Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/hRopNkKlsL4OwqAqAiJ3QXD2oug.roa
File: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (raw, json)
Hash identifier: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=
Subject key identifier: 85:1A:29:36:42:A5:B0:BE:0E:C2:A0:2A:02:22:77:41:70:F6:A2:E8
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01961B882EF19CA2DDA87B14D5E8BEF18216
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/hRopNkKlsL4OwqAqAiJ3QXD2oug.roa
Signing time: Wed 09 Apr 2025 17:10:31 +0000
ROA not before: Wed 09 Apr 2025 17:10:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49033
IP address blocks: 94.46.216.0/22 maxlen: 24
94.46.216.0/23 maxlen: 24
94.46.218.0/23 maxlen: 23
103.104.60.0/22 maxlen: 24
113.212.72.0/22 maxlen: 24
185.91.92.0/22 maxlen: 24
185.91.92.0/23 maxlen: 23
185.91.94.0/23 maxlen: 23
185.116.144.0/22 maxlen: 24
185.116.144.0/24 maxlen: 24
185.166.88.0/22 maxlen: 22
185.166.88.0/24 maxlen: 24
185.166.89.0/24 maxlen: 24
185.166.90.0/23 maxlen: 24
185.166.90.0/24 maxlen: 24
185.166.91.0/24 maxlen: 24
185.171.48.0/22 maxlen: 24
185.171.48.0/23 maxlen: 23
185.171.50.0/23 maxlen: 23
185.232.160.0/22 maxlen: 24
185.232.163.0/24 maxlen: 24
185.238.108.0/22 maxlen: 24
185.238.108.0/23 maxlen: 23
185.238.110.0/23 maxlen: 23
204.8.80.0/22 maxlen: 24
204.8.80.0/23 maxlen: 23
204.8.82.0/23 maxlen: 23
2a0f:dcc0::/29 maxlen: 48
2a0f:ddc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:88:2e:f1:9c:a2:dd:a8:7b:14:d5:e8:be:f1:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Apr 9 17:10:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851a293642a5b0be0ec2a02a0222774170f6a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:f6:db:37:7d:fe:59:3d:12:61:f9:66:0d:
dd:04:c8:3d:49:ef:b1:ad:b0:1d:66:42:e2:9f:bd:
79:6f:27:00:c0:aa:5a:cc:4b:76:6e:2d:04:1d:9f:
c5:2e:bc:ab:10:8e:59:0e:4b:f6:f2:34:dc:12:c4:
40:e8:73:48:8f:ed:3a:0b:f0:41:23:77:e1:1b:af:
fa:b1:54:40:81:ef:d6:94:86:f8:d8:ee:68:ef:c0:
47:12:77:c5:f1:31:7d:71:d3:b1:3f:52:60:02:c9:
f7:ef:a8:bf:ef:45:85:bc:aa:ee:d2:5c:19:fb:fe:
8d:3b:4b:d4:e3:f0:a7:3c:a2:eb:09:c4:82:b8:b4:
cf:a4:a9:5a:ba:41:0a:d7:ef:7c:85:dd:ab:be:ef:
5f:3a:b8:9e:9a:af:cb:9c:32:bc:de:1b:d7:36:85:
0c:40:64:86:3b:1f:ac:c1:0e:b8:01:21:78:9c:69:
b4:cc:54:85:bd:ac:e3:fe:a9:7a:83:a4:d4:32:9f:
cf:f9:c2:cb:98:17:f8:27:90:b0:92:53:9e:d0:2f:
6c:bf:4b:df:2e:16:08:22:09:68:41:57:ec:54:52:
6b:11:2e:5e:cb:27:0e:f1:7d:7c:14:12:1f:a7:39:
c1:52:de:30:60:44:c8:66:4c:73:71:68:63:5b:3b:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:29:36:42:A5:B0:BE:0E:C2:A0:2A:02:22:77:41:70:F6:A2:E8
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/hRopNkKlsL4OwqAqAiJ3QXD2oug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.216.0/22
103.104.60.0/22
113.212.72.0/22
185.91.92.0/22
185.116.144.0/22
185.166.88.0/22
185.171.48.0/22
185.232.160.0/22
185.238.108.0/22
204.8.80.0/22
IPv6:
2a0f:dcc0::/29
2a0f:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:c7:d6:3b:25:0f:8c:41:d8:fc:ca:56:cb:46:80:1b:55:e1:
1a:c8:d3:ed:ae:e8:f5:f8:6d:7a:24:e6:ae:db:42:07:03:1b:
16:04:fe:2f:ff:f3:9a:43:93:24:95:3e:e4:fc:d9:29:93:b4:
97:1e:dd:f8:01:5d:e1:93:65:96:ac:8c:c4:c2:e5:ba:f3:ef:
3a:98:08:5e:ac:63:87:f8:00:ed:79:74:72:9f:a5:73:25:4c:
44:f5:a8:cb:ec:8c:c3:27:f3:bb:ba:47:15:92:06:08:cc:aa:
6f:8d:69:03:68:d1:48:a8:b4:ed:73:33:8f:fd:73:02:dd:f9:
d0:5f:2d:f1:29:ae:2c:64:f7:81:d8:0a:a7:48:9c:53:ae:fb:
32:d7:6b:1a:2b:2a:19:f7:31:9e:60:19:2a:17:d9:8d:15:f5:
32:8e:f7:e1:bf:64:1d:9e:e5:5c:10:9f:e6:35:68:b5:fc:e9:
2c:cb:89:60:6f:de:d8:0c:d9:c3:65:3e:88:cb:4d:e9:fd:c2:
70:10:13:4c:d5:ce:47:ac:cf:69:a5:14:d0:79:02:d9:67:d6:
bb:28:d2:eb:d8:95:02:35:bb:e8:fc:85:ef:7a:21:dd:25:18:
50:2c:cb:81:97:1f:ee:26:6e:51:52:16:a6:5c:ca:8f:29:e7:
cc:bf:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:26 2025 by rpki-client