Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/wT7vmcLVhrxJsD9cpF_QsLflW0E.roa
File: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (raw, json)
Hash identifier: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=
Subject key identifier: C1:3E:EF:99:C2:D5:86:BC:49:B0:3F:5C:A4:5F:D0:B0:B7:E5:5B:41
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01964900C9E09746077C19CF1AB16B6C7F5F
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/wT7vmcLVhrxJsD9cpF_QsLflW0E.roa
Signing time: Fri 18 Apr 2025 13:05:10 +0000
ROA not before: Fri 18 Apr 2025 13:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 178.210.244.0/24 maxlen: 24
178.210.254.0/24 maxlen: 24
178.210.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:00:c9:e0:97:46:07:7c:19:cf:1a:b1:6b:6c:7f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Apr 18 13:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c13eef99c2d586bc49b03f5ca45fd0b0b7e55b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:fa:63:8c:05:cc:1b:b1:c1:4a:d5:28:ea:
97:3d:20:de:7a:2e:81:d2:32:7e:01:44:26:cb:6e:
42:ed:48:c2:2b:f1:e9:b0:38:ca:94:d6:41:54:a1:
e0:e7:91:8c:3a:87:84:97:33:89:d6:1d:41:01:68:
82:ac:82:6a:b1:10:f5:2a:6e:d0:0d:a6:b5:d2:35:
27:3b:84:6b:5b:99:94:19:16:f9:b2:2e:8f:ae:33:
53:a4:a7:85:bd:d5:a0:e4:d2:e9:3a:14:d3:f3:a2:
f7:32:67:02:19:07:28:26:74:a1:55:6a:0c:c7:66:
46:2d:dd:a3:d7:c7:b2:b1:ab:46:0e:42:e1:d7:7e:
36:85:b5:72:b6:b6:81:7d:05:17:41:31:c2:73:7a:
22:d3:e6:18:b4:92:3e:67:3e:41:ba:04:54:ba:d8:
2f:ec:97:a8:27:58:60:ea:f1:d9:d1:64:b6:f0:ef:
43:79:fc:66:24:72:c0:b4:98:06:b8:11:62:81:00:
23:14:22:94:ec:5e:55:c1:ab:51:03:9c:59:2a:84:
3c:9c:02:70:69:b0:f5:32:68:4d:ca:61:af:4b:90:
92:ca:30:c1:63:fb:d4:b3:f7:8a:b8:37:48:3d:19:
f9:df:bf:f1:f7:0a:d9:1c:0d:50:7d:97:c7:b4:7b:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:EF:99:C2:D5:86:BC:49:B0:3F:5C:A4:5F:D0:B0:B7:E5:5B:41
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/wT7vmcLVhrxJsD9cpF_QsLflW0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.244.0/24
178.210.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:cf:e7:f1:bc:b0:3f:76:4d:bd:cd:5b:77:07:f1:a9:81:9a:
69:36:c9:00:63:ab:ee:63:10:20:95:2f:73:b8:c6:3d:9a:be:
a1:e2:53:41:10:81:1e:20:e9:a4:1d:7e:f4:b7:0f:00:30:78:
f9:b7:56:99:48:9b:ab:56:83:01:f6:f9:ad:bd:e4:f6:79:1c:
ee:62:b2:c8:e2:61:c2:4e:b2:c4:64:a1:1a:c0:47:e8:38:21:
c2:ad:2b:b0:2e:a7:07:65:09:75:62:e2:24:bc:3a:f5:37:9c:
0f:16:4e:76:00:bf:98:bf:e7:ee:b3:6b:7a:b1:98:1c:66:3a:
16:99:71:2d:9e:5d:18:dc:c6:b3:29:ce:e6:e1:8b:5c:59:46:
6b:f9:1f:ff:56:98:53:ae:6a:b5:6d:24:91:b4:d3:31:f8:69:
88:f3:c3:e8:71:34:1c:46:00:5d:e3:7d:a4:24:e7:45:e1:b4:
46:0e:77:84:5d:fc:a6:53:2b:cf:7b:60:74:a0:4c:be:71:a5:
92:ec:31:d9:13:85:b7:6e:60:7a:f1:ff:c1:a7:7e:d2:4c:f2:
39:8f:05:57:85:e3:ba:13:91:4e:c8:61:98:c6:cf:35:a7:8c:
0d:56:b4:1e:6c:9a:1a:dc:e3:93:94:9d:cb:44:f8:3f:48:67:
28:b4:5e:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZJAMngl0YHfBnPGrFrbH9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjUwNDE4MTMwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTNlZWY5OWMyZDU4NmJjNDliMDNmNWNhNDVmZDBiMGI3ZTU1YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwab6Y4wFzBuxwUrVKOqXPSDeei6B
0jJ+AUQmy25C7UjCK/HpsDjKlNZBVKHg55GMOoeElzOJ1h1BAWiCrIJqsRD1Km7Q
Daa10jUnO4RrW5mUGRb5si6PrjNTpKeFvdWg5NLpOhTT86L3MmcCGQcoJnShVWoM
x2ZGLd2j18eysatGDkLh1342hbVytraBfQUXQTHCc3oi0+YYtJI+Zz5BugRUutgv
7JeoJ1hg6vHZ0WS28O9DefxmJHLAtJgGuBFigQAjFCKU7F5VwatRA5xZKoQ8nAJw
abD1MmhNymGvS5CSyjDBY/vUs/eKuDdIPRn537/x9wrZHA1QfZfHtHvV8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFME+75nC1Ya8SbA/XKRf0LC35VtBMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvd1Q3dm1jTFZocnhKc0Q5Y3BGX1FzTGZsVzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstL0AwQB
stL+MA0GCSqGSIb3DQEBCwUAA4IBAQBuz+fxvLA/dk29zVt3B/GpgZppNskAY6vu
YxAglS9zuMY9mr6h4lNBEIEeIOmkHX70tw8AMHj5t1aZSJurVoMB9vmtveT2eRzu
YrLI4mHCTrLEZKEawEfoOCHCrSuwLqcHZQl1YuIkvDr1N5wPFk52AL+Yv+fus2t6
sZgcZjoWmXEtnl0Y3MazKc7m4YtcWUZr+R//VphTrmq1bSSRtNMx+GmI88PocTQc
RgBd432kJOdF4bRGDneEXfymUyvPe2B0oEy+caWS7DHZE4W3bmB68f/Bp37STPI5
jwVXheO6E5FOyGGYxs81p4wNVrQebJoa3OOTlJ3LRPg/SGcotF7f
-----END CERTIFICATE-----
Generated at Tue May 6 16:03:41 2025 by rpki-client