Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/IPukP71PC08yP8GmcEEZAQV-N6c.roa
File: IPukP71PC08yP8GmcEEZAQV-N6c.roa (raw, json)
Hash identifier: NHeDXoBvplz6YvYpP3kHSplZzqsFWxBjrIGtxetVnNA=
Subject key identifier: 20:FB:A4:3F:BD:4F:0B:4F:32:3F:C1:A6:70:41:19:01:05:7E:37:A7
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01961F4B52254843ABCE03288B419C6EF4FC
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/IPukP71PC08yP8GmcEEZAQV-N6c.roa
Signing time: Thu 10 Apr 2025 10:42:31 +0000
ROA not before: Thu 10 Apr 2025 10:42:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.186.180.0/22 maxlen: 24
46.20.210.0/23 maxlen: 24
82.163.52.0/23 maxlen: 24
92.114.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:4b:52:25:48:43:ab:ce:03:28:8b:41:9c:6e:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 10 10:42:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20fba43fbd4f0b4f323fc1a670411901057e37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:5a:a8:01:b7:3b:c0:bf:f1:3c:8b:fc:b3:
e0:87:8b:e4:d6:5e:69:b2:a4:c5:e0:e0:35:98:5b:
4d:e5:48:18:2f:a5:99:81:bb:a3:63:aa:b2:f4:57:
e9:78:56:15:ca:c6:00:5a:01:3b:4e:68:da:7d:14:
86:c1:1b:be:d4:f8:2d:46:35:50:45:66:d4:b0:e1:
57:ae:25:3b:16:c5:24:1a:7c:6f:ad:4a:52:65:98:
57:f9:e9:fb:c9:2c:87:27:7a:2d:6d:4e:cc:0e:18:
50:5c:b0:4f:aa:a9:28:a8:5a:b1:ec:d7:3d:52:12:
de:e8:30:07:56:40:28:10:c7:c7:70:5d:30:c6:fb:
12:d9:2d:c8:ee:b2:cf:4f:9d:a3:cd:16:89:48:7a:
4c:eb:b9:07:9b:fc:39:e2:72:1d:56:08:8d:41:28:
dd:07:76:f5:f3:9f:4d:de:68:91:03:43:0f:2f:6c:
21:df:d8:0c:12:72:4a:3b:88:3c:02:33:4b:78:9d:
db:dd:3a:e3:9c:7b:b3:c9:4e:a4:d6:b0:5a:ea:57:
a2:12:54:ff:15:92:9f:5a:be:ad:88:51:1b:df:62:
0d:2f:2d:f5:11:22:d1:73:5d:4f:94:56:ce:ea:80:
57:ef:68:37:9e:eb:d5:0c:05:ef:7f:5a:7d:8e:e4:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:A4:3F:BD:4F:0B:4F:32:3F:C1:A6:70:41:19:01:05:7E:37:A7
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/IPukP71PC08yP8GmcEEZAQV-N6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.180.0/22
46.20.210.0/23
82.163.52.0/23
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:69:a3:54:3c:b3:cd:e3:0b:16:64:24:84:3d:69:0b:0f:11:
69:66:3a:09:b5:bd:18:bf:8b:92:61:4e:64:6f:5c:ce:b6:97:
ed:71:31:a3:65:89:ca:8c:c0:56:63:0e:0b:d3:8f:c9:3f:ec:
97:3e:23:69:db:1a:97:2c:07:43:ec:3e:ff:02:73:ab:21:a3:
8d:2d:b1:c3:6a:09:7d:e0:c7:69:22:75:27:59:05:7c:51:cd:
be:f0:b0:b5:69:bb:b1:97:80:3a:8b:c2:07:da:1b:bd:d3:4b:
6d:08:f3:73:5f:da:19:99:33:69:70:01:e6:ef:02:72:0c:81:
c9:03:6c:4a:7c:5b:6b:91:44:e7:48:8b:32:d9:a2:0d:cf:f0:
d0:ef:16:49:8c:4d:c0:5e:f4:7d:55:5d:ef:ba:12:73:bf:a9:
00:1a:ca:88:41:a2:23:8d:ce:5f:2a:3b:16:c0:35:f2:df:c8:
fc:a5:c4:0b:c7:4f:b5:ee:17:4f:f8:33:17:a1:8d:cc:7c:b8:
27:7d:bb:54:8a:6c:f7:ce:29:ce:4e:87:05:77:ee:48:47:83:
de:78:b9:cb:ca:d1:44:41:ed:82:cf:08:6e:d7:a2:8e:26:ad:
aa:21:ea:4c:94:2b:ed:6f:82:01:ad:14:bd:5f:d9:81:fe:58:
b4:cc:17:84
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYfS1IlSEOrzgMoi0GcbvT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwNDEwMTA0MjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGZiYTQzZmJkNGYwYjRmMzIzZmMxYTY3MDQxMTkwMTA1N2UzN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVRaqAG3O8C/8TyL/LPgh4vk1l5p
sqTF4OA1mFtN5UgYL6WZgbujY6qy9FfpeFYVysYAWgE7TmjafRSGwRu+1PgtRjVQ
RWbUsOFXriU7FsUkGnxvrUpSZZhX+en7ySyHJ3otbU7MDhhQXLBPqqkoqFqx7Nc9
UhLe6DAHVkAoEMfHcF0wxvsS2S3I7rLPT52jzRaJSHpM67kHm/w54nIdVgiNQSjd
B3b1859N3miRA0MPL2wh39gMEnJKO4g8AjNLeJ3b3TrjnHuzyU6k1rBa6leiElT/
FZKfWr6tiFEb32INLy31ESLRc11PlFbO6oBX72g3nuvVDAXvf1p9juQLkQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCD7pD+9TwtPMj/BpnBBGQEFfjenMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvSVB1a1A3MVBDMDh5UDhHbWNFRVpBUVYtTjZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCH7q0AwQB
LhTSAwQBUqM0AwQCXHIoMA0GCSqGSIb3DQEBCwUAA4IBAQAKaaNUPLPN4wsWZCSE
PWkLDxFpZjoJtb0Yv4uSYU5kb1zOtpftcTGjZYnKjMBWYw4L04/JP+yXPiNp2xqX
LAdD7D7/AnOrIaONLbHDagl94MdpInUnWQV8Uc2+8LC1abuxl4A6i8IH2hu900tt
CPNzX9oZmTNpcAHm7wJyDIHJA2xKfFtrkUTnSIsy2aINz/DQ7xZJjE3AXvR9VV3v
uhJzv6kAGsqIQaIjjc5fKjsWwDXy38j8pcQLx0+17hdP+DMXoY3MfLgnfbtUimz3
zinOTocFd+5IR4PeeLnLytFEQe2Czwhu16KOJq2qIepMlCvtb4IBrRS9X9mB/li0
zBeE
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:05 2025 by rpki-client