Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/hAIfnfjaKDnBZe_kC7FVwx1QMuA.roa
File: hAIfnfjaKDnBZe_kC7FVwx1QMuA.roa (raw, json)
Hash identifier: 28LijweuR0v3kdcfazkSP36utyc5j9zhZ5VcP5Ag5ns=
Subject key identifier: 84:02:1F:9D:F8:DA:28:39:C1:65:EF:E4:0B:B1:55:C3:1D:50:32:E0
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0197782592E9A40441BFF229F7F1747FBA18
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/hAIfnfjaKDnBZe_kC7FVwx1QMuA.roa
Signing time: Mon 16 Jun 2025 09:50:17 +0000
ROA not before: Mon 16 Jun 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:25:92:e9:a4:04:41:bf:f2:29:f7:f1:74:7f:ba:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jun 16 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84021f9df8da2839c165efe40bb155c31d5032e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:59:f7:d2:86:b2:ee:44:75:d8:9a:23:e3:
c2:3c:27:a6:87:bd:1f:74:72:ab:e8:b6:60:3a:be:
2f:5c:83:e4:b9:1f:03:58:02:0d:fc:26:e8:92:63:
53:ba:a9:f6:16:8c:d7:43:cb:39:dd:79:bf:45:63:
f5:e0:b2:58:08:9b:e7:13:ba:5e:b3:1e:04:c2:61:
41:da:3f:9c:1f:08:00:75:e1:c3:ad:ee:05:e6:f1:
53:65:0d:a3:43:0e:20:af:70:41:b0:ae:cc:bf:6c:
0b:2f:4d:5d:fa:dd:1e:9d:bb:02:f6:9a:1b:48:21:
56:a0:c3:7d:27:e1:a9:8a:89:b4:9b:3b:df:fd:ba:
8d:ba:02:4f:0d:d6:f5:c5:05:d7:89:60:55:fc:03:
85:a7:07:f5:9a:28:6d:e5:96:a0:3c:ac:65:33:e7:
34:a6:a9:46:9c:e9:73:65:ec:d4:3c:83:af:f4:d3:
ea:e7:5b:b5:12:f9:51:42:72:d1:e1:8a:65:2e:77:
2f:a1:36:5c:40:eb:eb:da:31:9a:5f:34:23:c0:fb:
73:3b:50:ad:9e:27:ec:ac:f4:5a:68:d1:ee:e3:a8:
57:bd:20:b2:a9:67:07:45:39:91:2f:a1:47:a6:26:
23:23:75:d5:97:08:0e:90:c6:e9:bd:d7:50:9a:99:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:1F:9D:F8:DA:28:39:C1:65:EF:E4:0B:B1:55:C3:1D:50:32:E0
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/hAIfnfjaKDnBZe_kC7FVwx1QMuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
3b:e1:2c:6f:6f:77:52:5b:6d:b3:df:1f:b8:b6:ec:bb:86:cb:
7e:0b:9d:8e:81:b2:31:4c:12:16:96:e7:b1:ea:41:67:58:1d:
b8:18:74:0e:fe:75:77:ec:5e:e4:87:ef:22:1d:dc:85:fc:45:
07:ef:e0:53:dc:dd:bd:e3:9a:35:0e:b4:f6:c3:d5:bc:d1:e3:
d0:86:71:f9:72:29:ce:0e:e1:6a:a9:06:d9:80:dd:0e:df:d1:
a4:66:a6:20:ef:f1:44:3a:8f:ed:2c:23:b0:37:8a:5a:82:e6:
05:a3:fc:d9:4e:4a:01:db:06:d7:2c:0a:7f:7f:07:ef:3f:8e:
cc:90:80:fb:a4:37:cd:2a:c3:67:31:53:2a:df:f3:7c:82:00:
8a:5a:ea:1b:12:80:0b:46:c4:51:31:30:b3:e9:ba:4a:33:22:
05:ac:45:aa:c7:1b:0c:0e:7e:d0:04:63:fc:d4:82:ea:86:7c:
d6:61:86:7d:9c:8d:74:01:18:f7:1d:ad:a7:4f:58:8a:67:4b:
83:98:b0:79:f2:b6:71:fb:c7:17:23:07:7b:84:e8:24:fa:bb:
f7:cb:ac:a8:90:de:50:a5:6a:45:fa:31:b9:e1:79:a3:a4:96:
21:df:d0:f1:e9:8c:96:11:7b:79:40:02:ca:db:c6:77:42:f2:
06:c7:50:a5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZd4JZLppARBv/Ip9/F0f7oYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjUwNjE2MDk1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDAyMWY5ZGY4ZGEyODM5YzE2NWVmZTQwYmIxNTVjMzFkNTAzMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ZZ99KGsu5EddiaI+PCPCemh70f
dHKr6LZgOr4vXIPkuR8DWAIN/CbokmNTuqn2FozXQ8s53Xm/RWP14LJYCJvnE7pe
sx4EwmFB2j+cHwgAdeHDre4F5vFTZQ2jQw4gr3BBsK7Mv2wLL01d+t0enbsC9pob
SCFWoMN9J+Gpiom0mzvf/bqNugJPDdb1xQXXiWBV/AOFpwf1miht5ZagPKxlM+c0
pqlGnOlzZezUPIOv9NPq51u1EvlRQnLR4YplLncvoTZcQOvr2jGaXzQjwPtzO1Ct
nifsrPRaaNHu46hXvSCyqWcHRTmRL6FHpiYjI3XVlwgOkMbpvddQmpmjSQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFIQCH5342ig5wWXv5AuxVcMdUDLgMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvaEFJZm5mamFLRG5CWmVfa0M3RlZ3eDFRTXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD
BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN
AQELBQADggEBADvhLG9vd1JbbbPfH7i27LuGy34LnY6BsjFMEhaW57HqQWdYHbgY
dA7+dXfsXuSH7yId3IX8RQfv4FPc3b3jmjUOtPbD1bzR49CGcflyKc4O4WqpBtmA
3Q7f0aRmpiDv8UQ6j+0sI7A3ilqC5gWj/NlOSgHbBtcsCn9/B+8/jsyQgPukN80q
w2cxUyrf83yCAIpa6hsSgAtGxFExMLPpukozIgWsRarHGwwOftAEY/zUguqGfNZh
hn2cjXQBGPcdradPWIpnS4OYsHnytnH7xxcjB3uE6CT6u/fLrKiQ3lClakX6Mbnh
eaOkliHf0PHpjJYRe3lAAsrbxndC8gbHUKU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:33 2025 by rpki-client