Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/V9xIuDHmhh7U3tTkSVryBJA5CVk.roa
File: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (raw, json)
Hash identifier: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=
Subject key identifier: 57:DC:48:B8:31:E6:86:1E:D4:DE:D4:E4:49:5A:F2:04:90:39:09:59
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019690CCE976D56E9C5F8B05865477747503
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/V9xIuDHmhh7U3tTkSVryBJA5CVk.roa
Signing time: Fri 02 May 2025 11:41:10 +0000
ROA not before: Fri 02 May 2025 11:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30742
IP address blocks: 2.59.32.0/22 maxlen: 24
2.59.33.0/24 maxlen: 24
2.59.34.0/24 maxlen: 24
2.59.35.0/24 maxlen: 24
80.245.132.0/22 maxlen: 24
80.245.136.0/21 maxlen: 24
82.198.192.0/19 maxlen: 24
176.118.180.0/22 maxlen: 24
176.118.180.0/24 maxlen: 24
176.118.181.0/24 maxlen: 24
176.118.182.0/24 maxlen: 24
176.118.183.0/24 maxlen: 24
185.43.24.0/22 maxlen: 24
185.48.224.0/22 maxlen: 24
185.106.184.0/22 maxlen: 24
185.115.80.0/22 maxlen: 24
185.139.112.0/22 maxlen: 24
192.145.112.0/22 maxlen: 24
193.176.72.0/22 maxlen: 24
194.146.0.0/22 maxlen: 24
2a01:9b60::/32 maxlen: 32
2a03:9980::/29 maxlen: 32
2a03:9980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:cc:e9:76:d5:6e:9c:5f:8b:05:86:54:77:74:75:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: May 2 11:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57dc48b831e6861ed4ded4e4495af20490390959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:3b:1d:ed:dd:bc:26:85:62:00:b7:1f:60:
85:b4:41:1f:a5:c9:e5:d3:22:c3:84:55:a1:ed:39:
80:2f:df:f7:2f:67:3c:51:39:74:05:21:50:b3:4f:
72:01:2d:b2:80:94:fd:f7:20:a1:de:48:3b:d4:8b:
bf:23:8f:ac:42:7a:e3:b6:06:ef:72:03:45:ec:33:
9f:f1:e6:77:da:51:3a:49:e2:16:a1:c3:97:87:46:
8b:7d:97:c6:15:21:54:ca:ab:cd:27:a9:58:0f:26:
5a:22:08:b5:fb:ac:dd:5e:0a:dc:7a:68:5a:dc:ba:
90:5d:f5:75:2f:ce:54:cf:a0:44:be:15:4c:d4:8c:
e9:a6:9c:75:68:0a:b6:bc:5d:45:68:33:76:6e:d1:
76:b2:aa:4b:ec:16:a5:9f:45:b9:82:f3:64:46:dc:
da:81:cd:f6:d8:bf:90:f2:b5:ec:e3:81:b5:44:41:
8a:78:51:90:88:bf:c6:db:8c:12:63:97:90:71:ee:
38:b7:84:48:c1:10:f6:01:87:5a:ed:be:df:f9:b4:
7e:3a:33:69:03:42:5a:bd:ab:18:98:b3:2f:37:09:
c9:30:0c:20:99:4e:2e:dc:87:f6:ad:bd:63:da:ca:
4e:54:a1:5e:df:97:17:63:99:74:fd:24:cf:e1:f3:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:48:B8:31:E6:86:1E:D4:DE:D4:E4:49:5A:F2:04:90:39:09:59
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/V9xIuDHmhh7U3tTkSVryBJA5CVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.32.0/22
80.245.132.0-80.245.143.255
82.198.192.0/19
176.118.180.0/22
185.43.24.0/22
185.48.224.0/22
185.106.184.0/22
185.115.80.0/22
185.139.112.0/22
192.145.112.0/22
193.176.72.0/22
194.146.0.0/22
IPv6:
2a01:9b60::/32
2a03:9980::/29
Signature Algorithm: sha256WithRSAEncryption
2a:e9:f7:7a:b2:fb:b1:a4:b8:75:c7:89:22:64:41:b6:08:31:
d9:7f:7d:87:bf:1b:0b:ae:86:44:35:27:cb:00:6b:a2:e8:21:
b6:1d:86:79:0f:c8:5c:7f:53:fe:44:78:62:aa:65:f1:99:82:
7e:06:b4:bb:f6:b9:88:42:14:be:5e:c4:a7:64:8d:e9:4d:c8:
55:00:c9:cc:07:6d:3f:fa:aa:02:61:9a:3e:4c:d3:bd:22:16:
b2:9f:99:3d:7d:f4:c7:1c:2f:79:6e:f2:d9:f1:c0:4f:ff:b1:
ae:67:0c:90:71:a4:49:96:a3:e5:8d:af:7d:bb:f2:34:5b:70:
90:da:19:bb:3d:7e:74:33:a4:4a:48:90:66:fb:5a:dd:38:7a:
d1:23:a2:89:1f:98:e5:7b:a9:37:eb:19:59:b4:66:94:31:6f:
3c:ac:29:d5:ee:de:4a:a0:12:f3:66:e9:a2:44:dd:3e:0a:75:
dc:2c:66:7c:44:4a:3a:99:f0:bc:f8:1c:99:66:cb:a0:3d:b2:
8d:c9:f6:c7:e8:77:3e:ef:56:c5:df:f4:4a:65:03:61:97:b7:
b5:3b:3f:19:02:78:77:7b:fc:15:c7:be:ab:be:26:f4:91:5c:
c5:91:e1:44:1c:80:ac:6f:77:72:0a:e0:5b:22:b1:28:7e:26:
76:99:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:33:55 2025 by rpki-client