Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Cfe7MPY0HSIWA2C0hhMD2tmiY7Y.roa
File: Cfe7MPY0HSIWA2C0hhMD2tmiY7Y.roa (raw, json)
Hash identifier: fsTk0rYC6x5kbeg2Pl2q1czU+xWzKFFMOg0Jsv3TpBM=
Subject key identifier: 09:F7:BB:30:F6:34:1D:22:16:03:60:B4:86:13:03:DA:D9:A2:63:B6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196D8F7BB784386DC72851D5AF727E853B2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Cfe7MPY0HSIWA2C0hhMD2tmiY7Y.roa
Signing time: Fri 16 May 2025 12:00:36 +0000
ROA not before: Fri 16 May 2025 12:00:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.5.189.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f7:bb:78:43:86:dc:72:85:1d:5a:f7:27:e8:53:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 16 12:00:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09f7bb30f6341d22160360b4861303dad9a263b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:cf:ca:8b:8e:45:e0:34:10:48:45:05:f0:
0e:85:6d:00:09:1d:96:45:b1:64:1e:28:b9:03:4c:
30:5d:51:3a:76:c9:e8:cf:54:e4:a7:02:bb:ee:20:
b4:df:06:fe:5e:5b:a0:da:5d:8e:e9:9d:58:ac:2b:
d8:a1:e7:0b:09:34:1a:ad:3e:f5:02:4a:b8:dc:77:
43:7e:36:2b:c2:de:26:38:a2:40:da:e0:78:eb:76:
a3:51:be:ff:bd:18:b3:21:bd:cc:75:9c:97:f2:37:
42:64:fb:57:07:8a:0a:57:ca:69:26:c6:af:8e:a6:
97:e2:9c:c4:59:ab:6d:f8:e1:0c:c5:f7:8d:76:34:
ee:2d:60:af:d6:97:21:f6:71:19:8c:41:7e:1d:3b:
fa:f8:21:da:26:1b:69:36:22:bf:c1:5d:87:56:93:
ce:01:b6:90:c5:74:0d:c6:25:04:7f:ec:78:30:37:
f5:3f:e0:97:99:a3:1e:a9:f0:33:d3:74:57:b0:e0:
e8:3b:0c:d4:96:1b:7e:83:20:39:bf:21:77:b9:c1:
5e:4a:1d:28:11:09:b3:da:5d:88:23:cc:76:b4:6f:
4d:f1:bc:70:61:27:f7:de:24:9e:f0:ef:cd:53:d3:
85:a9:30:8f:8d:b8:9c:70:e2:b0:39:07:a1:a5:3f:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:BB:30:F6:34:1D:22:16:03:60:B4:86:13:03:DA:D9:A2:63:B6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Cfe7MPY0HSIWA2C0hhMD2tmiY7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/24
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.239.0/24
213.218.244.0/22
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
65:68:10:7e:d9:db:de:30:5f:70:1e:ed:46:ef:0e:4c:f2:78:
40:b1:62:ca:ae:6d:d1:15:d8:db:7a:c6:2e:b1:9c:ad:69:f8:
d8:fd:54:dd:ba:92:cf:50:17:7f:ae:8e:ae:3d:d0:5c:ff:e8:
0c:4e:0c:ba:12:fa:8e:37:fe:34:8e:e4:d5:07:aa:50:0f:a0:
8d:1b:22:01:23:26:9c:e4:9d:23:5d:7b:b2:ce:ba:31:d9:fb:
