Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/qPGRMvVV9D12GpMqxd32m_M15uY.roa
File: qPGRMvVV9D12GpMqxd32m_M15uY.roa (raw, json)
Hash identifier: zbnCieZ4y7AssABSg/FYAGzsgezJ4sWU0T/sVn6kdZg=
Subject key identifier: A8:F1:91:32:F5:55:F4:3D:76:1A:93:2A:C5:DD:F6:9B:F3:35:E6:E6
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 0196B02DBFC9B0A9182702B4E94FB9970F55
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/qPGRMvVV9D12GpMqxd32m_M15uY.roa
Signing time: Thu 08 May 2025 13:55:10 +0000
ROA not before: Thu 08 May 2025 13:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15614
IP address blocks: 185.45.104.0/22 maxlen: 22
193.35.44.0/24 maxlen: 24
2a04:2a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:2d:bf:c9:b0:a9:18:27:02:b4:e9:4f:b9:97:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: May 8 13:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f19132f555f43d761a932ac5ddf69bf335e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:8f:60:9c:36:f3:3f:96:46:e6:b2:cc:92:
32:69:e5:ef:11:1e:d7:cd:c0:b3:bc:26:d8:ac:34:
86:87:68:90:a5:2c:5d:f6:6f:ce:b4:6c:06:df:91:
fc:51:bc:a4:8a:6a:25:a6:f4:ad:be:a2:80:ee:f5:
13:b2:02:19:46:19:64:4c:3c:00:9a:53:71:a0:c5:
68:7f:99:72:15:6b:7b:7b:63:bb:97:72:4e:2e:5d:
08:f4:5d:7a:c3:8a:9d:73:7d:61:2d:bf:c3:22:84:
c2:c3:bb:3a:86:72:99:97:7f:9a:3f:66:81:32:a9:
6c:f7:e8:71:c7:ea:3b:a0:85:d8:c8:f6:57:f9:fa:
57:db:68:cc:1a:51:88:c4:41:0a:03:f6:10:e7:e3:
64:93:e5:0e:fe:65:3a:6c:ed:33:e2:2d:ca:2c:28:
97:58:37:55:75:bf:4f:7e:2c:bb:e0:19:ad:30:76:
ab:2e:ef:87:5a:cb:ec:19:c6:d1:f2:d3:eb:6d:17:
64:f1:8d:c6:57:f6:30:1c:33:8c:ca:e8:c7:2c:bb:
fd:4a:62:a3:6f:30:b7:fd:8f:34:2c:c5:ad:22:14:
b8:22:bb:a9:51:54:a1:e3:96:17:7b:37:78:da:67:
c4:b8:3f:d6:49:a6:45:5b:56:49:21:eb:cf:a9:78:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F1:91:32:F5:55:F4:3D:76:1A:93:2A:C5:DD:F6:9B:F3:35:E6:E6
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/qPGRMvVV9D12GpMqxd32m_M15uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.104.0/22
193.35.44.0/24
IPv6:
2a04:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
54:06:68:c0:c3:d6:2e:21:d1:ed:36:ff:b4:c0:07:fa:c1:6b:
bf:50:c6:e5:3b:9c:1c:3d:46:d9:33:84:ff:9d:5d:12:ed:81:
2f:fc:d5:36:49:9d:37:e9:4f:54:b8:17:64:7f:02:2c:25:89:
73:6f:da:ea:21:83:4d:8c:dc:b9:73:de:bb:40:08:d4:99:34:
25:5f:06:3a:96:ae:54:76:f4:a3:1c:55:37:63:4c:db:c0:3e:
97:5c:08:48:ca:28:f0:24:24:85:7d:30:57:7d:69:84:c6:8e:
15:be:51:92:2e:59:d8:58:cd:41:11:8e:d9:dc:81:d5:99:5e:
c0:ef:a5:27:1a:f7:99:bd:d9:d8:e4:37:59:37:ce:e1:b3:f9:
57:26:66:3c:c6:eb:d3:5b:46:3d:2e:c9:c6:39:88:12:05:23:
35:98:07:2c:8b:20:25:cb:a2:73:7d:d3:f0:fb:49:7c:70:e8:
82:f1:6e:df:d9:32:22:fe:54:3c:8e:e1:32:3b:d6:46:f1:47:
50:91:38:0f:aa:3d:38:3f:4f:c4:4e:f6:6d:58:67:0d:68:e7:
46:78:83:60:e1:a9:6d:d0:f0:3f:22:1f:c6:1b:a6:c3:3d:0b:
97:33:65:2c:34:7e:34:df:8f:41:75:d2:f9:50:0c:3d:b4:ad:
70:0b:a5:e4
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZawLb/JsKkYJwK06U+5lw9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0
ZWE3YTUwHhcNMjUwNTA4MTM1NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGYxOTEzMmY1NTVmNDNkNzYxYTkzMmFjNWRkZjY5YmYzMzVlNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9uPYJw28z+WRuayzJIyaeXvER7X
zcCzvCbYrDSGh2iQpSxd9m/OtGwG35H8UbykimolpvStvqKA7vUTsgIZRhlkTDwA
mlNxoMVof5lyFWt7e2O7l3JOLl0I9F16w4qdc31hLb/DIoTCw7s6hnKZl3+aP2aB
Mqls9+hxx+o7oIXYyPZX+fpX22jMGlGIxEEKA/YQ5+Nkk+UO/mU6bO0z4i3KLCiX
WDdVdb9Pfiy74BmtMHarLu+HWsvsGcbR8tPrbRdk8Y3GV/YwHDOMyujHLLv9SmKj
bzC3/Y80LMWtIhS4IrupUVSh45YXezd42mfEuD/WSaZFW1ZJIevPqXhgeQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKjxkTL1VfQ9dhqTKsXd9pvzNebmMB8GA1UdIwQY
MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt
YmFkYWZjYTM5NDRmLzEvcVBHUk12VlY5RDEyR3BNcXhkMzJtX00xNXVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm
LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuS1oAwQA
wSMsMA0EAgACMAcDBQMqBCpAMA0GCSqGSIb3DQEBCwUAA4IBAQBUBmjAw9YuIdHt
Nv+0wAf6wWu/UMblO5wcPUbZM4T/nV0S7YEv/NU2SZ036U9UuBdkfwIsJYlzb9rq
IYNNjNy5c967QAjUmTQlXwY6lq5UdvSjHFU3Y0zbwD6XXAhIyijwJCSFfTBXfWmE
xo4VvlGSLlnYWM1BEY7Z3IHVmV7A76UnGveZvdnY5DdZN87hs/lXJmY8xuvTW0Y9
LsnGOYgSBSM1mAcsiyAly6JzfdPw+0l8cOiC8W7f2TIi/lQ8juEyO9ZG8UdQkTgP
qj04P0/ETvZtWGcNaOdGeINg4alt0PA/Ih/GG6bDPQuXM2UsNH40349BddL5UAw9
tK1wC6Xk
-----END CERTIFICATE-----
Generated at Mon May 12 10:36:20 2025 by rpki-client