Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/RGQ5srvtHbdURiQlYxW8ivrDFG8.roa
File: RGQ5srvtHbdURiQlYxW8ivrDFG8.roa (raw, json)
Hash identifier: buPWNRKOvNBqFPTOoMN0ZIjfHBE170p5yrGiEymKeHo=
Subject key identifier: 44:64:39:B2:BB:ED:1D:B7:54:46:24:25:63:15:BC:8A:FA:C3:14:6F
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0196925955C1F95C3D4203446CF138AE8663
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/RGQ5srvtHbdURiQlYxW8ivrDFG8.roa
Signing time: Fri 02 May 2025 18:54:10 +0000
ROA not before: Fri 02 May 2025 18:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64445
IP address blocks: 94.176.164.0/24 maxlen: 24
94.176.165.0/24 maxlen: 24
188.215.68.0/24 maxlen: 24
188.215.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:59:55:c1:f9:5c:3d:42:03:44:6c:f1:38:ae:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: May 2 18:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=446439b2bbed1db7544624256315bc8afac3146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:65:ce:8e:c3:25:5a:c0:6d:b7:eb:9b:b7:
34:cf:80:57:11:70:33:14:65:5b:1b:48:5b:7d:b1:
c7:7a:49:a4:8b:68:02:32:99:fc:11:72:d0:32:dc:
0f:db:b5:06:69:78:a2:8e:b5:39:0d:e5:d1:84:cf:
0a:6c:b6:7b:37:21:80:e1:9b:fd:92:91:be:96:3e:
dc:ff:06:6f:b6:f2:a1:89:79:66:2e:75:ea:df:b4:
74:54:78:cd:3a:a9:47:04:fc:1b:22:75:7b:8f:16:
8c:93:81:e3:78:00:45:e6:1d:b9:87:55:c7:04:a8:
84:bc:8c:1c:59:92:40:d9:b6:59:a3:81:3b:2b:ac:
40:71:83:22:20:70:17:c8:98:8f:67:ae:3b:57:e3:
15:67:2e:80:c4:52:2a:27:21:a2:17:6a:56:1f:23:
dc:a4:40:36:e3:4a:ea:d4:53:dc:2e:18:d1:f0:af:
79:76:ad:75:a8:88:61:59:32:00:0b:4d:87:2a:b8:
c5:50:63:50:62:ce:a3:2e:5d:9e:81:21:18:b6:b8:
03:f6:9f:f6:2d:b3:2f:62:f3:3e:29:ce:b1:62:9b:
f1:8f:e2:98:eb:b8:ab:76:09:85:4b:e2:58:d4:a1:
06:45:26:1f:ec:49:10:6a:2e:2b:b5:9c:88:4e:dc:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:39:B2:BB:ED:1D:B7:54:46:24:25:63:15:BC:8A:FA:C3:14:6F
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/RGQ5srvtHbdURiQlYxW8ivrDFG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/23
188.215.68.0/23
Signature Algorithm: sha256WithRSAEncryption
01:0d:02:95:76:d6:8a:5c:74:06:b1:70:18:f2:7c:73:2f:74:
4e:51:b0:2e:c8:37:51:48:b1:28:e0:a0:38:06:a7:b2:dd:b4:
6e:51:64:61:e7:cc:4b:a1:0d:34:f0:98:bc:33:fe:f2:5f:06:
08:9b:cd:37:ef:1e:7e:67:1d:46:f6:48:b6:1d:f7:d4:f6:26:
9c:5b:ac:5d:fd:f4:c4:38:c6:96:59:c6:ab:80:ec:d1:7a:64:
44:3b:c7:c1:47:21:e7:4f:2c:07:e6:31:11:7c:62:d2:84:f3:
58:7b:a2:a5:29:3d:d2:40:cf:19:9e:f8:bb:8e:2c:08:b0:33:
91:5b:94:eb:60:c0:94:b3:99:36:56:ff:01:3d:6b:e0:91:50:
0b:6b:95:ab:bd:3e:09:50:d5:09:7e:ae:c0:35:41:0b:43:ff:
56:35:9a:86:00:47:12:cb:e1:ca:13:8d:d9:9d:06:0c:61:45:
c3:a9:c6:1f:04:14:e4:33:b8:fb:28:9f:7f:06:1f:e3:bf:a9:
b3:75:0b:97:67:8c:25:c7:aa:b4:f5:14:c2:8a:43:8f:84:b6:
34:0c:d2:81:f0:99:8e:45:87:aa:b7:c8:51:59:a6:eb:68:77:
4e:03:7c:37:1b:30:09:c7:3c:68:9a:b3:f7:1a:bd:a4:26:eb:
1e:2a:06:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZaSWVXB+Vw9QgNEbPE4roZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjUwNTAyMTg1NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDY0MzliMmJiZWQxZGI3NTQ0NjI0MjU2MzE1YmM4YWZhYzMxNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJVlzo7DJVrAbbfrm7c0z4BXEXAz
FGVbG0hbfbHHekmki2gCMpn8EXLQMtwP27UGaXiijrU5DeXRhM8KbLZ7NyGA4Zv9
kpG+lj7c/wZvtvKhiXlmLnXq37R0VHjNOqlHBPwbInV7jxaMk4HjeABF5h25h1XH
BKiEvIwcWZJA2bZZo4E7K6xAcYMiIHAXyJiPZ647V+MVZy6AxFIqJyGiF2pWHyPc
pEA240rq1FPcLhjR8K95dq11qIhhWTIAC02HKrjFUGNQYs6jLl2egSEYtrgD9p/2
LbMvYvM+Kc6xYpvxj+KY67irdgmFS+JY1KEGRSYf7EkQai4rtZyITtxMhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFERkObK77R23VEYkJWMVvIr6wxRvMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvUkdRNXNydnRIYmRVUmlRbFl4VzhpdnJERkc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXrCkAwQB
vNdEMA0GCSqGSIb3DQEBCwUAA4IBAQABDQKVdtaKXHQGsXAY8nxzL3ROUbAuyDdR
SLEo4KA4Bqey3bRuUWRh58xLoQ008Ji8M/7yXwYIm8037x5+Zx1G9ki2HffU9iac
W6xd/fTEOMaWWcargOzRemREO8fBRyHnTywH5jERfGLShPNYe6KlKT3SQM8Znvi7
jiwIsDORW5TrYMCUs5k2Vv8BPWvgkVALa5WrvT4JUNUJfq7ANUELQ/9WNZqGAEcS
y+HKE43ZnQYMYUXDqcYfBBTkM7j7KJ9/Bh/jv6mzdQuXZ4wlx6q09RTCikOPhLY0
DNKB8JmORYeqt8hRWabraHdOA3w3GzAJxzxomrP3Gr2kJuseKgY4
-----END CERTIFICATE-----
Generated at Mon May 5 20:26:02 2025 by rpki-client