Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/jMGhTNUb7i42fBQA0pNbTbsvC0w.roa
File: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (raw, json)
Hash identifier: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=
Subject key identifier: 8C:C1:A1:4C:D5:1B:EE:2E:36:7C:14:00:D2:93:5B:4D:BB:2F:0B:4C
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01963DC25E07B8D034CB5176F373E4180801
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/jMGhTNUb7i42fBQA0pNbTbsvC0w.roa
Signing time: Wed 16 Apr 2025 08:41:10 +0000
ROA not before: Wed 16 Apr 2025 08:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198335
IP address blocks: 155.2.160.0/20 maxlen: 20
155.2.160.0/22 maxlen: 22
155.2.164.0/22 maxlen: 22
155.2.168.0/22 maxlen: 22
155.2.172.0/22 maxlen: 22
176.241.248.0/21 maxlen: 24
185.194.184.0/22 maxlen: 22
185.194.186.0/24 maxlen: 24
185.194.187.0/24 maxlen: 24
2a00:5a40::/29 maxlen: 29
2a00:5a40::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:c2:5e:07:b8:d0:34:cb:51:76:f3:73:e4:18:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Apr 16 08:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc1a14cd51bee2e367c1400d2935b4dbb2f0b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:15:db:d3:ca:55:b4:14:1d:e9:6b:cd:b5:
60:fa:bc:71:10:83:75:44:9c:c5:46:c9:6d:25:99:
9d:a9:b1:03:b9:e9:bd:9d:d0:d8:ba:55:ee:08:7e:
06:1e:66:e4:ae:48:21:92:d0:b6:5b:fd:34:2c:dd:
b1:05:b9:90:c1:93:71:c6:d7:fa:a8:79:f1:84:3a:
df:e6:bd:fc:54:da:8a:86:7b:ac:94:47:95:88:0d:
82:16:67:aa:46:d0:26:eb:ab:0a:9d:9e:76:1c:e1:
20:1b:e2:4a:13:c6:78:c2:8b:2d:d6:1a:89:8e:6e:
d3:cc:7e:2f:16:08:9c:19:8a:be:f8:2b:52:64:d9:
e4:c3:f6:55:b3:72:11:16:52:7b:71:c9:c9:73:b7:
25:7d:49:c6:54:08:58:d5:26:94:77:ce:4b:82:80:
24:0d:e3:29:86:43:44:f2:bb:d8:8d:67:2a:a3:05:
e9:fa:71:36:85:c9:ea:62:e2:86:76:6e:15:4c:29:
ac:0b:4a:7e:c0:48:d1:b7:45:f5:bf:e0:0e:2f:cc:
dc:12:ae:a1:d3:f3:b6:7d:d5:59:59:58:99:e7:5c:
0d:07:8e:88:02:f7:64:46:30:fb:76:12:b8:0a:a0:
ae:fb:9b:4d:df:c6:17:27:b6:38:12:90:13:4e:49:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:A1:4C:D5:1B:EE:2E:36:7C:14:00:D2:93:5B:4D:BB:2F:0B:4C
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/jMGhTNUb7i42fBQA0pNbTbsvC0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.160.0/20
176.241.248.0/21
185.194.184.0/22
IPv6:
2a00:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
93:cc:e5:d4:a3:67:52:b7:67:5e:9c:84:98:70:76:59:a8:09:
34:43:27:1f:6f:98:07:a6:c6:7c:5c:51:c2:f2:89:cc:dc:cf:
ed:fc:fc:39:24:03:9b:ed:d7:ce:12:7e:f1:e3:d3:f5:f2:d7:
aa:3b:74:15:7c:4c:f8:03:26:ba:c2:05:8d:d9:1a:61:d2:12:
8d:87:66:e0:ff:9e:6d:7e:ad:23:25:02:6f:92:9e:31:c9:1f:
a7:b3:e6:3c:e0:97:8a:ee:5b:81:5a:25:af:05:a4:7b:25:46:
22:b6:28:b0:e6:8b:5e:c3:64:35:7a:10:7c:6b:57:dd:ad:20:
84:bb:2c:f2:ba:0f:b2:12:ef:5c:7e:0b:0c:c9:74:86:9f:b9:
ca:51:d4:a8:42:47:16:04:26:8c:25:b4:91:61:5f:19:3b:7c:
14:8d:00:56:9a:ff:20:46:59:e0:77:b7:ad:af:65:b9:b5:f3:
c7:bf:22:a4:e9:d4:21:7b:a7:ff:a9:58:1d:7e:d0:67:5e:e9:
b4:44:22:ec:a1:e3:c0:c9:09:f2:7b:b4:30:1d:ad:81:da:b6:
d1:d0:58:ca:e3:35:ad:0e:b2:7d:1b:e6:d0:d1:06:ed:72:be:
75:67:c5:66:af:eb:08:27:e2:f8:67:a1:7b:96:c0:6c:6a:e2:
5a:29:b8:e8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZY9wl4HuNA0y1F283PkGAgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjUwNDE2MDg0MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2MxYTE0Y2Q1MWJlZTJlMzY3YzE0MDBkMjkzNWI0ZGJiMmYwYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j0V29PKVbQUHelrzbVg+rxxEIN1
RJzFRsltJZmdqbEDuem9ndDYulXuCH4GHmbkrkghktC2W/00LN2xBbmQwZNxxtf6
qHnxhDrf5r38VNqKhnuslEeViA2CFmeqRtAm66sKnZ52HOEgG+JKE8Z4wost1hqJ
jm7TzH4vFgicGYq++CtSZNnkw/ZVs3IRFlJ7ccnJc7clfUnGVAhY1SaUd85LgoAk
DeMphkNE8rvYjWcqowXp+nE2hcnqYuKGdm4VTCmsC0p+wEjRt0X1v+AOL8zcEq6h
0/O2fdVZWViZ51wNB46IAvdkRjD7dhK4CqCu+5tN38YXJ7Y4EpATTklRNwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFIzBoUzVG+4uNnwUANKTW027LwtMMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvak1HaFROVWI3aTQyZkJRQTBwTmJUYnN2QzB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEmwKgAwQD
sPH4AwQCucK4MA0EAgACMAcDBQMqAFpAMA0GCSqGSIb3DQEBCwUAA4IBAQCTzOXU
o2dSt2denISYcHZZqAk0Qycfb5gHpsZ8XFHC8onM3M/t/Pw5JAOb7dfOEn7x49P1
8teqO3QVfEz4Aya6wgWN2Rph0hKNh2bg/55tfq0jJQJvkp4xyR+ns+Y84JeK7luB
WiWvBaR7JUYitiiw5otew2Q1ehB8a1fdrSCEuyzyug+yEu9cfgsMyXSGn7nKUdSo
QkcWBCaMJbSRYV8ZO3wUjQBWmv8gRlngd7etr2W5tfPHvyKk6dQhe6f/qVgdftBn
Xum0RCLsoePAyQnye7QwHa2B2rbR0FjK4zWtDrJ9G+bQ0Qbtcr51Z8Vmr+sIJ+L4
Z6F7lsBsauJaKbjo
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:10 2025 by rpki-client