Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/1fehMyD-Tg_UzI00BVzlF32RpNA.roa
File: 1fehMyD-Tg_UzI00BVzlF32RpNA.roa (raw, json)
Hash identifier: 8/RMw3DYQtsGD3XMKhdKXVx2ZomoQ7TIdYKoQzC4OZY=
Subject key identifier: D5:F7:A1:33:20:FE:4E:0F:D4:CC:8D:34:05:5C:E5:17:7D:91:A4:D0
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019781BA4583936131446C2B96933819DF4B
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/1fehMyD-Tg_UzI00BVzlF32RpNA.roa
Signing time: Wed 18 Jun 2025 06:29:17 +0000
ROA not before: Wed 18 Jun 2025 06:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44565
IP address blocks: 79.171.16.0/24 maxlen: 24
79.171.17.0/24 maxlen: 24
79.171.18.0/24 maxlen: 24
79.171.19.0/24 maxlen: 24
79.171.20.0/24 maxlen: 24
79.171.21.0/24 maxlen: 24
93.186.112.0/24 maxlen: 24
93.186.113.0/24 maxlen: 24
93.186.114.0/24 maxlen: 24
93.186.115.0/24 maxlen: 24
93.186.116.0/24 maxlen: 24
93.186.117.0/24 maxlen: 24
93.186.118.0/24 maxlen: 24
93.186.119.0/24 maxlen: 24
93.186.120.0/24 maxlen: 24
93.186.121.0/24 maxlen: 24
93.186.122.0/24 maxlen: 24
93.186.123.0/24 maxlen: 24
93.186.124.0/24 maxlen: 24
93.186.126.0/24 maxlen: 24
93.186.127.0/24 maxlen: 24
188.124.1.0/24 maxlen: 24
188.124.2.0/24 maxlen: 24
188.124.4.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.7.0/24 maxlen: 24
188.124.8.0/24 maxlen: 24
188.124.9.0/24 maxlen: 24
188.124.10.0/24 maxlen: 24
188.124.11.0/24 maxlen: 24
188.124.12.0/24 maxlen: 24
188.124.13.0/24 maxlen: 24
188.124.14.0/24 maxlen: 24
188.124.15.0/24 maxlen: 24
188.124.16.0/24 maxlen: 24
188.124.17.0/24 maxlen: 24
188.124.18.0/24 maxlen: 24
188.124.19.0/24 maxlen: 24
188.124.20.0/24 maxlen: 24
188.124.21.0/24 maxlen: 24
188.124.23.0/24 maxlen: 24
188.124.24.0/24 maxlen: 24
188.124.25.0/24 maxlen: 24
188.124.26.0/24 maxlen: 24
188.124.27.0/24 maxlen: 24
188.124.28.0/24 maxlen: 24
188.124.29.0/24 maxlen: 24
188.124.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:ba:45:83:93:61:31:44:6c:2b:96:93:38:19:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jun 18 06:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5f7a13320fe4e0fd4cc8d34055ce5177d91a4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:c6:86:5c:ae:f3:42:19:16:b7:e0:33:b2:
f9:f3:b4:8b:16:16:98:c7:f5:e6:f1:25:e9:5d:1f:
35:58:f8:50:a5:98:26:4b:bb:c1:ab:f0:2f:25:64:
23:a5:3c:99:6f:8c:3d:cb:8f:31:a2:73:d0:44:69:
ed:4d:26:c3:95:b9:0e:46:16:2c:96:95:97:8b:f5:
05:3e:bb:cf:d0:c1:a1:02:39:db:5c:0d:56:69:7a:
e6:14:91:04:67:1a:60:4e:fa:ec:f4:6b:d0:c8:3b:
b7:f9:9e:ba:d0:d5:74:a6:58:52:72:cf:06:f6:f4:
80:7a:01:49:e5:6b:e9:13:9d:7b:8b:80:09:88:13:
5f:1e:31:ed:e8:83:e0:fd:3b:b9:38:c9:01:a5:2d:
05:80:26:c8:64:8b:c5:0d:81:fc:d5:db:eb:12:e1:
61:de:51:c2:ed:91:03:96:9a:82:3d:13:d8:99:7e:
01:0f:6f:9f:7e:6d:8b:8f:44:6c:a5:f5:aa:7c:42:
b6:a1:b4:99:d6:ee:e8:0f:e3:e3:7a:3b:5c:46:41:
