Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/94zx2Hk-WlNFvqXHoA07AsfQ3tc.roa
File: 94zx2Hk-WlNFvqXHoA07AsfQ3tc.roa (raw, json)
Hash identifier: Nk+m+YVGx7gj/COWKuN73LASLzDxNz2N629l6tregGQ=
Subject key identifier: F7:8C:F1:D8:79:3E:5A:53:45:BE:A5:C7:A0:0D:3B:02:C7:D0:DE:D7
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01978C7CE02052AD5B624BDBE97482FCDCBD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/94zx2Hk-WlNFvqXHoA07AsfQ3tc.roa
Signing time: Fri 20 Jun 2025 08:38:03 +0000
ROA not before: Fri 20 Jun 2025 08:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.211.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:7c:e0:20:52:ad:5b:62:4b:db:e9:74:82:fc:dc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 20 08:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78cf1d8793e5a5345bea5c7a00d3b02c7d0ded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:77:f1:a5:2e:01:d6:ba:fa:d9:02:f3:89:
b1:f5:3e:92:dd:a4:16:db:ca:1a:eb:f1:7a:4d:7d:
a4:e7:2a:f5:c0:bb:a1:01:6f:6e:2f:18:ab:84:c4:
64:cf:ee:60:aa:3b:9b:b5:7a:45:34:f8:de:44:90:
a2:7b:e9:de:08:d2:6a:93:f4:e8:0e:41:45:30:ff:
04:00:61:df:a1:de:9e:41:4d:fb:5e:20:39:7c:ed:
c2:7e:a9:81:86:c9:c9:4b:60:22:9c:ef:54:70:41:
e5:3a:e4:0a:5f:36:1d:78:e7:43:ec:0d:66:fb:13:
9f:03:20:6b:40:fb:ac:d8:10:49:4e:39:8a:dd:0e:
72:39:73:32:08:79:57:7c:b1:1a:bb:18:4f:79:6a:
2c:27:a6:76:3a:53:87:40:ab:25:63:ca:05:d3:f9:
71:a9:76:d7:e8:62:11:db:b1:55:36:62:4d:63:ec:
ed:d2:19:ef:28:c1:01:f3:1f:15:e0:1f:30:39:0f:
a6:d8:c1:85:8f:e4:51:0a:ae:9d:21:31:29:2d:fa:
74:95:e4:d5:cb:d8:45:ab:53:89:cc:4e:0c:40:bd:
69:72:1c:e5:1c:e9:cd:6a:ca:2e:cd:df:10:5c:70:
b9:ca:f0:df:88:b5:b6:a5:c1:f9:79:d3:05:ae:54:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:F1:D8:79:3E:5A:53:45:BE:A5:C7:A0:0D:3B:02:C7:D0:DE:D7
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/94zx2Hk-WlNFvqXHoA07AsfQ3tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.211.0/24
185.199.151.0/24
185.199.213.0/24
185.221.26.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:45:8b:9f:04:f8:35:72:46:4e:92:7f:c4:43:9f:c0:80:5b:
c9:f8:dd:b2:16:35:9c:c7:67:c7:91:e8:e1:10:ec:f2:38:1d:
89:be:07:da:85:7b:ea:ba:66:28:10:0d:58:cc:df:fb:c6:82:
c1:86:84:3d:dd:62:5b:f6:b6:ee:e7:50:c9:9d:06:82:2d:70:
c9:0f:8a:fa:62:7e:4d:42:58:06:63:0b:35:68:0b:bb:38:4f:
4b:20:2a:ee:28:4f:39:95:c3:d4:4f:cd:9d:fd:f7:20:db:9b:
08:3c:d6:00:cd:03:6b:fd:61:48:8e:b8:89:7b:b1:ad:9e:da:
2e:e2:38:64:86:00:97:b8:e8:46:be:09:aa:bb:d0:12:c9:30:
dd:f7:7e:13:e5:8f:be:dc:4b:07:cb:92:b9:ce:cd:c5:6a:86:
30:e9:7a:98:1f:56:be:be:d1:69:be:24:df:6c:15:b3:c4:e0:
e2:1a:e0:10:64:2f:a5:0a:54:c9:59:98:8b:50:66:7b:a7:6d:
06:a3:26:df:50:4f:c9:99:96:89:dd:17:24:41:ea:8e:d9:cc:
8e:62:46:da:c2:4b:3c:b7:35:4d:cd:94:df:e3:b5:6f:24:0f:
21:1e:aa:47:1a:60:1c:84:c4:db:aa:d0:34:55:f7:e3:09:7f:
e2:b3:bd:82
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZeMfOAgUq1bYkvb6XSC/Ny9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjUwNjIwMDgzODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhjZjFkODc5M2U1YTUzNDViZWE1YzdhMDBkM2IwMmM3ZDBkZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm538aUuAda6+tkC84mx9T6S3aQW
28oa6/F6TX2k5yr1wLuhAW9uLxirhMRkz+5gqjubtXpFNPjeRJCie+neCNJqk/To
DkFFMP8EAGHfod6eQU37XiA5fO3CfqmBhsnJS2AinO9UcEHlOuQKXzYdeOdD7A1m
+xOfAyBrQPus2BBJTjmK3Q5yOXMyCHlXfLEauxhPeWosJ6Z2OlOHQKslY8oF0/lx
qXbX6GIR27FVNmJNY+zt0hnvKMEB8x8V4B8wOQ+m2MGFj+RRCq6dITEpLfp0leTV
y9hFq1OJzE4MQL1pchzlHOnNasouzd8QXHC5yvDfiLW2pcH5edMFrlS1hwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFPeM8dh5PlpTRb6lx6ANOwLH0N7XMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvOTR6eDJIay1XbE5GdnFYSG9BMDdBc2ZRM3RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAAtm/0D
BAAtm/4DBAAtndMDBAC5x5cDBAC5x9UDBAC53RoDBAC5+howDQYJKoZIhvcNAQEL
BQADggEBAMdFi58E+DVyRk6Sf8RDn8CAW8n43bIWNZzHZ8eR6OEQ7PI4HYm+B9qF
e+q6ZigQDVjM3/vGgsGGhD3dYlv2tu7nUMmdBoItcMkPivpifk1CWAZjCzVoC7s4
T0sgKu4oTzmVw9RPzZ399yDbmwg81gDNA2v9YUiOuIl7sa2e2i7iOGSGAJe46Ea+
Caq70BLJMN33fhPlj77cSwfLkrnOzcVqhjDpepgfVr6+0Wm+JN9sFbPE4OIa4BBk
L6UKVMlZmItQZnunbQajJt9QT8mZlondFyRB6o7ZzI5iRtrCSzy3NU3NlN/jtW8k
DyEeqkcaYByExNuq0DRV9+MJf+KzvYI=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:18:57 2025 by rpki-client