Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CMyyJ9V6M8lnKWJjQVyBR6sjEyA.roa
File: CMyyJ9V6M8lnKWJjQVyBR6sjEyA.roa (raw, json)
Hash identifier: LoimETCDcAB+UsszfQOD5LaqQ8pbujGP55tc6vq8ibc=
Subject key identifier: 08:CC:B2:27:D5:7A:33:C9:67:29:62:63:41:5C:81:47:AB:23:13:20
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196678D39140F40E1226FBB9BB43E674C06
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CMyyJ9V6M8lnKWJjQVyBR6sjEyA.roa
Signing time: Thu 24 Apr 2025 11:27:10 +0000
ROA not before: Thu 24 Apr 2025 11:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.135.36.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:8d:39:14:0f:40:e1:22:6f:bb:9b:b4:3e:67:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 24 11:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08ccb227d57a33c967296263415c8147ab231320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:b0:1e:25:f3:a8:28:f5:c8:80:4a:30:93:
fa:f4:9f:5b:0f:4d:c0:c1:ff:a2:9f:4d:79:12:a8:
57:67:cb:00:7e:b2:c0:e5:93:90:7c:63:78:07:0b:
ac:39:c5:a3:46:a4:c8:cd:18:a6:8a:72:03:39:0b:
70:25:2d:fe:9f:84:f7:35:6f:1d:67:66:92:9b:b6:
0f:7c:d3:da:37:bc:ca:5c:b2:ce:64:34:92:41:91:
92:ca:21:1d:c5:e2:9a:eb:27:cb:e6:12:92:ac:bc:
64:82:b4:b3:3d:4a:00:3a:f4:fb:64:60:54:f2:31:
d4:de:68:8a:07:57:62:2e:8d:88:03:aa:cb:51:a6:
87:af:77:fe:a7:8b:48:28:4a:9a:2f:ab:51:93:11:
6b:8b:5c:70:1e:be:31:cb:e0:f8:b0:12:7c:5b:1a:
7a:5e:f3:e1:61:14:5c:57:55:21:f5:da:33:21:3b:
31:3a:55:bf:9a:96:0c:8a:fa:1e:49:72:ae:ea:9c:
2f:ba:a7:e6:7a:26:35:83:58:19:cb:71:8c:ce:de:
ba:46:97:78:14:3b:20:4e:b6:07:78:e4:5f:4a:7f:
68:e5:3d:f3:b3:b3:b1:2c:d9:b4:b0:0b:8d:d2:1e:
46:62:28:a5:90:0d:3b:0e:5a:6d:b3:15:7e:75:2a:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:B2:27:D5:7A:33:C9:67:29:62:63:41:5C:81:47:AB:23:13:20
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CMyyJ9V6M8lnKWJjQVyBR6sjEyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.135.36.0/24
45.141.176.0/24
45.146.91.0/24
45.146.180.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b4:9e:03:50:3a:d9:54:9f:1e:56:6c:9c:b8:5a:dd:6c:db:
db:ea:90:e3:42:86:de:8c:6f:91:82:49:f0:02:b3:31:89:1b:
75:83:20:19:88:2f:46:60:d8:e5:fe:4c:2e:6a:e3:88:bd:eb:
8e:02:94:47:dc:ea:21:38:da:80:c9:bb:ee:5c:f7:5e:d8:9c:
1f:72:fb:d6:20:77:b1:1f:8d:bf:e1:2d:26:9c:5d:77:1d:6b:
1b:5d:25:8f:c3:28:96:52:71:88:de:42:62:5c:96:d5:46:cc:
a1:31:5c:08:35:15:62:d5:d5:b9:55:7c:61:97:c2:a8:2e:38:
88:1c:a7:f4:f7:e0:8c:b1:97:f1:74:e4:85:59:71:c4:42:f1:
4a:a3:02:7e:8f:81:cc:f4:cb:e5:9d:02:4a:ae:b3:ad:24:3d:
b2:01:b9:3d:ae:01:b5:0d:c4:0b:c0:57:3c:ce:2e:5e:05:55:
20:5b:2e:af:d0:9f:cb:2c:ba:79:bf:58:d1:86:68:ad:f7:3a:
c4:d0:2e:84:8f:93:df:50:15:05:7b:df:f8:77:43:7d:54:10:
71:84:e9:c1:e6:8b:8f:8b:f9:af:90:31:fe:74:13:01:c7:fb:
f8:26:a0:f7:0d:c9:ce:e8:9b:7a:69:2d:73:5e:9c:0c:3c:31:
47:3c:24:16
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZZnjTkUD0DhIm+7m7Q+Z0wGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDI0MTEyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGNjYjIyN2Q1N2EzM2M5NjcyOTYyNjM0MTVjODE0N2FiMjMxMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxmwHiXzqCj1yIBKMJP69J9bD03A
wf+in015EqhXZ8sAfrLA5ZOQfGN4BwusOcWjRqTIzRiminIDOQtwJS3+n4T3NW8d
Z2aSm7YPfNPaN7zKXLLOZDSSQZGSyiEdxeKa6yfL5hKSrLxkgrSzPUoAOvT7ZGBU
8jHU3miKB1diLo2IA6rLUaaHr3f+p4tIKEqaL6tRkxFri1xwHr4xy+D4sBJ8Wxp6
XvPhYRRcV1Uh9dozITsxOlW/mpYMivoeSXKu6pwvuqfmeiY1g1gZy3GMzt66Rpd4
FDsgTrYHeORfSn9o5T3zs7OxLNm0sAuN0h5GYiilkA07DlptsxV+dSpNewIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAjMsifVejPJZyliY0FcgUerIxMgMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQ015eUo5VjZNOGxuS1dKalFWeUJSNnNqRXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVYPAwQA
LYckAwQALY2wAwQALZJbAwQALZK0AwQAudZKMA0GCSqGSIb3DQEBCwUAA4IBAQCl
tJ4DUDrZVJ8eVmycuFrdbNvb6pDjQobejG+RgknwArMxiRt1gyAZiC9GYNjl/kwu
auOIveuOApRH3OohONqAybvuXPde2JwfcvvWIHexH42/4S0mnF13HWsbXSWPwyiW
UnGI3kJiXJbVRsyhMVwINRVi1dW5VXxhl8KoLjiIHKf09+CMsZfxdOSFWXHEQvFK
owJ+j4HM9MvlnQJKrrOtJD2yAbk9rgG1DcQLwFc8zi5eBVUgWy6v0J/LLLp5v1jR
hmit9zrE0C6Ej5PfUBUFe9/4d0N9VBBxhOnB5ouPi/mvkDH+dBMBx/v4JqD3DcnO
6Jt6aS1zXpwMPDFHPCQW
-----END CERTIFICATE-----
Generated at Sun May 11 10:16:06 2025 by rpki-client