db:c8:1c:cc:62:cf:b5:89:fa:7d:bc:c8:af:1b:b6:
3a:55:af:50:06:28:b5:70:00:b0:12:a7:9b:50:b0:
b2:23:07:93:c8:33:87:88:e6:e3:23:b5:e1:9a:f9:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:A1:33:20:FE:4E:0F:D4:CC:8D:34:05:5C:E5:17:7D:91:A4:D0
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/1fehMyD-Tg_UzI00BVzlF32RpNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.16.0-79.171.21.255
93.186.112.0-93.186.124.255
93.186.126.0/23
188.124.1.0-188.124.2.255
188.124.4.0/24
188.124.6.0-188.124.21.255
188.124.23.0-188.124.30.255
Signature Algorithm: sha256WithRSAEncryption
ae:20:e9:cf:a6:bd:05:84:23:90:2c:ac:1e:17:67:e9:13:e2:
9d:9c:e4:19:d7:7f:c3:34:fa:d5:65:3f:dd:92:3d:a0:67:59:
61:37:2b:d7:f8:d8:d6:80:c5:5e:c0:b0:eb:1c:24:1a:a2:56:
2f:46:d6:f7:be:cb:ce:b8:d8:8a:00:00:f8:f3:95:be:60:ab:
bc:35:f0:09:67:08:51:41:1f:bd:a1:4e:4d:d2:4e:48:d7:f2:
26:6a:de:65:fd:46:e1:e1:88:3c:17:7c:e1:ae:0d:52:64:a4:
9d:fd:58:b9:97:93:67:67:91:64:77:44:6a:1b:5d:51:c9:76:
6a:b3:45:84:63:64:bb:35:03:50:22:ba:ea:25:23:c5:3f:07:
a9:1e:1f:c4:55:4e:b9:ca:01:17:3b:fb:6a:3f:ed:ff:dd:02:
08:ec:ad:a0:8e:43:90:8a:72:dc:42:5a:52:64:f0:51:8b:90:
75:48:eb:a3:61:c3:91:f0:8c:ad:2d:f3:a9:85:ec:33:af:e6:
14:cf:e0:d2:b1:96:2c:86:45:e7:9b:6d:20:d9:2a:b8:de:73:
10:12:db:0c:b4:4a:83:8f:b1:1b:77:e6:54:93:22:ae:cb:2d:
b1:02:c4:9b:7c:dd:ef:1c:ef:4c:34:ba:63:86:10:be:ba:22:
67:d1:4f:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZeBukWDk2ExRGwrlpM4Gd9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjUwNjE4MDYyOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWY3YTEzMzIwZmU0ZTBmZDRjYzhkMzQwNTVjZTUxNzdkOTFhNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DPGhlyu80IZFrfgM7L587SLFhaY
x/Xm8SXpXR81WPhQpZgmS7vBq/AvJWQjpTyZb4w9y48xonPQRGntTSbDlbkORhYs
lpWXi/UFPrvP0MGhAjnbXA1WaXrmFJEEZxpgTvrs9GvQyDu3+Z660NV0plhScs8G
9vSAegFJ5WvpE517i4AJiBNfHjHt6IPg/Tu5OMkBpS0FgCbIZIvFDYH81dvrEuFh
3lHC7ZEDlpqCPRPYmX4BD2+ffm2Lj0RspfWqfEK2obSZ1u7oD+PjejtcRkHbyBzM
Ys+1ifp9vMivG7Y6Va9QBii1cACwEqebULCyIweTyDOHiObjI7Xhmvk7qQIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFNX3oTMg/k4P1MyNNAVc5Rd9kaTQMB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEvMWZlaE15RC1UZ19VekkwMEJWemxGMzJScE5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBARPqxAD
BAFPqxQwDAMEBF26cAMEAF26fAMEAV26fjAMAwQAvHwBAwQAvHwCAwQAvHwEMAwD
BAG8fAYDBAG8fBQwDAMEALx8FwMEALx8HjANBgkqhkiG9w0BAQsFAAOCAQEAriDp
z6a9BYQjkCysHhdn6RPinZzkGdd/wzT61WU/3ZI9oGdZYTcr1/jY1oDFXsCw6xwk
GqJWL0bW977LzrjYigAA+POVvmCrvDXwCWcIUUEfvaFOTdJOSNfyJmreZf1G4eGI
PBd84a4NUmSknf1YuZeTZ2eRZHdEahtdUcl2arNFhGNkuzUDUCK66iUjxT8HqR4f
xFVOucoBFzv7aj/t/90CCOytoI5DkIpy3EJaUmTwUYuQdUjro2HDkfCMrS3zqYXs
M6/mFM/g0rGWLIZF55ttINkquN5zEBLbDLRKg4+xG3fmVJMirsstsQLEm3zd7xzv
TDS6Y4YQvroiZ9FPKA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:11:41 2025 by rpki-client