Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa
File: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (raw, json)
Hash identifier: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=
Subject key identifier: EC:2C:DB:36:BB:69:E5:1B:67:51:AD:10:BD:50:EB:0A:20:78:F8:64
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 01942444E15C6C28461C2DF96E21A8801767
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9050
IP address blocks: 84.243.64.0/18 maxlen: 18
86.34.0.0/15 maxlen: 15
86.34.0.0/16 maxlen: 16
86.35.0.0/16 maxlen: 16
86.35.0.0/21 maxlen: 21
86.35.9.0/24 maxlen: 24
86.35.10.0/24 maxlen: 24
86.35.12.0/24 maxlen: 24
86.35.13.0/24 maxlen: 24
86.35.14.0/24 maxlen: 24
86.35.15.0/24 maxlen: 24
86.35.16.0/20 maxlen: 20
86.35.32.0/19 maxlen: 19
86.35.64.0/18 maxlen: 18
86.35.128.0/17 maxlen: 17
89.120.0.0/16 maxlen: 16
89.121.0.0/16 maxlen: 16
89.121.0.0/18 maxlen: 18
89.121.64.0/18 maxlen: 18
89.121.128.0/17 maxlen: 17
89.122.0.0/16 maxlen: 16
89.123.0.0/16 maxlen: 16
89.123.0.0/17 maxlen: 17
89.123.128.0/17 maxlen: 17
92.80.0.0/16 maxlen: 16
92.81.0.0/16 maxlen: 16
92.81.128.0/17 maxlen: 17
92.82.0.0/16 maxlen: 16
92.82.0.0/18 maxlen: 18
92.83.0.0/16 maxlen: 16
92.83.0.0/19 maxlen: 19
92.84.0.0/16 maxlen: 16
92.85.0.0/16 maxlen: 16
92.86.0.0/16 maxlen: 16
92.86.36.0/24 maxlen: 24
92.86.38.0/24 maxlen: 24
92.86.48.0/24 maxlen: 24
92.86.50.0/24 maxlen: 24
92.86.90.0/24 maxlen: 24
92.87.0.0/16 maxlen: 16
92.87.11.0/24 maxlen: 24
92.87.54.0/24 maxlen: 24
92.87.118.0/24 maxlen: 24
92.87.128.0/23 maxlen: 23
92.87.133.0/24 maxlen: 24
92.87.170.0/24 maxlen: 24
92.87.173.0/24 maxlen: 24
92.87.174.0/24 maxlen: 24
92.87.175.0/24 maxlen: 24
92.87.214.0/24 maxlen: 24
92.87.232.0/24 maxlen: 24
92.87.244.0/24 maxlen: 24
92.87.245.0/24 maxlen: 24
109.96.0.0/16 maxlen: 16
109.97.0.0/16 maxlen: 16
109.98.0.0/16 maxlen: 16
109.98.113.0/24 maxlen: 24
109.98.115.0/24 maxlen: 24
109.98.117.0/24 maxlen: 24
109.98.119.0/24 maxlen: 24
109.98.121.0/24 maxlen: 24
109.98.123.0/24 maxlen: 24
109.98.126.0/24 maxlen: 24
109.98.192.0/23 maxlen: 23
109.98.192.0/24 maxlen: 24
109.98.193.0/24 maxlen: 24
109.99.0.0/16 maxlen: 16
109.99.158.0/24 maxlen: 24
109.99.184.0/24 maxlen: 24
109.99.185.0/24 maxlen: 24
109.99.189.0/24 maxlen: 24
109.99.192.0/24 maxlen: 24
109.99.214.0/24 maxlen: 24
109.99.216.0/24 maxlen: 24
109.100.0.0/16 maxlen: 16
109.101.0.0/16 maxlen: 16
109.102.0.0/16 maxlen: 16
109.102.161.0/24 maxlen: 24
109.102.163.0/24 maxlen: 24
109.103.0.0/16 maxlen: 16
185.133.64.0/22 maxlen: 22
185.133.64.0/24 maxlen: 24
217.115.208.0/20 maxlen: 20
2a02:d10::/32 maxlen: 32
2a02:d10:800:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e1:5c:6c:28:46:1c:2d:f9:6e:21:a8:80:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec2cdb36bb69e51b6751ad10bd50eb0a2078f864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:16:58:54:86:fc:47:d1:f4:f4:0e:81:e9:
cb:a2:a4:5c:13:5f:2b:a6:c6:98:30:96:66:0c:94:
74:a1:79:65:08:89:7a:1e:b2:4d:3f:0c:b9:3e:4b:
35:fe:61:cc:33:80:43:b9:d0:10:dd:fd:7d:31:8b:
6a:55:1a:a8:57:61:c0:f7:cf:af:89:07:7c:33:7f:
1b:be:58:bc:b0:77:94:67:52:94:b9:a5:6b:0a:7b:
