74:54:7b:2d:22:40:29:ba:a9:99:97:49:b9:14:91:
d8:b0:ba:08:8b:57:da:5f:2d:8a:ad:37:40:ae:4d:ae:a2:82:
0f:4a:85:c8:0c:51:f7:d3:68:0c:69:0b:18:34:73:e8:8a:9d:
88:14:6b:b9:40:ab:fe:39:b6:a8:5b:66:59:f4:db:dc:44:ff:
53:42:09:08:2a:6b:5c:7c:a1:ba:d7:66:86:4a:8d:b6:3e:d2:
55:17:30:11:56:50:a3:92:31:b0:61:10:e1:b2:1c:f4:76:a1:
73:ff:b5:e7:f7:e0:a6:bc:68:2d:96:35:d1:d8:7b:b0:aa:09:
38:40:d4:78:3e:dc:e9:19:23:7a:33:ce:e9:bb:1e:75:fc:47:
82:21:5e:48:b1:d6:e7:1e:70:c3:4d:12:07:24:53:a2:a6:f2:
c3:e2:98:22:22:60:29:9c:3e:41:30:60:44:95:cb:f9:65:51:
3b:a4:73:45:a0:55:35:fa:c2:f2:e9:69:db:64:03:b0:47:65:
31:e1:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:22:13 2025 by rpki-client