Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa
File: Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa (raw, json)
Hash identifier: 71TNe7QPRLX6HAwyqO9qFdluNXuBU2iKPpD6+Xde1FA=
Subject key identifier: 0D:D9:7C:4F:AC:CA:C0:4E:05:9F:CC:72:35:9F:14:BD:8B:E8:B8:C1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0197B667754DFABB81A670AC29D915D664A8
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa
Signing time: Sat 28 Jun 2025 11:58:42 +0000
ROA not before: Sat 28 Jun 2025 11:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393336
IP address blocks: 37.49.144.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:67:75:4d:fa:bb:81:a6:70:ac:29:d9:15:d6:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jun 28 11:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dd97c4faccac04e059fcc72359f14bd8be8b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:5b:b7:95:24:7a:24:4e:13:e4:67:56:9e:
35:36:05:44:a8:aa:b1:33:db:ed:e7:70:3b:99:0e:
9f:be:f2:d3:4c:26:37:59:5f:5c:b6:b0:ca:3a:a9:
9e:e4:f3:fc:68:79:eb:8c:6d:8b:86:e9:d1:c9:85:
0b:68:42:22:f2:5f:5b:93:f6:c0:1f:86:da:00:91:
98:66:cb:74:4f:7a:73:65:a3:92:99:39:79:79:de:
d0:94:2f:dd:ea:68:53:9f:da:e9:53:7d:d2:1c:83:
c8:54:40:6e:15:fe:aa:7f:10:c4:fc:9e:fd:0a:43:
b0:d6:1b:5b:86:2a:b8:3c:2d:7d:cc:c2:7c:1d:28:
97:3b:5f:68:d8:57:b2:58:75:e2:f5:13:3c:50:c1:
eb:8b:8c:e0:69:f5:a5:8b:fb:1c:1c:9c:cc:c6:2b:
19:13:c4:4d:65:a9:b9:58:b9:13:55:0d:d5:89:59:
4b:07:c2:71:9a:39:9e:3e:b9:4f:7c:71:8e:ba:89:
cb:7a:52:54:49:c5:61:48:d8:fa:15:45:79:64:18:
77:b0:f0:b4:ed:a8:3d:9f:63:43:f0:8b:e9:1e:e4:
28:3b:bd:bc:02:3a:2c:6c:77:0e:ce:91:8f:70:62:
70:63:66:74:0a:85:6a:a0:b3:d9:2f:93:0e:4e:86:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:7C:4F:AC:CA:C0:4E:05:9F:CC:72:35:9F:14:BD:8B:E8:B8:C1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.147.0/24
94.74.171.0/24
109.203.161.0/24
109.203.163.0/24
109.203.166.0/24
176.46.129.0-176.46.130.255
176.46.133.0/24
176.46.135.0/24
176.46.137.0/24
176.46.148.0/23
176.46.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:32:c1:d4:1c:aa:bd:ac:7a:fe:05:4f:ce:9a:74:87:6a:17:
95:02:70:de:f4:d4:1c:b6:35:38:9d:59:bf:f3:01:5b:76:a4:
64:c4:29:29:e9:b3:ba:fd:7d:ea:ef:20:ef:d0:13:3d:40:ed:
8a:af:df:46:7f:1f:72:cf:bf:17:cc:76:ce:56:14:f6:95:dd:
03:6f:83:e4:29:da:c8:af:ad:e2:e1:7f:3f:dc:5c:a5:e9:73:
94:83:2d:8f:30:46:93:e1:12:1d:50:79:d3:50:28:c2:92:4e:
19:96:b0:0e:9a:de:18:85:e9:a9:53:7c:d7:f1:5d:b5:84:b1:
3d:fa:b3:71:ca:5c:6b:d2:3f:94:e6:16:12:77:41:8c:16:46:
7d:5e:da:15:6f:68:7e:32:12:a6:cb:a8:99:f5:a8:65:c6:2c:
09:31:09:10:e1:d7:c8:51:83:5d:ea:37:69:9e:07:c6:df:f6:
0a:92:da:1b:51:4e:8b:82:0c:65:b5:07:11:bc:d5:3f:15:8a:
3c:d1:67:28:b7:6f:61:0f:62:a5:46:f4:f8:b1:b1:02:de:e9:
da:97:ff:5c:53:ba:d2:0d:32:c9:d2:aa:a1:de:96:57:d6:bd:
94:96:72:72:eb:48:f0:c4:43:41:2f:2c:07:42:e4:a7:7f:8b:
c9:1e:44:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZe2Z3VN+ruBpnCsKdkV1mSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjUwNjI4MTE1ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGQ5N2M0ZmFjY2FjMDRlMDU5ZmNjNzIzNTlmMTRiZDhiZThiOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ9bt5UkeiROE+RnVp41NgVEqKqx
M9vt53A7mQ6fvvLTTCY3WV9ctrDKOqme5PP8aHnrjG2LhunRyYULaEIi8l9bk/bA
H4baAJGYZst0T3pzZaOSmTl5ed7QlC/d6mhTn9rpU33SHIPIVEBuFf6qfxDE/J79
CkOw1htbhiq4PC19zMJ8HSiXO19o2FeyWHXi9RM8UMHri4zgafWli/scHJzMxisZ
E8RNZam5WLkTVQ3ViVlLB8JxmjmePrlPfHGOuonLelJUScVhSNj6FUV5ZBh3sPC0
7ag9n2ND8IvpHuQoO728AjosbHcOzpGPcGJwY2Z0CoVqoLPZL5MOToYufQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFA3ZfE+sysBOBZ/McjWfFL2L6LjBMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvRGRsOFQ2ekt3RTRGbjh4eU5aOFV2WXZvdU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAJTGQAwQA
JTGTAwQAXkqrAwQAbcuhAwQAbcujAwQAbcumMAwDBACwLoEDBACwLoIDBACwLoUD
BACwLocDBACwLokDBAGwLpQDBACwLpwwDQYJKoZIhvcNAQELBQADggEBAB8ywdQc
qr2sev4FT86adIdqF5UCcN701By2NTidWb/zAVt2pGTEKSnps7r9fervIO/QEz1A
7Yqv30Z/H3LPvxfMds5WFPaV3QNvg+Qp2sivreLhfz/cXKXpc5SDLY8wRpPhEh1Q
edNQKMKSThmWsA6a3hiF6alTfNfxXbWEsT36s3HKXGvSP5TmFhJ3QYwWRn1e2hVv
aH4yEqbLqJn1qGXGLAkxCRDh18hRg13qN2meB8bf9gqS2htRTouCDGW1BxG81T8V
ijzRZyi3b2EPYqVG9PixsQLe6dqX/1xTutINMsnSqqHellfWvZSWcnLrSPDEQ0Ev
LAdC5Kd/i8keRIw=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:42 2025 by rpki-client