27:e4:c6:a6:8f:d4:ab:72:c1:fa:56:c5:fc:94:3c:
9c:78:1b:1e:8a:84:1c:99:71:3c:af:45:23:da:1a:
5a:ab:dc:cf:bf:e5:86:a9:18:80:da:79:b0:92:57:
78:84:b1:8c:7f:e5:fd:8e:8e:1a:96:1e:03:33:a6:
c8:23:aa:5c:ae:c0:ca:13:f4:7f:49:0a:6b:db:6d:
83:bf:5f:d5:df:36:56:e8:03:5f:84:a3:08:da:95:
27:7e:35:9f:e3:a3:af:20:e6:d2:66:7e:da:af:6a:
8d:ad:15:e2:21:3a:8b:f8:14:d2:53:85:0c:8b:3d:
bc:54:da:4f:2b:9d:76:c9:ea:f2:b5:47:1b:95:15:
fa:9f:aa:97:36:3b:90:83:c9:6e:63:2b:d8:f5:b6:
3d:7d:b3:f3:03:9d:94:a3:29:89:75:28:45:63:8c:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:DB:36:BB:69:E5:1B:67:51:AD:10:BD:50:EB:0A:20:78:F8:64
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.243.64.0/18
86.34.0.0/15
89.120.0.0/14
92.80.0.0/13
109.96.0.0/13
185.133.64.0/22
217.115.208.0/20
IPv6:
2a02:d10::/32
Signature Algorithm: sha256WithRSAEncryption
a0:80:bf:ef:46:b7:fc:f8:6f:e9:10:d4:35:1a:6d:d7:35:f0:
91:e1:37:5f:ff:d2:75:0e:41:35:24:38:4d:80:59:9e:e8:ba:
c8:b3:1f:d9:88:12:e0:24:55:58:df:48:9d:f0:72:6b:34:2d:
b6:15:5d:de:af:81:62:db:13:0b:ab:e7:f4:3e:40:02:57:0f:
2e:f6:34:7a:15:48:00:b0:8b:0c:fd:b0:8e:69:c2:ff:b8:b0:
dc:cf:ae:31:06:10:60:d6:b1:e3:6a:c4:6c:90:b1:ed:5c:36:
83:82:2f:66:d0:66:4a:2d:cc:6a:f8:29:a6:ea:04:74:4d:06:
79:8c:5d:c1:03:0d:12:40:b8:ed:bb:d5:ff:c1:3b:2d:0f:99:
e6:d1:ad:10:7a:cb:cc:93:d3:54:b2:43:94:b8:2b:a9:44:fb:
b5:6a:e1:5d:c0:9a:2a:02:2e:2e:18:dd:39:82:60:36:13:95:
3f:fc:58:ce:3e:8a:60:20:1f:ed:b4:0b:02:d8:4a:71:b0:81:
89:44:bc:60:7a:a5:12:0e:5b:18:92:37:ac:4c:94:b2:49:63:
95:6b:0d:ed:91:e8:d7:a7:2a:ad:16:f5:87:7d:56:c2:27:87:
f8:1d:0d:f3:3c:6c:a7:2c:1e:71:2b:ea:ba:bd:32:c5:75:1a:
71:e7:2b:54
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZQkROFcbChGHC35biGogBdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2
MTFkODkwHhcNMjUwMTAxMjM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzJjZGIzNmJiNjllNTFiNjc1MWFkMTBiZDUwZWIwYTIwNzhmODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO4WWFSG/EfR9PQOgenLoqRcE18r
psaYMJZmDJR0oXllCIl6HrJNPwy5Pks1/mHMM4BDudAQ3f19MYtqVRqoV2HA98+v
iQd8M38bvli8sHeUZ1KUuaVrCnsn5Mamj9SrcsH6VsX8lDyceBseioQcmXE8r0Uj
2hpaq9zPv+WGqRiA2nmwkld4hLGMf+X9jo4alh4DM6bII6pcrsDKE/R/SQpr222D
v1/V3zZW6ANfhKMI2pUnfjWf46OvIObSZn7ar2qNrRXiITqL+BTSU4UMiz28VNpP
K512yerytUcblRX6n6qXNjuQg8luYyvY9bY9fbPzA52UoymJdShFY4yjlQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFOws2za7aeUbZ1GtEL1Q6wogePhkMB8GA1UdIwQY
MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt
OTQyNDgyZjhkMmVhLzEvN0N6Yk5ydHA1UnRuVWEwUXZWRHJDaUI0LUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh
LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQGVPNAAwMB
ViIDAwJZeAMDA1xQAwMDbWADBAK5hUADBATZc9AwDQQCAAIwBwMFACoCDRAwDQYJ
KoZIhvcNAQELBQADggEBAKCAv+9Gt/z4b+kQ1DUabdc18JHhN1//0nUOQTUkOE2A
WZ7ousizH9mIEuAkVVjfSJ3wcms0LbYVXd6vgWLbEwur5/Q+QAJXDy72NHoVSACw
iwz9sI5pwv+4sNzPrjEGEGDWseNqxGyQse1cNoOCL2bQZkotzGr4KabqBHRNBnmM
XcEDDRJAuO271f/BOy0PmebRrRB6y8yT01SyQ5S4K6lE+7Vq4V3AmioCLi4Y3TmC
YDYTlT/8WM4+imAgH+20CwLYSnGwgYlEvGB6pRIOWxiSN6xMlLJJY5VrDe2R6Nen
Kq0W9Yd9VsInh/gdDfM8bKcsHnEr6rq9MsV1GnHnK1Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:46 2025 by rpki-client