Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/akZ5_Hm5s2Uy-3uvy6XyD4yDzNA.roa
File: akZ5_Hm5s2Uy-3uvy6XyD4yDzNA.roa (raw, json)
Hash identifier: VCBvxC3P90cCvgWIdrCm+J+Ne16jRhJnR8puk2tVAY8=
Subject key identifier: 6A:46:79:FC:79:B9:B3:65:32:FB:7B:AF:CB:A5:F2:0F:8C:83:CC:D0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01967BE02A23264AC2611450478EDE5B7620
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/akZ5_Hm5s2Uy-3uvy6XyD4yDzNA.roa
Signing time: Mon 28 Apr 2025 10:10:10 +0000
ROA not before: Mon 28 Apr 2025 10:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:e0:2a:23:26:4a:c2:61:14:50:47:8e:de:5b:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 28 10:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4679fc79b9b36532fb7bafcba5f20f8c83ccd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:86:60:00:f1:82:84:f0:10:85:f4:1b:d1:
02:09:9a:77:10:ab:c2:7d:00:52:e1:2b:5e:f1:5e:
5a:d9:24:c9:9d:3f:68:90:d2:59:e6:8d:b3:0d:bd:
05:37:30:43:0e:c9:ca:b6:8d:44:9e:74:fc:11:c0:
4f:0b:5c:43:9c:3e:8f:a5:82:6e:dd:2e:5f:83:42:
d2:38:3f:6b:6c:56:4f:bc:3f:19:9f:3b:f8:1f:fc:
27:3a:8d:2c:24:41:76:21:18:4e:4a:91:2e:32:1c:
67:c7:3a:d6:e0:35:a8:00:fc:f0:dc:32:85:ea:f4:
50:3f:05:2b:86:30:da:ff:c1:96:a9:9a:72:77:3f:
35:91:09:c3:99:91:73:b7:c7:5f:e5:22:ac:a4:f0:
aa:02:11:f2:39:90:58:44:6d:8f:4a:a4:90:0b:31:
86:67:0c:c3:ac:c3:bd:ef:9e:bc:cf:a2:aa:47:5f:
61:d3:38:1f:c2:9d:fd:a3:5e:fe:9b:a8:df:93:1c:
bd:d7:3e:58:ca:0e:c8:bd:4f:4e:b5:53:f0:41:3b:
5d:d2:18:aa:e8:61:b0:73:b7:39:a2:b3:b7:cf:b8:
c4:1f:39:10:b0:ae:cb:5d:e2:53:9b:e0:af:b9:ba:
f4:21:59:e8:f0:56:54:bd:16:ef:22:3b:98:c2:88:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:79:FC:79:B9:B3:65:32:FB:7B:AF:CB:A5:F2:0F:8C:83:CC:D0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/akZ5_Hm5s2Uy-3uvy6XyD4yDzNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.92.0/23
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.153.0/24
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
56:71:bf:64:9e:46:c2:dc:fc:7a:5c:6b:6a:7e:1a:e8:67:b0:
af:89:af:28:2d:55:70:0e:5b:c9:42:c8:1f:a9:46:0c:b1:9a:
18:44:57:19:86:6c:9f:f4:6f:d2:3c:8c:d4:6c:07:36:40:66:
24:02:2a:d4:84:dc:2c:d5:2a:e1:7b:a7:e8:73:c9:90:52:6d:
d4:0d:f5:01:fa:cd:b2:65:bd:b6:1b:37:ba:c9:2c:31:92:da:
d9:b7:a0:46:12:51:67:cf:49:d4:dd:a5:4b:c5:c8:a4:76:ce:
72:0a:f5:4c:5f:d2:36:8c:86:c4:c2:1a:16:01:27:03:52:9e:
49:3a:25:7a:37:3e:d8:41:1e:b2:bf:8f:76:7b:bc:38:0a:56:
b9:9f:36:c6:94:99:71:8f:63:15:c1:f5:6e:32:eb:fa:24:a4:
02:99:b9:0f:2f:25:8c:aa:69:7e:7e:8e:2e:78:ef:4c:89:3a:
ce:ef:e2:87:80:d9:35:7c:d8:f5:c0:6d:b7:51:03:7c:c5:30:
f7:83:cb:98:96:70:b8:33:56:6c:31:c3:ee:1a:6e:02:e7:ab:
e0:d4:88:9a:ae:c2:e4:90:42:01:7c:fe:a0:bf:e2:8f:b7:e0:
62:8a:f4:90:42:f6:26:35:14:c2:14:50:e3:a1:cc:a5:50:4d:
0f:77:be:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 6 10:47:02 2025 by rpki-client