Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/4EKUe9SVPTU4mt6FrvFACbYWcbQ.roa
File: 4EKUe9SVPTU4mt6FrvFACbYWcbQ.roa (raw, json)
Hash identifier: YP9igzME/GGfZDeRMuL+AMEtoo6mjl93HYjdcrLZNQs=
Subject key identifier: E0:42:94:7B:D4:95:3D:35:38:9A:DE:85:AE:F1:40:09:B6:16:71:B4
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 01968060D0173B26BAAF8112DF279BB798FE
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/4EKUe9SVPTU4mt6FrvFACbYWcbQ.roa
Signing time: Tue 29 Apr 2025 07:09:10 +0000
ROA not before: Tue 29 Apr 2025 07:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43370
IP address blocks: 37.46.48.0/22 maxlen: 22
37.77.128.0/24 maxlen: 24
37.221.202.0/24 maxlen: 24
37.221.207.0/24 maxlen: 24
46.34.130.0/23 maxlen: 23
46.34.146.0/23 maxlen: 23
62.32.84.0/23 maxlen: 23
62.32.92.0/23 maxlen: 23
79.142.93.0/24 maxlen: 24
79.142.94.0/23 maxlen: 23
95.161.184.0/22 maxlen: 22
95.161.196.0/22 maxlen: 22
95.161.224.0/22 maxlen: 22
178.16.157.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:60:d0:17:3b:26:ba:af:81:12:df:27:9b:b7:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Apr 29 07:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e042947bd4953d35389ade85aef14009b61671b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:5a:b3:3e:63:33:3c:fd:8c:d6:44:30:df:
16:cf:3d:13:dc:23:f3:44:a0:46:c1:5d:44:94:52:
f4:01:be:05:a4:44:f8:53:e6:77:5d:a4:05:e4:7e:
42:2b:50:4c:8a:9b:0b:97:a0:5c:81:bc:b5:06:94:
7b:12:38:e9:bc:9c:3e:b3:0c:df:b6:37:90:b0:21:
e9:9c:4f:4a:e9:84:24:85:80:06:87:db:77:45:0c:
06:a0:f1:27:d7:a3:ce:82:23:97:7f:5e:5d:f9:ec:
d0:d8:4e:9c:d6:f5:3e:40:e0:7c:4f:aa:52:4d:3d:
92:73:4c:dc:91:c1:36:bf:51:90:de:89:4d:87:c1:
dc:10:a7:db:f9:92:ae:84:ae:5f:1d:ae:11:b6:9c:
97:6c:74:7d:73:c8:43:1e:9c:1e:f7:9d:a2:83:14:
4f:74:08:06:54:6e:44:96:ba:77:69:c1:8a:fc:d4:
5f:47:a5:47:4e:54:29:42:68:51:79:ad:b4:04:20:
e5:a4:5f:e6:96:2f:b9:25:ab:02:d4:22:45:14:22:
d6:c3:c8:b1:f8:06:17:85:c7:d3:9e:f6:53:ed:51:
6e:5c:a8:60:e4:f5:e2:88:b6:6e:d9:93:db:58:59:
27:42:88:59:f8:0c:03:76:5d:ff:d0:60:d8:cf:1e:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:42:94:7B:D4:95:3D:35:38:9A:DE:85:AE:F1:40:09:B6:16:71:B4
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/4EKUe9SVPTU4mt6FrvFACbYWcbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.48.0/22
37.77.128.0/24
37.221.202.0/24
37.221.207.0/24
46.34.130.0/23
46.34.146.0/23
62.32.84.0/23
62.32.92.0/23
79.142.93.0-79.142.95.255
95.161.184.0/22
95.161.196.0/22
95.161.224.0/22
178.16.157.0/24
185.244.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:a0:2e:f5:b6:30:ef:fd:ea:28:af:b6:f5:b2:96:0d:d7:91:
ea:10:aa:71:d7:c3:a9:65:19:37:e4:6d:76:15:7a:91:dc:58:
ef:21:2e:a4:f9:81:69:6d:43:f2:59:91:52:81:77:f7:e5:4d:
4e:03:1c:88:5c:a1:09:7a:40:4d:6e:41:14:b4:2b:70:85:2e:
9c:9d:5d:18:bd:20:24:ca:cc:bd:97:82:62:64:24:e3:df:54:
32:33:81:2d:b1:27:30:8d:96:d2:4f:45:93:cc:95:62:f0:2e:
ba:d4:f4:62:90:7b:64:5c:29:97:e0:9f:6f:22:b5:91:36:15:
f3:8c:7a:40:12:81:d3:43:64:dd:97:2d:5d:0d:c6:b0:ab:44:
5b:7f:c8:41:90:6f:f5:7a:45:cb:18:d7:20:0e:01:9a:23:8e:
fe:6c:49:02:d1:fb:8c:ed:57:be:5f:c4:2d:24:a3:9e:d3:05:
47:67:cb:35:a5:c3:15:31:1f:8b:9c:5c:7c:8f:35:39:9b:94:
90:8c:bc:ac:d3:92:06:ea:c3:cb:49:6d:3a:ea:34:64:6b:10:
47:03:a9:ce:ea:b8:c7:34:d5:74:21:ed:48:0e:7a:02:6f:3d:
69:32:c0:7f:57:9e:ff:0b:47:fd:4e:ee:f5:10:c1:65:ac:0b:
40:5c:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:13 2025 by rpki-client