af:38:54:3a:55:45:d1:7a:b9:c6:e9:e2:a6:08:d7:a2:0c:b2:
45:88:19:9c:bb:23:b2:11:6f:12:14:4a:c4:a2:c3:d1:ab:6f:
3d:69:7a:f8:09:d0:c1:fa:74:3b:c2:5f:50:3f:35:83:6e:a1:
39:ba:6c:cb:3e:2e:a4:95:b1:85:0b:ee:51:2c:1d:05:5b:2a:
97:48:20:bb:62:72:74:4e:bf:34:1a:12:0d:5f:dc:5d:3d:a1:
f8:06:30:1f:fc:c9:40:57:38:c3:96:cd:00:88:39:0b:f4:1e:
31:67:43:ee:f6:a4:ac:07:a5:bb:4d:c0:41:9e:ad:7e:8d:3a:
66:b1:4a:63:69:00:6b:61:0f:1d:4c:e5:07:df:ad:e4:f8:2c:
64:5f:52:15:28:61:9e:9d:8d:b7:60:9e:47:60:cc:5d:63:80:
61:f7:af:84
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgISAZbY97t4Q4bccoUdWvcn6FOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNTE2MTIwMDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWY3YmIzMGY2MzQxZDIyMTYwMzYwYjQ4NjEzMDNkYWQ5YTI2M2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0bPyouOReA0EEhFBfAOhW0ACR2W
RbFkHii5A0wwXVE6dsnoz1TkpwK77iC03wb+Xlug2l2O6Z1YrCvYoecLCTQarT71
Akq43HdDfjYrwt4mOKJA2uB463ajUb7/vRizIb3MdZyX8jdCZPtXB4oKV8ppJsav
jqaX4pzEWatt+OEMxfeNdjTuLWCv1pch9nEZjEF+HTv6+CHaJhtpNiK/wV2HVpPO
AbaQxXQNxiUEf+x4MDf1P+CXmaMeqfAz03RXsODoOwzUlht+gyA5vyF3ucFeSh0o
EQmz2l2II8x2tG9N8bxwYSf33iSe8O/NU9OFqTCPjbiccOKwOQehpT9YqQIDAQAB
o4IDRzCCA0MwHQYDVR0OBBYEFAn3uzD2NB0iFgNgtIYTA9rZomO2MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvQ2ZlN01QWTBIU0lXQTJDMGhoTUQydG1pWTdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWwYIKwYBBQUHAQcBAf8EggFKMIIBRjCCAUIEAgABMIIB
OgMEAFEFvQMEAFKYCAMEAVKYsAMEAFKZRQMEAlKZiAMEAFKZ2QMEAFKZ/wMEAVnV
LDAMAwQBWdUyAwQCWdU4AwQAWdWBAwQAWdWEAwQAWdWLAwQAWdWPMAwDBABZ1ZED
BABZ1ZIwDAMEAlnVlAMEBVnVgAMEAFnVogMEAFnVpAMEAFnVpwMEAFnVqTAMAwQA
WdWrAwQAWdWwAwQAWdW1AwQAWdW3AwQAWdW/MAwDBAJZ1cQDBARZ1cADBABZ1dQD
BABZ1eAwDAMEAlnV5AMEBFnV4AMEA22wEAMEAm2wzAMEAW2w8gMEAbkxfgMEALll
LwMEBMJpUAMEANQmTwMEAdQmWAMEAtWChAMEANWYKwMEAtXSNAMEANXa0wMEANXa
7wMEAtXa9DAMAwQA2ZFBAwQA2ZFCAwQD2ZFIMA0GCSqGSIb3DQEBCwUAA4IBAQBl
aBB+2dveMF9wHu1G7w5M8nhAsWLKrm3RFdjbesYusZytafjY/VTdupLPUBd/ro6u
PdBc/+gMTgy6EvqON/40juTVB6pQD6CNGyIBIyac5J0jXXuyzrox2fuvOFQ6VUXR
ernG6eKmCNeiDLJFiBmcuyOyEW8SFErEosPRq289aXr4CdDB+nQ7wl9QPzWDbqE5
umzLPi6klbGFC+5RLB0FWyqXSCC7YnJ0Tr80GhINX9xdPaH4BjAf/MlAVzjDls0A
iDkL9B4xZ0Pu9qSsB6W7TcBBnq1+jTpmsUpjaQBrYQ8dTOUH363k+CxkX1IVKGGe
nY23YJ5HYMxdY4Bh96+E
-----END CERTIFICATE-----
Generated at Sat May 17 02:25:59 2025 by rpki-client