Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/eeJQTXzJRG74gLZzvmSazKWdeSk.roa
File: eeJQTXzJRG74gLZzvmSazKWdeSk.roa (raw, json)
Hash identifier: apRxPLkLu+OXbwhl6Vtb7LX5Cws2a7TltcG+TguzTP8=
Subject key identifier: 79:E2:50:4D:7C:C9:44:6E:F8:80:B6:73:BE:64:9A:CC:A5:9D:79:29
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01969F9DF15637D5865633D02D4472937E31
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/eeJQTXzJRG74gLZzvmSazKWdeSk.roa
Signing time: Mon 05 May 2025 08:44:10 +0000
ROA not before: Mon 05 May 2025 08:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47330
IP address blocks: 37.156.28.0/23 maxlen: 23
92.114.16.0/22 maxlen: 22
92.114.20.0/24 maxlen: 24
92.114.21.0/24 maxlen: 24
92.114.24.0/24 maxlen: 24
188.213.65.0/24 maxlen: 24
188.213.66.0/24 maxlen: 24
188.213.67.0/24 maxlen: 24
188.213.68.0/24 maxlen: 24
188.213.69.0/24 maxlen: 24
2a00:5ca6::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:9d:f1:56:37:d5:86:56:33:d0:2d:44:72:93:7e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 5 08:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79e2504d7cc9446ef880b673be649acca59d7929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:95:d4:ae:9e:ef:d3:63:72:cf:32:42:6c:
2c:3d:7e:c6:70:2c:78:97:61:4c:40:aa:e1:9c:95:
c2:ee:6d:ad:0b:bd:87:a3:c1:9a:e2:b0:c2:ff:d6:
9d:b0:ad:8d:41:40:82:b8:52:cb:c5:9e:5e:70:a5:
7f:a6:94:88:5a:bd:34:6c:7f:cf:9d:bb:01:db:65:
cf:e4:d4:8d:e3:83:30:f6:08:1c:3c:ea:e3:1e:a9:
75:de:1d:e9:a5:2f:d2:69:fd:ff:a1:2f:d1:53:24:
42:62:02:c9:32:c2:32:c9:4d:44:39:ec:9a:3d:21:
8e:28:92:07:db:10:77:3b:15:c3:3a:72:82:2b:3b:
70:49:f0:e1:2a:76:0b:da:c7:a9:e2:c1:13:58:74:
c7:26:41:f3:e2:f3:d1:ad:e6:3d:9c:32:d2:f4:b7:
b2:30:c0:3d:48:49:ba:0d:97:21:87:9f:87:0e:bd:
ee:c2:07:db:17:2e:fa:1d:89:dc:2c:27:a1:67:ee:
ef:8f:37:52:58:a2:62:db:7e:3c:79:ac:00:96:c3:
63:da:47:aa:a3:3c:f0:7f:76:e7:98:43:4b:0b:85:
39:ea:fb:af:b9:1e:4e:43:2d:9c:05:99:17:c2:d5:
33:e5:fe:00:4b:d6:e2:1d:42:35:aa:35:64:ff:15:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:50:4D:7C:C9:44:6E:F8:80:B6:73:BE:64:9A:CC:A5:9D:79:29
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/eeJQTXzJRG74gLZzvmSazKWdeSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.28.0/23
92.114.16.0-92.114.21.255
92.114.24.0/24
188.213.65.0-188.213.69.255
IPv6:
2a00:5ca6::/31
Signature Algorithm: sha256WithRSAEncryption
63:1a:fe:ae:be:2a:05:34:b3:aa:de:c9:7c:cc:56:ed:cd:56:
51:56:c1:2a:90:ff:4a:96:a1:13:71:25:98:15:c0:91:c8:5f:
00:49:78:b2:8c:bf:0b:f6:7a:1b:ea:80:50:e7:90:9f:c8:97:
9a:40:2d:7b:8b:b4:e8:fc:b7:c3:5a:23:c6:b6:35:8b:72:f8:
fa:7f:db:bd:f2:15:37:90:54:b6:66:3d:e7:10:fb:1e:ba:58:
02:ea:90:1f:6f:3a:e9:ac:64:9d:f9:39:91:94:d5:3c:2f:09:
31:31:4c:7c:14:db:da:d8:3e:5c:10:db:fa:cd:cf:01:da:31:
6a:b2:00:20:70:cb:08:b1:f0:ef:e8:de:f4:4a:68:ba:82:d5:
e0:37:2a:36:37:18:0f:c2:25:bc:43:17:58:e6:b1:a9:26:d5:
6e:05:63:d1:e7:5c:6a:7d:99:70:e5:67:66:d3:9e:29:39:0c:
6a:59:70:3c:d1:13:5d:b2:2d:08:9a:d3:3c:9f:c2:63:1e:e5:
a4:11:dd:6c:a1:a9:d8:d2:58:73:29:ca:44:9b:c4:cf:31:14:
a1:21:6f:ea:87:9a:ce:36:40:23:0f:14:43:10:66:75:a5:54:
7d:6e:cc:d2:ce:51:cf:49:18:4e:2c:d6:2a:4a:f3:c7:be:7e:
33:b5:f5:77
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZafnfFWN9WGVjPQLURyk34xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjUwNTA1MDg0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWUyNTA0ZDdjYzk0NDZlZjg4MGI2NzNiZTY0OWFjY2E1OWQ3OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a2V1K6e79Njcs8yQmwsPX7GcCx4
l2FMQKrhnJXC7m2tC72Ho8Ga4rDC/9adsK2NQUCCuFLLxZ5ecKV/ppSIWr00bH/P
nbsB22XP5NSN44Mw9ggcPOrjHql13h3ppS/Saf3/oS/RUyRCYgLJMsIyyU1EOeya
PSGOKJIH2xB3OxXDOnKCKztwSfDhKnYL2sep4sETWHTHJkHz4vPRreY9nDLS9Ley
MMA9SEm6DZchh5+HDr3uwgfbFy76HYncLCehZ+7vjzdSWKJi2348eawAlsNj2keq
ozzwf3bnmENLC4U56vuvuR5OQy2cBZkXwtUz5f4AS9biHUI1qjVk/xVkswIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFHniUE18yURu+IC2c75kmsylnXkpMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvZWVKUVRYekpSRzc0Z0xaenZtU2F6S1dkZVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQBJZwcMAwD
BARcchADBAFcchQDBABcchgwDAMEALzVQQMEAbzVRDANBAIAAjAHAwUBKgBcpjAN
BgkqhkiG9w0BAQsFAAOCAQEAYxr+rr4qBTSzqt7JfMxW7c1WUVbBKpD/SpahE3El
mBXAkchfAEl4soy/C/Z6G+qAUOeQn8iXmkAte4u06Py3w1ojxrY1i3L4+n/bvfIV
N5BUtmY95xD7HrpYAuqQH2866axknfk5kZTVPC8JMTFMfBTb2tg+XBDb+s3PAdox
arIAIHDLCLHw7+je9EpouoLV4DcqNjcYD8IlvEMXWOaxqSbVbgVj0edcan2ZcOVn
ZtOeKTkMallwPNETXbItCJrTPJ/CYx7lpBHdbKGp2NJYcynKRJvEzzEUoSFv6oea
zjZAIw8UQxBmdaVUfW7M0s5Rz0kYTizWKkrzx75+M7X1dw==
-----END CERTIFICATE-----
Generated at Mon May 12 23:19:55 2025 by rpki-client