Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/Y0QzFQpxED6pQGOSZGJB2X93kKs.roa
File: Y0QzFQpxED6pQGOSZGJB2X93kKs.roa (raw, json)
Hash identifier: QstMZbErBCYp+ToxnOCIPJt5s0/mWI/dSe8BQlrQ6lk=
Subject key identifier: 63:44:33:15:0A:71:10:3E:A9:40:63:92:64:62:41:D9:7F:77:90:AB
Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial: 01968E945EDF914BA9063ABB6B1DD25BA145
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/Y0QzFQpxED6pQGOSZGJB2X93kKs.roa
Signing time: Fri 02 May 2025 01:20:10 +0000
ROA not before: Fri 02 May 2025 01:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49604
IP address blocks: 45.151.4.0/23 maxlen: 23
45.151.6.0/23 maxlen: 23
85.222.232.0/22 maxlen: 24
85.234.242.0/23 maxlen: 23
85.234.244.0/23 maxlen: 23
85.234.246.0/23 maxlen: 24
185.31.240.0/22 maxlen: 24
217.146.64.0/20 maxlen: 24
2a02:29e9:10::/48 maxlen: 48
2a02:29e9:20::/48 maxlen: 48
2a02:29e9:30::/48 maxlen: 48
2a02:29ea::/32 maxlen: 32
2a02:29ea:a::/48 maxlen: 48
2a02:29ea:14::/48 maxlen: 48
2a02:29ea:1e::/48 maxlen: 48
2a02:29ea:ffff::/48 maxlen: 48
2a02:29eb::/32 maxlen: 32
2a02:29ec::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:94:5e:df:91:4b:a9:06:3a:bb:6b:1d:d2:5b:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Validity
Not Before: May 2 01:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=634433150a71103ea9406392646241d97f7790ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:f0:13:2b:e6:00:cd:bb:5a:87:66:fc:a5:
b0:7e:6c:47:26:66:62:d2:93:05:f9:36:e1:48:f8:
94:e0:72:d7:b6:72:87:47:80:e8:cb:1f:ea:b3:79:
26:a2:3e:a8:c7:ab:bb:e0:ce:13:9b:34:d2:70:fe:
0f:52:8c:b1:25:fe:0f:ca:8c:12:fd:b0:59:bd:0d:
bb:14:13:46:4f:fc:04:50:dd:07:00:fd:58:38:8b:
55:5a:7c:70:fc:d0:0f:28:4e:b5:22:07:52:b5:64:
13:da:92:ef:09:d8:e7:22:c9:8b:1b:79:a1:3f:5e:
7a:63:db:e6:c5:88:ba:1a:5d:79:8b:c0:f0:cc:50:
4c:7f:70:e9:82:66:71:fc:35:96:df:0a:21:bb:74:
10:07:5b:fe:fc:a1:2a:27:fa:1c:d6:2b:f6:d0:b0:
9c:14:dd:e2:bd:e9:f1:9f:4b:a3:0f:d6:5a:08:a3:
a1:e1:f7:9e:2b:8e:6d:a7:2c:b4:97:af:5a:4b:7b:
11:96:94:ca:e6:83:fe:0f:e3:f8:58:84:38:d0:2e:
f7:d7:ea:64:5a:50:6d:1f:5f:27:c3:b5:48:58:ff:
a5:b5:2f:10:81:36:4c:cd:2a:8c:45:f3:b4:6e:85:
df:8d:2b:f4:83:c5:f0:19:f4:63:60:55:ab:10:b2:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:33:15:0A:71:10:3E:A9:40:63:92:64:62:41:D9:7F:77:90:AB
X509v3 Authority Key Identifier:
keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/Y0QzFQpxED6pQGOSZGJB2X93kKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.4.0/22
85.222.232.0/22
85.234.242.0-85.234.247.255
185.31.240.0/22
217.146.64.0/20
IPv6:
