Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PTyLylt9jqAfDORXscJxok5UVVM.roa
File: PTyLylt9jqAfDORXscJxok5UVVM.roa (raw, json)
Hash identifier: eS2/ZwCZMRI+73/ZC8Upeu9CjUfCUtbzcux4ufwQ2q4=
Subject key identifier: 3D:3C:8B:CA:5B:7D:8E:A0:1F:0C:E4:57:B1:C2:71:A2:4E:54:55:53
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01966AB024463F3102AE1CF5250DF6F38D46
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PTyLylt9jqAfDORXscJxok5UVVM.roa
Signing time: Fri 25 Apr 2025 02:04:10 +0000
ROA not before: Fri 25 Apr 2025 02:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.83.139.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
83.243.86.0/24 maxlen: 24
85.118.167.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.106.91.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.103.168.0/24 maxlen: 24
94.249.173.0/24 maxlen: 24
94.249.194.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6a:b0:24:46:3f:31:02:ae:1c:f5:25:0d:f6:f3:8d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 25 02:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3c8bca5b7d8ea01f0ce457b1c271a24e545553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:24:3f:37:4c:57:8f:ec:7e:37:8c:26:24:
b4:d8:5e:c8:7a:98:a1:89:e4:ac:bf:71:b2:bf:c4:
46:4d:b6:ed:3b:20:9b:d2:3a:34:47:eb:e7:56:cb:
75:22:10:c0:7a:53:6b:dd:35:2d:6f:59:51:8b:bd:
64:29:54:d2:42:7b:b3:96:53:4a:c1:19:56:43:75:
79:3c:56:b6:66:62:bd:ab:82:7b:27:d3:06:7f:5f:
08:8b:81:f5:c3:9b:f8:1b:bf:be:e8:0c:80:0d:45:
f0:04:9d:4c:89:bf:3f:f6:0f:ce:d9:93:e6:45:16:
12:93:40:e1:fc:e2:98:1b:71:49:0a:d0:96:83:1a:
f7:38:f2:9b:d1:99:19:5b:80:2d:57:11:17:4f:84:
7e:98:63:c3:f4:26:26:3f:8b:1e:6e:4f:e1:61:e8:
7d:64:8f:7e:79:d9:13:d6:b6:c3:61:38:0b:73:41:
61:29:26:05:22:70:b7:9b:84:cf:99:fe:86:14:82:
f1:52:b4:75:04:fb:63:cc:1d:ec:5f:90:45:f5:2a:
9a:8f:42:e5:1d:16:d2:9b:a2:31:d8:8c:21:b4:be:
2b:5b:be:9f:e8:45:c7:f5:80:ee:71:e6:87:85:9f:
41:c2:bc:4f:91:72:2c:fa:44:7b:fb:cb:3e:59:b9:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:8B:CA:5B:7D:8E:A0:1F:0C:E4:57:B1:C2:71:A2:4E:54:55:53
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PTyLylt9jqAfDORXscJxok5UVVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
5.231.105.0/24
5.231.115.0/24
77.90.7.0/24
83.243.86.0/24
85.118.167.0/24
87.239.129.0/24
89.106.91.0/24
89.144.3.0/24
94.103.168.0/24
94.249.173.0/24
94.249.194.0/24
94.249.233.0/24
94.249.238.0/24
95.215.33.0/24
Signature Algorithm: sha256WithRSAEncryption
df:33:4f:8c:f3:59:f4:61:04:7b:6f:56:af:f7:a2:c5:fc:eb:
b0:c2:4a:b5:8a:ab:a2:31:65:65:fe:e1:8b:ca:67:81:10:ce:
19:18:a4:34:85:38:df:66:75:9b:47:9e:8f:df:a3:e6:7b:2a:
f9:cf:a9:96:64:c1:33:71:a4:33:28:62:69:65:34:d2:fc:34:
5a:5d:6a:f1:e1:3a:b4:f7:7d:00:95:e8:81:21:71:68:9b:27:
34:f2:2c:9c:36:e0:ad:cd:44:26:ea:7c:b4:58:62:46:f7:e9:
38:d3:46:16:a3:b8:f2:00:dd:51:c0:5e:88:23:1e:59:ae:32:
b0:45:1f:0e:87:75:30:24:f2:03:74:8a:3d:a7:ab:91:9e:5c:
d9:fb:14:84:61:9e:38:b6:1f:87:6f:8f:e7:90:64:18:0f:8c:
d6:19:d3:89:c7:74:e6:b2:7b:2c:1e:69:55:e7:99:8b:42:72:
9f:d4:ea:57:14:a1:80:59:ed:33:22:55:e5:99:1d:bb:41:82:
b6:c9:ee:7e:b8:f4:80:12:6d:af:1f:1c:50:cb:5b:0c:3c:11:
bc:74:32:64:58:a4:a0:a0:cd:eb:6a:02:4f:d7:89:92:53:ee:
09:f7:3c:74:a0:14:5c:58:bf:64:55:4f:ea:2a:ca:72:be:98:
e8:6e:28:b9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZZqsCRGPzECrhz1JQ32841GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDI1MDIwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDNjOGJjYTViN2Q4ZWEwMWYwY2U0NTdiMWMyNzFhMjRlNTQ1NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xEkPzdMV4/sfjeMJiS02F7Iepih
ieSsv3Gyv8RGTbbtOyCb0jo0R+vnVst1IhDAelNr3TUtb1lRi71kKVTSQnuzllNK
wRlWQ3V5PFa2ZmK9q4J7J9MGf18Ii4H1w5v4G7++6AyADUXwBJ1Mib8/9g/O2ZPm
RRYSk0Dh/OKYG3FJCtCWgxr3OPKb0ZkZW4AtVxEXT4R+mGPD9CYmP4sebk/hYeh9
ZI9+edkT1rbDYTgLc0FhKSYFInC3m4TPmf6GFILxUrR1BPtjzB3sX5BF9Sqaj0Ll
HRbSm6Ix2IwhtL4rW76f6EXH9YDuceaHhZ9BwrxPkXIs+kR7+8s+WblztQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFD08i8pbfY6gHwzkV7HCcaJOVFVTMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUFR5THlsdDlqcUFmRE9SWHNjSnhvazVVVlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQABVOLAwQA
BedpAwQABedzAwQATVoHAwQAU/NWAwQAVXanAwQAV++BAwQAWWpbAwQAWZADAwQA
XmeoAwQAXvmtAwQAXvnCAwQAXvnpAwQAXvnuAwQAX9chMA0GCSqGSIb3DQEBCwUA
A4IBAQDfM0+M81n0YQR7b1av96LF/Ouwwkq1iquiMWVl/uGLymeBEM4ZGKQ0hTjf
ZnWbR56P36Pmeyr5z6mWZMEzcaQzKGJpZTTS/DRaXWrx4Tq0930AleiBIXFomyc0
8iycNuCtzUQm6ny0WGJG9+k400YWo7jyAN1RwF6IIx5ZrjKwRR8Oh3UwJPIDdIo9
p6uRnlzZ+xSEYZ44th+Hb4/nkGQYD4zWGdOJx3TmsnssHmlV55mLQnKf1OpXFKGA
We0zIlXlmR27QYK2ye5+uPSAEm2vHxxQy1sMPBG8dDJkWKSgoM3ragJP14mSU+4J
9zx0oBRcWL9kVU/qKspyvpjobii5
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:23:40 2025 by rpki-client