Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GhpBqtCIIPBHXNt_xjWGKeRgd8.roa
File: 1GhpBqtCIIPBHXNt_xjWGKeRgd8.roa (raw, json)
Hash identifier: WnHUUAVS+GMmoPBxC2NoxtWx4WPnGtfu6EHyMNg+Rqk=
Subject key identifier: D4:68:69:06:AB:42:20:83:C1:1D:73:6D:FF:18:D6:18:A7:91:81:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196ABBF286F8BD23882A9B34C218732F8FD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GhpBqtCIIPBHXNt_xjWGKeRgd8.roa
Signing time: Wed 07 May 2025 17:15:53 +0000
ROA not before: Wed 07 May 2025 17:15:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:bf:28:6f:8b:d2:38:82:a9:b3:4c:21:87:32:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 7 17:15:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4686906ab422083c11d736dff18d618a79181df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b2:1f:e1:53:d5:ab:2e:6a:b9:e7:ee:ac:
d3:f5:56:0f:4c:9f:ce:36:55:7a:c2:96:f8:a2:1f:
1a:eb:65:04:f5:8b:60:67:fe:50:6a:bb:bc:43:d7:
f8:58:e8:00:57:15:0c:c2:40:5c:10:2d:a9:e1:c7:
63:80:12:c8:4f:fb:d0:19:63:08:a1:ff:2f:6b:ca:
9d:05:be:b3:c7:9f:96:c2:03:f4:d6:10:c5:ab:ae:
15:4c:32:d5:69:ea:7d:cd:13:e1:94:25:ca:49:87:
93:85:07:28:72:5e:3d:ec:52:80:14:e9:09:8d:14:
1c:3a:f0:7b:35:2a:3e:c0:96:cf:a4:72:51:df:42:
20:f9:a0:0a:68:bb:e8:ef:63:e3:91:f0:bb:11:ac:
00:09:14:22:88:ee:eb:53:3c:c5:21:c0:a9:7d:21:
a2:33:93:40:e3:9c:31:f2:33:ee:00:98:5c:d5:89:
af:a3:ef:b4:58:f6:ee:24:0e:1f:7a:02:d0:79:03:
f0:0f:08:2b:a9:8e:d1:91:7c:26:cb:08:f8:a9:e4:
23:57:8d:4b:4f:39:29:8f:6d:96:f6:af:d8:18:e9:
b4:39:47:b5:92:e9:4e:19:18:93:fd:18:e2:cf:66:
94:69:12:e1:60:57:58:e8:28:34:15:47:4e:e7:41:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:69:06:AB:42:20:83:C1:1D:73:6D:FF:18:D6:18:A7:91:81:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GhpBqtCIIPBHXNt_xjWGKeRgd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
45.128.76.0/24
45.154.58.0/24
93.190.244.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
39:cb:be:7d:2a:02:c3:ef:72:64:bc:d7:29:42:b1:bb:44:f5:
7a:f6:09:d2:91:3e:01:76:b4:12:b3:b6:aa:c0:b5:64:84:9f:
61:e0:6c:e8:22:a0:92:8e:22:fd:0d:0a:5c:9c:2e:63:d1:d1:
58:6f:2f:1b:1e:32:76:48:7d:5d:11:62:7f:3b:21:5e:02:dc:
73:62:50:72:8f:91:0f:c5:8b:93:ba:ad:81:1a:02:06:0b:2d:
51:f6:12:48:ac:97:c6:6c:db:5d:92:1c:f4:3c:f2:9e:b2:e0:
dc:b3:14:0c:b5:a5:8e:ed:a8:a3:f8:b7:2f:a0:1f:87:cf:99:
ea:e0:4a:fa:c0:06:8a:a9:69:1a:b5:af:a3:5e:b9:30:bb:2e:
f3:ab:d6:c1:e6:16:8e:91:2c:93:4f:9d:aa:5c:ad:c7:e7:8d:
1e:b2:6d:ff:26:87:3f:e6:fe:cc:5f:89:66:b1:c9:45:eb:23:
21:7a:cd:29:e8:f2:c5:39:a5:a3:7a:a4:22:2d:ef:1d:b6:be:
b5:7f:b0:e1:45:dd:da:b9:bb:7a:bc:f3:2d:17:1b:16:24:19:
d3:2d:7f:b2:a1:bd:6e:d8:75:4f:bf:c5:39:7c:2c:1c:6a:0c:
c0:ee:17:cc:73:6b:47:98:b7:f6:61:9b:f9:83:b8:81:40:b2:
63:76:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:06:23 2025 by rpki-client