Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/emyVhdOtUpRyesCtl5eoHp0JGEE.roa
File: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (raw, json)
Hash identifier: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=
Subject key identifier: 7A:6C:95:85:D3:AD:52:94:72:7A:C0:AD:97:97:A8:1E:9D:09:18:41
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 0197B1C5D7DE77E7C53865EF2454E43A5D7C
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/emyVhdOtUpRyesCtl5eoHp0JGEE.roa
Signing time: Fri 27 Jun 2025 14:23:42 +0000
ROA not before: Fri 27 Jun 2025 14:23:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29405
IP address blocks: 2.57.64.0/22 maxlen: 24
46.229.224.0/20 maxlen: 24
46.229.230.0/24 maxlen: 24
81.89.48.0/20 maxlen: 24
86.110.224.0/19 maxlen: 24
86.110.229.0/24 maxlen: 24
86.110.238.0/24 maxlen: 24
92.240.228.0/24 maxlen: 24
92.240.229.0/24 maxlen: 24
92.240.230.0/24 maxlen: 24
92.240.231.0/24 maxlen: 24
92.240.234.0/24 maxlen: 24
92.240.235.0/24 maxlen: 24
92.240.236.0/24 maxlen: 24
92.240.237.0/24 maxlen: 24
92.240.241.0/24 maxlen: 24
92.240.242.0/24 maxlen: 24
92.240.244.0/24 maxlen: 24
92.240.245.0/24 maxlen: 24
92.240.249.0/24 maxlen: 24
92.240.253.0/24 maxlen: 24
92.240.254.0/24 maxlen: 24
93.184.64.0/20 maxlen: 24
109.74.144.0/20 maxlen: 24
176.109.56.0/21 maxlen: 24
185.176.72.0/22 maxlen: 22
217.73.16.0/20 maxlen: 24
217.73.16.0/24 maxlen: 24
217.73.17.0/24 maxlen: 24
2a00:10d8::/32 maxlen: 64
2a00:10d8:10::/48 maxlen: 64
2a01:390::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:c5:d7:de:77:e7:c5:38:65:ef:24:54:e4:3a:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jun 27 14:23:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6c9585d3ad5294727ac0ad9797a81e9d091841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:49:89:0c:6a:1c:10:fb:63:de:98:1c:58:
81:82:1e:4e:99:02:a6:52:20:d7:ea:a5:c3:54:fb:
0b:6e:56:16:d2:12:6f:46:c5:5a:6b:36:e3:f0:c9:
da:ea:b1:ec:36:10:48:4d:ca:43:7a:ae:e2:1a:0b:
54:15:23:e8:ca:9a:86:7c:af:75:43:98:15:b6:7b:
a9:41:9c:c6:66:fb:67:f2:c9:39:72:be:e9:cc:26:
be:24:2d:d9:1e:5f:5e:21:5c:ef:11:4f:27:d8:f8:
17:92:eb:9d:2d:0a:c6:d3:68:25:e4:07:42:78:57:
eb:c2:44:45:f8:7e:a4:5b:28:3c:99:e6:f7:42:54:
67:fb:1c:93:91:39:b5:db:f1:8a:7b:eb:29:5d:02:
fa:51:3f:3a:36:f7:d8:f5:26:08:12:fc:04:e1:3d:
39:1b:0f:ad:c5:c0:01:f2:0d:a3:eb:39:2e:20:dd:
7d:b3:43:f3:bf:00:59:5d:ca:45:5d:00:ae:56:5d:
62:7e:83:92:43:9d:31:be:f6:d1:a9:c7:65:31:ae:
2c:30:6b:73:e0:30:f3:83:80:e8:46:dc:05:03:24:
f1:35:b5:2d:e3:88:4a:8d:7f:49:a8:6c:a3:37:86:
0a:3f:19:be:c6:8f:3f:f2:77:06:3d:0e:54:b7:f3:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:95:85:D3:AD:52:94:72:7A:C0:AD:97:97:A8:1E:9D:09:18:41
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/emyVhdOtUpRyesCtl5eoHp0JGEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.64.0/22
46.229.224.0/20
81.89.48.0/20
86.110.224.0/19
92.240.228.0/22
92.240.234.0-92.240.237.255
92.240.241.0-92.240.242.255
92.240.244.0/23
92.240.249.0/24
92.240.253.0-92.240.254.255
93.184.64.0/20
109.74.144.0/20
176.109.56.0/21
185.176.72.0/22
217.73.16.0/20
IPv6:
2a00:10d8::/32
2a01:390::/32
Signature Algorithm: sha256WithRSAEncryption
7d:b4:4d:72:c7:23:01:a6:74:dc:b2:87:cc:4e:5a:f9:cc:3f:
cc:99:e5:e5:9d:24:60:73:37:1e:b7:71:c3:41:f0:d6:68:30:
ab:04:75:43:7f:6e:50:b5:f7:0b:27:7c:fe:4d:a4:d9:01:7f:
1b:8d:56:28:62:15:d4:ae:b9:f8:73:be:81:2f:71:63:a5:46:
2d:25:2d:b5:44:ac:eb:cc:94:f8:ca:30:04:48:d3:92:d1:11:
0d:bf:21:46:c6:f4:40:8c:86:d1:3e:b4:45:54:90:39:64:21:
43:39:8e:86:2b:95:24:46:10:be:c3:e6:9b:30:ae:44:6e:29:
cb:25:ed:51:57:3f:3a:26:ab:16:da:01:28:1f:db:dc:c8:d2:
cb:02:5a:3b:a9:f6:09:a2:d1:b4:68:3a:b1:cd:59:ed:d1:c7:
aa:40:d6:2e:0e:5c:76:eb:c9:5b:bc:9c:52:bc:e6:12:5f:45:
25:99:bb:a5:b1:71:43:4c:86:ee:12:6e:9a:b8:2d:30:14:a7:
5b:cf:24:30:ad:64:8c:e2:6e:f0:bc:8c:dc:b8:39:1d:d0:28:
42:90:cf:ed:11:2a:84:87:a0:da:fd:88:79:10:e3:d6:30:8d:
02:60:a9:a9:ca:34:2f:bb:60:93:92:1b:7b:13:ec:6f:e4:2d:
d4:44:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:07 2025 by rpki-client