2a02:29e9:10::/48
2a02:29e9:20::/48
2a02:29e9:30::/48
2a02:29ea::-2a02:29ec:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:cc:76:86:2d:02:76:d2:26:5b:70:52:b8:fe:48:f5:95:30:
47:f8:65:39:97:2e:32:ad:94:c9:bf:8e:5b:40:02:74:62:92:
8e:15:28:76:e4:5d:63:c4:89:9e:8f:f3:36:82:15:49:42:76:
6a:bf:d4:37:ad:23:8b:aa:ec:b5:6f:ca:7e:e1:32:f9:85:d8:
b4:44:35:86:2e:42:f9:45:c9:02:e8:5a:3f:21:f5:bb:da:e0:
32:69:90:dd:05:48:e5:0f:37:1d:73:81:ad:2b:5e:f7:70:04:
13:36:fe:f7:4a:33:43:b0:9d:6f:5b:53:ef:81:12:85:9f:25:
bd:92:b3:f8:df:18:22:9e:3f:70:15:50:e3:67:05:98:c3:f9:
64:a1:55:93:9f:34:6a:28:9c:33:98:53:96:fa:f3:4a:d4:a3:
6f:9e:3e:89:84:06:44:5f:27:cf:4b:09:f3:32:5a:c7:c1:34:
1a:0c:d9:bb:90:42:1d:4b:2b:e0:b6:04:9e:e8:df:2f:37:90:
d8:6c:11:5d:ff:4c:19:96:16:cd:01:15:70:84:dd:8b:58:1f:
8b:a4:53:71:1e:88:4c:90:9e:14:35:c0:be:b2:21:ec:e3:b1:
68:44:fc:54:71:1e:99:10:6e:a2:ed:ed:2a:e0:b7:90:33:51:
d4:54:bc:16
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZaOlF7fkUupBjq7ax3SW6FFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNjczNWI3YTU1M2ExNjgwYzExYWRkM2U0OGMzNjM1YjUz
OTc5Y2EwHhcNMjUwNTAyMDEyMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzQ0MzMxNTBhNzExMDNlYTk0MDYzOTI2NDYyNDFkOTdmNzc5MGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+XwEyvmAM27Wodm/KWwfmxHJmZi
0pMF+TbhSPiU4HLXtnKHR4Doyx/qs3kmoj6ox6u74M4TmzTScP4PUoyxJf4PyowS
/bBZvQ27FBNGT/wEUN0HAP1YOItVWnxw/NAPKE61IgdStWQT2pLvCdjnIsmLG3mh
P156Y9vmxYi6Gl15i8DwzFBMf3DpgmZx/DWW3wohu3QQB1v+/KEqJ/oc1iv20LCc
FN3ivenxn0ujD9ZaCKOh4feeK45tpyy0l69aS3sRlpTK5oP+D+P4WIQ40C731+pk
WlBtH18nw7VIWP+ltS8QgTZMzSqMRfO0boXfjSv0g8XwGfRjYFWrELJVhQIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFGNEMxUKcRA+qUBjkmRiQdl/d5CrMB8GA1UdIwQY
MBaAFHpnNbelU6FoDBGt0+SMNjW1OXnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQt
MzRlYjY3YjQ3NWY2LzEvWTBRekZRcHhFRDZwUUdPU1pHSkIyWDkza0tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQtMzRlYjY3YjQ3NWY2
LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAsBAIAATAmAwQCLZcEAwQC
Vd7oMAwDBAFV6vIDBANV6vADBAK5H/ADBATZkkAwMQQCAAIwKwMHACoCKekAEAMH
ACoCKekAIAMHACoCKekAMDAOAwUBKgIp6gMFACoCKewwDQYJKoZIhvcNAQELBQAD
ggEBADPMdoYtAnbSJltwUrj+SPWVMEf4ZTmXLjKtlMm/jltAAnRiko4VKHbkXWPE
iZ6P8zaCFUlCdmq/1DetI4uq7LVvyn7hMvmF2LRENYYuQvlFyQLoWj8h9bva4DJp
kN0FSOUPNx1zga0rXvdwBBM2/vdKM0OwnW9bU++BEoWfJb2Ss/jfGCKeP3AVUONn
BZjD+WShVZOfNGoonDOYU5b680rUo2+ePomEBkRfJ89LCfMyWsfBNBoM2buQQh1L
K+C2BJ7o3y83kNhsEV3/TBmWFs0BFXCE3YtYH4ukU3EeiEyQnhQ1wL6yIezjsWhE
/FRxHpkQbqLt7Srgt5AzUdRUvBY=
-----END CERTIFICATE-----
Generated at Mon May 12 21:44:31 2025 by rpki-client