Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CPKskOAtzA-egJ2CR-qs28FaTns.roa
File: CPKskOAtzA-egJ2CR-qs28FaTns.roa (raw, json)
Hash identifier: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=
Subject key identifier: 08:F2:AC:90:E0:2D:CC:0F:9E:80:9D:82:47:EA:AC:DB:C1:5A:4E:7B
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019710537774F6B6E46D70D7FA84B0913184
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CPKskOAtzA-egJ2CR-qs28FaTns.roa
Signing time: Tue 27 May 2025 05:59:54 +0000
ROA not before: Tue 27 May 2025 05:59:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211871
IP address blocks: 213.238.170.0/24 maxlen: 24
213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
213.238.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:77:74:f6:b6:e4:6d:70:d7:fa:84:b0:91:31:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 27 05:59:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08f2ac90e02dcc0f9e809d8247eaacdbc15a4e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:95:b0:ac:85:8f:0a:b2:80:68:df:03:9f:
13:40:6f:79:15:4b:5b:3c:a3:60:9e:ac:a6:cd:53:
dd:51:0b:5d:d8:05:59:bd:5d:ad:16:ed:a0:2e:16:
9d:10:77:8b:0a:ff:a0:99:22:49:20:b5:b4:33:e0:
34:ce:9b:79:ab:e7:35:72:e0:75:90:ec:cb:e8:be:
ce:2d:48:e6:73:1d:f2:5d:19:e8:e0:c2:ec:83:af:
f7:7e:fd:40:d5:9e:5b:46:ae:8e:56:bd:9d:06:03:
7f:8c:31:32:b1:f0:0b:1d:f6:55:d1:f2:d9:1e:bb:
eb:0e:2b:26:08:cc:b0:84:be:03:1f:cc:4e:ad:be:
67:be:71:0c:43:5f:89:99:b2:5b:ee:4c:aa:9a:d8:
fa:13:15:1e:91:a3:08:7a:98:db:36:29:2d:33:a2:
29:9b:c2:a0:e2:fa:ad:d9:a1:fd:bb:ea:ef:6d:3c:
06:f6:ba:5c:2f:ea:b0:40:64:1a:3e:31:1b:bc:50:
96:4f:ca:7a:99:5d:62:a9:a0:69:a6:63:63:66:64:
75:b9:8a:7c:a3:70:be:4f:43:e5:78:fb:bd:87:35:
79:a5:78:b7:09:11:9d:1e:ea:59:f1:92:fc:f5:9b:
df:b6:d8:88:c8:e7:1f:c0:d5:c0:84:c6:0f:69:d1:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:AC:90:E0:2D:CC:0F:9E:80:9D:82:47:EA:AC:DB:C1:5A:4E:7B
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CPKskOAtzA-egJ2CR-qs28FaTns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.170.0/24
213.238.179.0/24
213.238.181.0/24
213.238.190.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2c:f1:8a:10:b4:ae:57:f6:51:a0:b6:a0:64:bb:ab:17:8a:
17:5f:35:c1:f1:87:11:e4:9d:bf:e8:a3:c5:c5:b9:af:a1:b9:
4e:6d:71:a7:f0:46:28:93:80:e6:a3:e1:62:ff:13:3f:8e:06:
a6:8e:4d:48:9b:51:81:11:5f:75:c6:88:38:cd:79:ed:c4:a4:
16:6c:ca:e0:1b:b7:2a:f7:c7:45:c0:d0:85:c9:9c:e1:fc:85:
0e:90:af:b6:86:ce:8e:4e:3d:6a:9b:00:14:35:32:45:77:57:
a9:b7:93:45:0b:97:41:70:ee:f3:d3:27:e4:34:bb:43:f8:6f:
c3:e5:d1:e4:05:3b:09:c3:9b:68:1c:e3:a2:60:b7:a0:78:73:
da:06:c7:0a:fa:48:ee:b9:2c:b4:57:14:06:9e:cc:e9:e8:c4:
be:41:2b:e3:63:7d:82:c6:12:bd:82:4b:df:7d:eb:77:2b:56:
4e:04:40:d4:06:95:0b:cf:af:d6:ac:56:33:fb:7f:6f:91:61:
f0:43:bf:cc:ff:e3:b6:2f:ed:01:07:e2:e8:af:3e:3c:bb:34:
b7:df:7d:62:9a:3f:37:c4:aa:86:03:55:b1:fd:7e:ff:0e:00:
3c:87:88:a5:fb:c0:c6:6c:6e:f2:0e:96:07:4c:19:73:61:d6:
fe:33:26:41
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZcQU3d09rbkbXDX+oSwkTGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwNTI3MDU1OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGYyYWM5MGUwMmRjYzBmOWU4MDlkODI0N2VhYWNkYmMxNWE0ZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx+VsKyFjwqygGjfA58TQG95FUtb
PKNgnqymzVPdUQtd2AVZvV2tFu2gLhadEHeLCv+gmSJJILW0M+A0zpt5q+c1cuB1
kOzL6L7OLUjmcx3yXRno4MLsg6/3fv1A1Z5bRq6OVr2dBgN/jDEysfALHfZV0fLZ
HrvrDismCMywhL4DH8xOrb5nvnEMQ1+JmbJb7kyqmtj6ExUekaMIepjbNiktM6Ip
m8Kg4vqt2aH9u+rvbTwG9rpcL+qwQGQaPjEbvFCWT8p6mV1iqaBppmNjZmR1uYp8
o3C+T0PlePu9hzV5pXi3CRGdHupZ8ZL89ZvfttiIyOcfwNXAhMYPadEpXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAjyrJDgLcwPnoCdgkfqrNvBWk57MB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvQ1BLc2tPQXR6QS1lZ0oyQ1ItcXMyOEZhVG5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1e6qAwQA
1e6zAwQA1e61AwQA1e6+MA0GCSqGSIb3DQEBCwUAA4IBAQB2LPGKELSuV/ZRoLag
ZLurF4oXXzXB8YcR5J2/6KPFxbmvoblObXGn8EYok4Dmo+Fi/xM/jgamjk1Im1GB
EV91xog4zXntxKQWbMrgG7cq98dFwNCFyZzh/IUOkK+2hs6OTj1qmwAUNTJFd1ep
t5NFC5dBcO7z0yfkNLtD+G/D5dHkBTsJw5toHOOiYLegeHPaBscK+kjuuSy0VxQG
nszp6MS+QSvjY32CxhK9gkvffet3K1ZOBEDUBpULz6/WrFYz+39vkWHwQ7/M/+O2
L+0BB+Lorz48uzS3331imj83xKqGA1Wx/X7/DgA8h4il+8DGbG7yDpYHTBlzYdb+
MyZB
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:01 2025 by rpki-client