Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/b2NrS79baNCWt7CG0X8Vv_sUMl8.roa
File: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (raw, json)
Hash identifier: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=
Subject key identifier: 6F:63:6B:4B:BF:5B:68:D0:96:B7:B0:86:D1:7F:15:BF:FB:14:32:5F
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 0197AE18AED2E0C104DE5EA76FCD18C7A67D
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/b2NrS79baNCWt7CG0X8Vv_sUMl8.roa
Signing time: Thu 26 Jun 2025 21:15:42 +0000
ROA not before: Thu 26 Jun 2025 21:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29067
IP address blocks: 109.70.104.0/22 maxlen: 24
109.70.105.0/24 maxlen: 24
109.70.108.0/24 maxlen: 24
109.70.109.0/24 maxlen: 24
109.70.111.0/24 maxlen: 24
185.159.140.0/24 maxlen: 24
185.159.141.0/24 maxlen: 24
193.29.220.0/24 maxlen: 24
195.47.253.0/24 maxlen: 24
2001:67c:258::/48 maxlen: 48
2001:4130::/32 maxlen: 48
2001:4130:20::/48 maxlen: 48
2001:4130:b0::/48 maxlen: 48
2001:4130:cd::/48 maxlen: 48
2001:4130:ce::/48 maxlen: 48
2001:4130:141::/48 maxlen: 48
2001:4130:50f1::/48 maxlen: 48
2001:4130:50f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ae:18:ae:d2:e0:c1:04:de:5e:a7:6f:cd:18:c7:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jun 26 21:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f636b4bbf5b68d096b7b086d17f15bffb14325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:29:68:88:c2:bf:2a:79:58:ba:eb:05:a3:
4a:26:a8:ad:0b:f2:43:8c:9d:ab:b0:cc:11:d0:ed:
86:4e:2a:fb:f2:1f:25:19:c7:8a:46:64:c1:13:93:
b1:88:62:b8:b4:42:9a:b3:22:18:f9:c0:0a:27:1c:
31:3a:d2:d8:bd:bc:e0:7a:0b:08:f2:f0:0c:91:74:
53:21:e5:8c:b2:1a:9b:35:81:62:3a:8f:63:8c:81:
19:1b:69:0f:1a:9a:90:06:ed:22:f4:95:67:90:26:
a2:bd:16:52:bd:71:50:21:23:c1:69:2c:70:36:6a:
36:8d:69:2c:69:db:09:a2:e8:20:8d:04:7b:48:e5:
12:b2:a6:11:43:df:5d:8a:eb:bb:7e:28:9e:e4:48:
17:80:28:d1:ab:55:6c:ac:c5:37:26:84:68:cf:de:
0a:de:e6:18:50:67:e0:65:4a:e9:e5:25:62:6b:84:
20:a2:46:98:0e:98:ab:7f:da:4a:1a:08:c2:fb:55:
42:b6:d4:91:c5:e7:9f:a0:44:9b:ea:33:2f:08:4c:
1c:20:19:b0:72:2d:e4:b1:16:1d:6e:97:49:8c:8c:
8c:07:43:91:52:af:95:f3:bf:cb:0e:22:bd:02:2b:
0a:d5:9b:6c:3d:4a:6a:69:10:05:c7:0a:00:43:f9:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:6B:4B:BF:5B:68:D0:96:B7:B0:86:D1:7F:15:BF:FB:14:32:5F
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/b2NrS79baNCWt7CG0X8Vv_sUMl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.104.0-109.70.109.255
