Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/TGq58ZjTD-pqvSJbNFsZB_cZLb8.roa
File: TGq58ZjTD-pqvSJbNFsZB_cZLb8.roa (raw, json)
Hash identifier: eFisfgLPIzcOnAx5sFvM7aa3CEnOvkni4lCvh6oymsc=
Subject key identifier: 4C:6A:B9:F1:98:D3:0F:EA:6A:BD:22:5B:34:5B:19:07:F7:19:2D:BF
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 019617C2511C3B3D5D885E6D8BFA8C5BC0EF
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/TGq58ZjTD-pqvSJbNFsZB_cZLb8.roa
Signing time: Tue 08 Apr 2025 23:35:32 +0000
ROA not before: Tue 08 Apr 2025 23:35:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.30.0/23 maxlen: 23
109.172.78.0/23 maxlen: 23
109.172.100.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
109.172.116.0/23 maxlen: 23
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
2a01:230:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:c2:51:1c:3b:3d:5d:88:5e:6d:8b:fa:8c:5b:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Apr 8 23:35:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c6ab9f198d30fea6abd225b345b1907f7192dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:23:29:20:db:16:b2:27:09:b7:79:ad:13:
e2:6c:71:7e:37:15:4e:a7:cb:53:dd:85:0e:51:3e:
64:71:f8:8b:ef:ce:00:f3:1f:3f:ca:13:fc:d4:44:
c9:1c:5e:2c:c2:13:fb:50:0d:1b:6d:ad:13:33:38:
85:e2:7a:0e:dd:d7:f5:6f:11:17:b9:b1:30:2e:bb:
b8:cf:07:57:45:8b:8f:be:71:36:0e:fc:e5:6d:c4:
b9:cc:52:29:89:22:25:11:4e:4f:ea:6b:00:7b:5a:
cd:53:6a:1a:8a:99:1b:d5:09:b9:5a:6a:f3:b6:15:
09:b8:49:85:3e:55:32:4c:17:f4:38:a5:fe:1a:cf:
fc:51:7c:a8:b8:8e:9d:5d:5a:9e:e0:c8:b1:06:49:
d6:d2:92:70:24:25:e8:d0:4d:0f:d5:b1:7b:9f:d1:
40:50:85:b0:42:f5:51:4d:61:33:61:2e:13:c0:f2:
fb:b1:69:7b:ed:c7:c3:68:d1:8a:c6:d0:b8:8c:39:
ec:5a:75:a5:ff:5e:09:89:ae:82:db:fa:89:3f:d7:
32:8b:e5:81:89:19:92:4e:bf:38:fe:40:b4:dc:7e:
40:32:58:b6:19:d9:a0:57:34:4e:c5:73:17:62:6a:
5a:41:4f:ce:c9:4d:72:0b:5b:54:51:72:71:90:e4:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:B9:F1:98:D3:0F:EA:6A:BD:22:5B:34:5B:19:07:F7:19:2D:BF
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/TGq58ZjTD-pqvSJbNFsZB_cZLb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.30.0/23
109.172.78.0/23
109.172.100.0/23
109.172.108.0-109.172.117.255
149.154.64.0/21
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0-188.120.251.255
188.120.253.0-188.120.255.255
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230:1::-2a01:230:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:52:ce:82:09:94:00:f1:0e:11:67:d4:22:5d:8a:d4:a8:bc:
08:b2:27:76:18:58:ba:9f:4f:ac:5e:20:56:f1:52:71:f9:1f:
fd:fa:d3:54:1c:cb:9b:ae:02:c1:76:3d:ca:56:d1:95:43:57:
1b:18:29:0b:54:67:22:1f:83:4c:b7:2a:8e:df:42:5e:25:f1:
73:15:58:64:12:db:29:45:a1:25:12:f7:60:7e:78:8f:1f:f5:
23:f4:99:31:81:a5:55:f7:51:5f:b4:ff:0c:1b:fd:9a:d4:7c:
f3:28:67:79:cc:92:7a:8c:72:c3:77:51:cc:b1:1c:30:67:84:
fb:82:f1:61:69:7b:21:32:61:6a:de:09:39:60:50:7f:36:70:
37:9f:46:59:b8:b8:b5:24:ea:02:89:4d:d2:05:f7:9a:e9:d5:
b9:1c:76:af:d6:80:a7:a2:9d:3d:b4:8c:54:c2:75:c5:68:37:
ae:6e:7e:69:09:5f:32:e4:74:ba:9e:27:2b:62:87:c3:ff:bb:
8e:15:b4:60:a7:03:08:30:ff:9f:7c:cb:1f:52:d0:ba:a0:81:
e2:7c:cf:64:e8:46:b1:6e:ea:16:23:b9:29:64:bd:b9:70:28:
2e:6e:9c:cc:64:25:86:a0:80:14:88:12:4a:be:f1:96:bb:14:
b1:25:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:50 2025 by rpki-client