Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/re1d3zENTmY783i31gdyUHSlGtY.roa
File: re1d3zENTmY783i31gdyUHSlGtY.roa (raw, json)
Hash identifier: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=
Subject key identifier: AD:ED:5D:DF:31:0D:4E:66:3B:F3:78:B7:D6:07:72:50:74:A5:1A:D6
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0196B3C146F07A88B6BF27EBC87BF7112FF1
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/re1d3zENTmY783i31gdyUHSlGtY.roa
Signing time: Fri 09 May 2025 06:35:10 +0000
ROA not before: Fri 09 May 2025 06:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 77.95.120.0/21 maxlen: 21
85.118.216.0/21 maxlen: 21
185.63.149.0/24 maxlen: 24
185.63.150.0/23 maxlen: 23
212.103.64.0/19 maxlen: 19
212.103.64.0/24 maxlen: 24
212.103.65.0/24 maxlen: 24
217.11.208.0/20 maxlen: 20
217.146.160.0/20 maxlen: 20
217.146.165.0/24 maxlen: 24
2a00:c38::/32 maxlen: 32
2a00:c38:1a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:c1:46:f0:7a:88:b6:bf:27:eb:c8:7b:f7:11:2f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: May 9 06:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aded5ddf310d4e663bf378b7d607725074a51ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:6d:fc:22:b1:a2:96:a5:bf:da:a1:0d:83:
fd:fb:b0:a8:32:a0:bc:b6:c0:a3:d4:3e:a3:71:65:
d6:d6:95:9a:b1:91:46:d2:3e:22:cb:64:86:c7:87:
5a:97:0a:26:0b:e0:a6:ca:54:7a:7e:39:ce:11:ca:
e4:dc:68:9e:f6:1a:85:92:e8:4a:4f:3e:39:04:5e:
63:97:f8:fc:b4:39:2d:20:f9:74:1c:75:e3:2d:77:
61:39:c4:8e:c4:68:9f:b3:00:ce:10:5f:79:d2:a4:
d5:06:61:87:af:ed:8a:af:49:60:af:77:5d:16:19:
8b:05:7b:10:6b:54:37:4b:39:8e:aa:88:ad:f2:2a:
81:ec:c9:8b:c1:65:de:68:fe:7c:84:51:42:13:c1:
56:85:5a:cb:b3:d9:35:96:eb:a0:c5:48:91:16:7e:
42:61:f0:2d:04:f0:95:2a:1b:15:56:96:37:d5:14:
9f:ff:06:4a:bf:36:85:83:cd:2a:d6:f1:fc:39:22:
87:50:b2:58:f3:26:31:7f:00:4e:c3:c1:1c:59:08:
ee:b5:03:d0:83:ba:d8:de:d2:55:8a:f1:ff:9a:0a:
a3:33:65:cf:09:e6:fb:66:5f:8e:8c:6b:7e:9c:18:
2b:f3:0d:df:e6:a4:79:c0:85:af:4e:2d:21:95:d6:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:5D:DF:31:0D:4E:66:3B:F3:78:B7:D6:07:72:50:74:A5:1A:D6
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/re1d3zENTmY783i31gdyUHSlGtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/21
85.118.216.0/21
185.63.149.0-185.63.151.255
212.103.64.0/19
217.11.208.0/20
217.146.160.0/20
IPv6:
2a00:c38::/32
Signature Algorithm: sha256WithRSAEncryption
1d:37:bc:00:c8:5c:1f:59:67:3d:db:4d:cd:49:fb:8d:f7:80:
d4:cc:ff:47:38:eb:fa:62:2b:d6:c2:95:a0:f1:c4:d9:51:7b:
98:56:38:45:04:9f:1f:06:60:ff:31:e4:e5:fd:d1:c8:1d:80:
a1:6d:4b:66:85:c7:04:63:c1:be:38:df:16:b0:08:d8:47:6c:
3e:65:dd:9c:4a:00:50:42:ac:2a:4c:c4:ed:49:f0:2d:e8:86:
71:bf:1f:39:4b:24:aa:06:ea:e8:92:f5:71:86:48:d4:3a:ed:
64:4f:ea:29:d0:59:0b:7e:bd:99:02:dd:8f:bb:b6:a5:0b:a6:
73:02:ca:e0:79:79:11:7d:88:bf:72:5b:b2:52:e1:a2:34:1d:
7d:f6:7d:b1:31:e6:b5:d8:61:dd:22:93:a5:94:83:52:c7:3d:
ff:28:90:13:92:90:16:47:e0:07:2a:e1:81:8c:92:92:8d:a7:
39:bc:88:c1:de:42:e2:a0:4a:0f:9e:f7:73:1b:47:c4:f0:07:
c0:1a:85:52:d7:3b:ac:c5:cb:0a:b3:3e:ba:1d:41:2a:a2:e1:
a6:fc:9d:4b:74:4a:a8:24:fd:0d:52:70:7e:b8:3a:75:f0:93:
6a:53:90:a3:96:d9:7a:f5:9c:7e:f4:64:27:c0:8f:fd:7b:20:
eb:d2:d3:0f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZazwUbweoi2vyfryHv3ES/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm
ZDUzYWUwHhcNMjUwNTA5MDYzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGVkNWRkZjMxMGQ0ZTY2M2JmMzc4YjdkNjA3NzI1MDc0YTUxYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm9t/CKxopalv9qhDYP9+7CoMqC8
tsCj1D6jcWXW1pWasZFG0j4iy2SGx4dalwomC+CmylR6fjnOEcrk3Gie9hqFkuhK
Tz45BF5jl/j8tDktIPl0HHXjLXdhOcSOxGifswDOEF950qTVBmGHr+2Kr0lgr3dd
FhmLBXsQa1Q3SzmOqoit8iqB7MmLwWXeaP58hFFCE8FWhVrLs9k1luugxUiRFn5C
YfAtBPCVKhsVVpY31RSf/wZKvzaFg80q1vH8OSKHULJY8yYxfwBOw8EcWQjutQPQ
g7rY3tJVivH/mgqjM2XPCeb7Zl+OjGt+nBgr8w3f5qR5wIWvTi0hldZAnQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFK3tXd8xDU5mO/N4t9YHclB0pRrWMB8GA1UdIwQY
MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt
OGVlMjFiNzRkZDU2LzEvcmUxZDN6RU5UbVk3ODNpMzFnZHlVSFNsR3RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2
LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQDTV94AwQD
VXbYMAwDBAC5P5UDBAO5P5ADBAXUZ0ADBATZC9ADBATZkqAwDQQCAAIwBwMFACoA
DDgwDQYJKoZIhvcNAQELBQADggEBAB03vADIXB9ZZz3bTc1J+433gNTM/0c46/pi
K9bClaDxxNlRe5hWOEUEnx8GYP8x5OX90cgdgKFtS2aFxwRjwb443xawCNhHbD5l
3ZxKAFBCrCpMxO1J8C3ohnG/HzlLJKoG6uiS9XGGSNQ67WRP6inQWQt+vZkC3Y+7
tqULpnMCyuB5eRF9iL9yW7JS4aI0HX32fbEx5rXYYd0ik6WUg1LHPf8okBOSkBZH
4Acq4YGMkpKNpzm8iMHeQuKgSg+e93MbR8TwB8AahVLXO6zFywqzProdQSqi4ab8
nUt0Sqgk/Q1ScH64OnXwk2pTkKOW2Xr1nH70ZCfAj/17IOvS0w8=
-----END CERTIFICATE-----
Generated at Sun May 11 15:30:10 2025 by rpki-client