109.70.111.0/24
185.159.140.0/23
193.29.220.0/24
195.47.253.0/24
IPv6:
2001:67c:258::/48
2001:4130::/32
Signature Algorithm: sha256WithRSAEncryption
1c:2e:f6:33:a5:2c:a8:f4:fd:12:42:69:94:f8:1a:a0:90:2e:
40:7b:1d:b9:b4:62:49:f1:7e:fe:b9:93:f5:dc:4e:47:b9:f4:
be:2d:50:80:f8:6b:94:8f:9d:b7:48:ce:e3:5d:6c:32:70:1f:
4e:76:08:67:fa:68:ef:ae:b8:01:06:a1:4e:a3:12:18:d4:81:
18:9c:54:1b:21:2b:85:80:38:e0:db:69:7f:e4:e3:ac:83:ae:
40:cc:7b:38:9c:9d:ef:a2:8b:fd:56:03:ff:33:ce:5d:04:5d:
4a:f9:24:37:11:3e:c5:24:fa:67:db:56:7e:52:38:95:71:42:
81:41:ac:c6:b2:99:84:79:f5:0a:de:ea:64:65:a3:4b:55:93:
d9:ce:c0:07:fb:5e:f2:a6:7c:76:e6:1d:74:54:9a:d7:9d:3e:
e8:ca:c9:ae:13:18:1e:0b:c3:9d:aa:19:51:9c:12:6d:89:5d:
b6:b2:de:3f:87:3a:7f:2a:9e:ad:da:aa:21:ed:46:48:bf:9b:
b2:9c:1a:3c:2c:d4:1c:4d:f6:b1:53:c7:2b:30:db:45:f5:cd:
94:02:ba:b3:96:4d:a4:a8:f3:ec:ef:87:b8:1e:27:c7:dc:b4:
3e:10:56:7f:39:bc:ae:9a:7e:08:d6:7f:f5:72:9f:89:ef:ec:
47:77:a7:ca
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZeuGK7S4MEE3l6nb80Yx6Z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4
MGM0ZjIwHhcNMjUwNjI2MjExNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjYzNmI0YmJmNWI2OGQwOTZiN2IwODZkMTdmMTViZmZiMTQzMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K4paIjCvyp5WLrrBaNKJqitC/JD
jJ2rsMwR0O2GTir78h8lGceKRmTBE5OxiGK4tEKasyIY+cAKJxwxOtLYvbzgegsI
8vAMkXRTIeWMshqbNYFiOo9jjIEZG2kPGpqQBu0i9JVnkCaivRZSvXFQISPBaSxw
Nmo2jWksadsJouggjQR7SOUSsqYRQ99diuu7fiie5EgXgCjRq1VsrMU3JoRoz94K
3uYYUGfgZUrp5SVia4QgokaYDpirf9pKGgjC+1VCttSRxeefoESb6jMvCEwcIBmw
ci3ksRYdbpdJjIyMB0ORUq+V87/LDiK9AisK1ZtsPUpqaRAFxwoAQ/nqaQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFG9ja0u/W2jQlrewhtF/Fb/7FDJfMB8GA1UdIwQY
MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt
OGI1ZWY0MWQ4YzI1LzEvYjJOclM3OWJhTkNXdDdDRzBYOFZ2X3NVTWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1
LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAsBAIAATAmMAwDBANtRmgD
BAFtRmwDBABtRm8DBAG5n4wDBADBHdwDBADDL/0wFgQCAAIwEAMHACABBnwCWAMF
ACABQTAwDQYJKoZIhvcNAQELBQADggEBABwu9jOlLKj0/RJCaZT4GqCQLkB7Hbm0
Yknxfv65k/XcTke59L4tUID4a5SPnbdIzuNdbDJwH052CGf6aO+uuAEGoU6jEhjU
gRicVBshK4WAOODbaX/k46yDrkDMezicne+ii/1WA/8zzl0EXUr5JDcRPsUk+mfb
Vn5SOJVxQoFBrMaymYR59Qre6mRlo0tVk9nOwAf7XvKmfHbmHXRUmtedPujKya4T
GB4Lw52qGVGcEm2JXbay3j+HOn8qnq3aqiHtRki/m7KcGjws1BxN9rFTxysw20X1
zZQCurOWTaSo8+zvh7geJ8fctD4QVn85vK6afgjWf/Vyn4nv7Ed3p8o=
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:10:21 2025 by rpki-client