Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Kjj1PFgdxWrn9icX0ncL0yYzo6Y.roa
File: Kjj1PFgdxWrn9icX0ncL0yYzo6Y.roa (raw, json)
Hash identifier: BnGBHXPVc8IVOeVlYqNHwJMTowIQPGvDHpMjEcNMsvg=
Subject key identifier: 2A:38:F5:3C:58:1D:C5:6A:E7:F6:27:17:D2:77:0B:D3:26:33:A3:A6
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 019686E3FD3D3B1F038A96252A79E5CF983B
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Kjj1PFgdxWrn9icX0ncL0yYzo6Y.roa
Signing time: Wed 30 Apr 2025 13:30:10 +0000
ROA not before: Wed 30 Apr 2025 13:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3302
IP address blocks: 5.150.128.0/20 maxlen: 20
62.94.0.0/16 maxlen: 24
81.92.32.0/20 maxlen: 20
83.211.0.0/16 maxlen: 24
128.65.112.0/20 maxlen: 20
185.58.44.0/22 maxlen: 22
185.82.0.0/22 maxlen: 22
194.20.0.0/16 maxlen: 24
194.21.0.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
194.153.208.0/22 maxlen: 24
195.62.224.0/19 maxlen: 24
212.90.0.0/19 maxlen: 24
212.110.0.0/19 maxlen: 24
213.136.128.0/18 maxlen: 24
213.149.192.0/19 maxlen: 19
213.183.128.0/19 maxlen: 19
213.198.128.0/18 maxlen: 24
217.15.208.0/20 maxlen: 24
217.29.160.0/20 maxlen: 20
2001:750::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:e3:fd:3d:3b:1f:03:8a:96:25:2a:79:e5:cf:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Apr 30 13:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a38f53c581dc56ae7f62717d2770bd32633a3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:7c:c5:6a:a3:28:b0:28:41:c1:09:1f:46:
b8:65:b5:eb:3e:fe:e0:3d:75:3e:41:90:9d:71:0e:
6d:6e:20:a1:bb:81:19:8a:74:cf:00:f2:67:20:cc:
55:3c:dc:2e:ab:da:ae:0a:48:35:5c:6f:3d:ec:4d:
c8:73:35:b1:fd:3b:20:56:a0:c3:d7:01:5a:12:5f:
ad:4a:e3:72:e7:59:4c:f7:f4:05:14:7a:d9:76:14:
e9:40:f9:ea:c1:11:62:b4:ad:9b:7a:dd:cd:2a:d0:
bf:ea:e5:1f:34:dc:3f:37:a6:6d:f4:03:de:09:71:
16:ef:fe:1a:00:a8:65:fa:7d:e4:ec:b3:36:9a:de:
7c:d6:e4:72:fd:0d:e4:86:6b:01:c2:90:a4:e9:48:
9d:d5:42:70:5d:51:b7:02:34:00:e5:e7:66:18:95:
ad:16:b5:24:e4:a1:be:40:97:61:67:ad:77:87:dc:
48:4d:3e:d3:cc:20:20:6b:a1:1c:6f:7f:6d:ac:4c:
60:db:44:fb:c7:b1:7c:b1:af:fa:bd:2f:84:5c:33:
02:bd:91:9b:6a:20:e6:9d:0b:1b:d8:b2:f2:dd:fd:
dc:7f:69:ba:79:7f:6b:32:07:c9:0d:b4:84:aa:76:
97:1b:3b:10:c8:cd:a5:97:fe:2b:06:70:dd:ea:5e:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:F5:3C:58:1D:C5:6A:E7:F6:27:17:D2:77:0B:D3:26:33:A3:A6
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/Kjj1PFgdxWrn9icX0ncL0yYzo6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.128.0/20
62.94.0.0/16
81.92.32.0/20
83.211.0.0/16
128.65.112.0/20
185.58.44.0/22
185.82.0.0/22
