Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nQew7zcJYy17B_RmzG1uxHPS-_c.roa
File: nQew7zcJYy17B_RmzG1uxHPS-_c.roa (raw, json)
Hash identifier: Ks4d7xnqX975Red5aPockRetcq/yAysN/sp3+Q2OMxw=
Subject key identifier: 9D:07:B0:EF:37:09:63:2D:7B:07:F4:66:CC:6D:6E:C4:73:D2:FB:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019744BF9E97FF581A29687FDEBEBEED1AB6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nQew7zcJYy17B_RmzG1uxHPS-_c.roa
Signing time: Fri 06 Jun 2025 10:18:18 +0000
ROA not before: Fri 06 Jun 2025 10:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:bf:9e:97:ff:58:1a:29:68:7f:de:be:be:ed:1a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 10:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d07b0ef3709632d7b07f466cc6d6ec473d2fbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:1d:ff:23:cb:c1:6b:2a:c5:8a:34:08:4d:
a9:8b:e8:0f:3f:20:f6:f4:bc:76:49:52:a8:9f:51:
62:29:8f:6f:56:59:32:85:5f:d1:64:8f:0f:d6:f8:
57:75:6e:15:7e:34:a8:01:ca:e8:de:86:fa:fe:10:
08:b5:ea:9d:ec:e5:6f:9e:e6:5c:3e:3c:58:12:38:
46:08:6b:3c:3a:eb:00:da:cc:cc:46:26:96:7c:3e:
d5:28:75:63:f3:f8:52:13:0c:44:50:54:6a:a9:ea:
1a:e5:20:95:42:79:0d:02:4f:92:59:0b:49:66:8f:
a6:0f:9a:9c:28:52:38:8c:d5:66:f2:9a:b3:fd:49:
40:b7:6e:27:e4:32:1d:3f:a1:cd:c1:f1:83:3f:d5:
28:77:e2:b8:bb:32:7d:45:a1:16:ce:b5:bc:d7:db:
80:fd:4e:6d:16:ad:5e:91:2e:46:de:36:a0:2e:e7:
79:aa:1a:fd:2c:8c:14:82:78:ad:30:96:16:5f:84:
64:c1:d5:55:39:5d:ef:c8:73:b3:bb:60:d0:3c:61:
84:31:cf:d2:fc:07:4f:f4:4d:75:0e:ed:17:b0:3e:
3a:b4:07:bf:60:68:47:57:ed:da:4d:8c:b7:c9:29:
10:dc:e2:2f:3d:fa:bc:1a:c6:14:56:3a:ac:63:ae:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:B0:EF:37:09:63:2D:7B:07:F4:66:CC:6D:6E:C4:73:D2:FB:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nQew7zcJYy17B_RmzG1uxHPS-_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:4d:e9:08:31:6c:46:8a:49:ca:a2:d8:c0:b7:56:e4:28:30:
95:6f:f8:5f:8f:8b:ff:16:79:45:54:3d:ef:0a:97:2d:82:18:
a9:a6:89:c6:91:7f:4b:1f:1e:5b:63:64:64:00:70:d4:7f:de:
12:fc:14:d5:be:2b:f5:ac:fe:2c:aa:cd:04:f3:9a:d5:3f:62:
d4:ce:d0:c8:01:de:c9:d9:e6:17:5d:45:a0:ba:f2:4a:19:33:
79:83:61:26:4a:5f:54:df:41:4d:3b:13:42:6f:f4:30:2c:6e:
87:68:19:04:d6:be:84:93:8a:4e:56:bc:ff:f1:d6:cc:5f:45:
bf:53:68:34:00:b3:25:ec:ba:2a:bc:3b:c7:95:f8:75:02:a9:
78:65:6d:10:69:f9:b6:24:2b:7c:47:4e:96:76:67:a7:e8:4a:
62:1b:79:e5:6c:1d:ad:4d:da:0a:12:8b:16:2f:ce:83:5a:04:
b8:78:85:91:fc:91:1f:22:21:a9:7b:12:01:37:8e:3e:97:dd:
80:db:a0:dd:8e:b7:bf:ef:d8:b1:f1:84:60:9b:d1:89:35:c9:
97:94:ab:d2:a8:0b:7e:39:0a:08:f4:22:23:0e:30:ce:42:1b:
23:a5:72:a7:66:08:ab:70:4b:e2:eb:94:f7:92:7e:57:36:6e:
3a:19:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:37 2025 by rpki-client