194.20.0.0-194.21.63.255
194.153.192.0-194.153.211.255
195.62.224.0/19
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.149.192.0/19
213.183.128.0/19
213.198.128.0/18
217.15.208.0/20
217.29.160.0/20
IPv6:
2001:750::/29
Signature Algorithm: sha256WithRSAEncryption
c3:83:d8:98:47:b0:ed:80:9d:47:09:e4:45:21:35:75:24:6d:
85:81:9a:d4:80:bf:60:59:11:c9:c8:33:3c:c6:ef:a1:2d:a4:
9c:8e:a2:d7:59:03:72:b9:45:28:8c:1a:54:2d:9a:a4:a4:e6:
cf:c4:f3:b7:62:b7:d6:93:0a:b8:ff:1f:fc:4c:d5:73:ca:7f:
2b:d0:d2:07:e5:68:85:cd:c3:b4:b0:55:9b:e8:b8:a1:1b:9a:
36:2b:65:ea:b2:76:8b:3f:c9:cd:d0:8b:b3:74:e4:a3:49:32:
11:6b:42:d9:a8:29:4c:59:4f:3b:c5:b0:2f:9c:8c:e3:fc:51:
d4:0f:78:7c:c1:88:b1:90:99:fb:27:66:37:18:c1:b1:ad:3d:
78:26:2e:ed:93:4b:33:e1:78:96:4b:e3:54:d7:83:89:36:d8:
72:1b:60:74:50:e2:1e:2a:e9:f5:67:f7:ed:93:3f:72:1b:ae:
c9:52:88:ab:0d:11:70:39:34:da:76:53:1e:fc:75:7e:c8:fc:
3f:9f:c2:bc:78:f6:eb:3f:3b:96:cf:48:97:f8:39:70:1a:86:
5a:20:79:93:f2:1b:95:b1:c2:84:78:1f:2a:2f:fb:89:89:c6:
d1:d2:42:48:44:86:1c:b4:9f:82:82:c4:e5:a3:f8:dd:7f:79:
09:95:c0:f7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZaG4/09Ox8DipYlKnnlz5g7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjUwNDMwMTMzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTM4ZjUzYzU4MWRjNTZhZTdmNjI3MTdkMjc3MGJkMzI2MzNhM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OZ8xWqjKLAoQcEJH0a4ZbXrPv7g
PXU+QZCdcQ5tbiChu4EZinTPAPJnIMxVPNwuq9quCkg1XG897E3IczWx/TsgVqDD
1wFaEl+tSuNy51lM9/QFFHrZdhTpQPnqwRFitK2bet3NKtC/6uUfNNw/N6Zt9APe
CXEW7/4aAKhl+n3k7LM2mt581uRy/Q3khmsBwpCk6Uid1UJwXVG3AjQA5edmGJWt
FrUk5KG+QJdhZ613h9xITT7TzCAga6Ecb39trExg20T7x7F8sa/6vS+EXDMCvZGb
aiDmnQsb2LLy3f3cf2m6eX9rMgfJDbSEqnaXGzsQyM2ll/4rBnDd6l6dZwIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFCo49TxYHcVq5/YnF9J3C9MmM6OmMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvS2pqMVBGZ2R4V3JuOWljWDBuY0wweVl6bzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDB/BAIAATB5AwQEBZaA
AwMAPl4DBARRXCADAwBT0wMEBIBBcAMEArk6LAMEArlSADALAwMCwhQDBAbCFQAw
DAMEBsKZwAMEAsKZ0AMEBcM+4AMEBdRaAAMEBdRuAAMEBtWIgAMEBdWVwAMEBdW3
gAMEBtXGgAMEBNkP0AMEBNkdoDANBAIAAjAHAwUDIAEHUDANBgkqhkiG9w0BAQsF
AAOCAQEAw4PYmEew7YCdRwnkRSE1dSRthYGa1IC/YFkRycgzPMbvoS2knI6i11kD
crlFKIwaVC2apKTmz8Tzt2K31pMKuP8f/EzVc8p/K9DSB+Vohc3DtLBVm+i4oRua
Nitl6rJ2iz/JzdCLs3Tko0kyEWtC2agpTFlPO8WwL5yM4/xR1A94fMGIsZCZ+ydm
NxjBsa09eCYu7ZNLM+F4lkvjVNeDiTbYchtgdFDiHirp9Wf37ZM/chuuyVKIqw0R
cDk02nZTHvx1fsj8P5/CvHj26z87ls9Il/g5cBqGWiB5k/IblbHChHgfKi/7iYnG
0dJCSESGHLSfgoLE5aP43X95CZXA9w==
-----END CERTIFICATE-----
Generated at Fri May 2 08:09:25 2025 by rpki-client