Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/uVOilRs9nlSZX9PqVogOUrvkQSM.roa
File: uVOilRs9nlSZX9PqVogOUrvkQSM.roa (raw, json)
Hash identifier: /mCUbTOWeinlY+5TK02vBXtRmjYZ4tmNd4E1mVfIF/4=
Subject key identifier: B9:53:A2:95:1B:3D:9E:54:99:5F:D3:EA:56:88:0E:52:BB:E4:41:23
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 01961E6B04C042D6FF85BDDC73CAA37FDB67
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/uVOilRs9nlSZX9PqVogOUrvkQSM.roa
Signing time: Thu 10 Apr 2025 06:37:32 +0000
ROA not before: Thu 10 Apr 2025 06:37:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 82.97.196.0/23 maxlen: 24
82.97.199.0/24 maxlen: 24
89.38.106.0/23 maxlen: 24
91.238.148.0/23 maxlen: 24
185.77.250.0/23 maxlen: 24
188.211.250.0/24 maxlen: 24
188.211.251.0/24 maxlen: 24
188.214.89.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.24.234.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.135.26.0/24 maxlen: 24
194.135.27.0/24 maxlen: 24
194.135.132.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:6b:04:c0:42:d6:ff:85:bd:dc:73:ca:a3:7f:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Apr 10 06:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b953a2951b3d9e54995fd3ea56880e52bbe44123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:11:3f:0b:72:ae:e8:a8:e8:b9:7e:97:0e:
69:da:81:f4:3a:16:26:cc:3e:6b:fd:5d:59:db:84:
76:50:65:1a:01:06:5e:e7:c0:56:7c:67:8f:44:70:
3d:77:77:d6:0f:9e:73:77:12:5b:a5:bb:61:36:97:
22:97:18:d0:e9:ad:74:ee:2b:c9:47:fa:a9:61:79:
4d:23:04:4d:55:38:7e:c5:bf:2b:86:39:96:e7:b7:
a9:bd:45:ac:ec:20:08:06:73:5d:63:4c:e3:ed:d0:
62:55:52:25:c9:0e:e7:60:d5:37:d4:50:40:3e:46:
c6:71:ec:21:c8:99:4b:4f:a2:bc:75:55:b5:41:4a:
3f:d8:fa:77:20:95:6c:68:6d:71:b0:29:3e:fd:2a:
e8:be:f8:cd:cb:c9:0e:8d:fe:99:8d:65:8d:49:2f:
3f:b3:08:c9:63:39:6a:c0:97:1c:2e:4e:95:e6:88:
c6:cb:f5:b2:79:fe:65:cb:42:02:19:3b:73:85:20:
60:fc:2a:87:9c:d3:ed:76:55:f0:15:d0:70:91:f7:
a3:0f:df:7c:c8:2d:65:6d:66:62:1b:1d:b4:f0:ac:
4d:a1:de:b8:56:96:78:38:ae:58:a2:6a:58:a4:cb:
31:36:39:c7:b4:e7:d7:ef:a7:9c:c1:d5:29:cf:2b:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:A2:95:1B:3D:9E:54:99:5F:D3:EA:56:88:0E:52:BB:E4:41:23
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/uVOilRs9nlSZX9PqVogOUrvkQSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.196.0/23
82.97.199.0/24
89.38.106.0/23
91.238.148.0/23
185.77.250.0/23
188.211.250.0/23
188.214.89.0/24
188.241.59.0/24
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.26.0/23
194.135.132.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
5e:d0:1a:6f:01:c9:8d:4b:b0:a9:1e:9c:2d:d6:c5:2a:a9:a0:
52:bb:fd:0c:93:37:64:9c:74:bf:3d:20:bf:32:1e:46:62:82:
27:84:6e:16:0a:c1:aa:ac:ed:dc:9f:7f:28:18:cd:5c:53:f0:
28:91:83:cb:fa:3f:ee:21:ca:c9:35:68:cb:a7:28:b2:56:cb:
0d:13:b4:eb:25:e4:60:68:65:57:16:9c:59:b5:9f:17:ed:b7:
5e:ab:42:6d:28:2a:68:94:9f:22:d2:cf:40:36:aa:1e:89:d5:
d3:74:cf:46:96:58:00:63:79:41:88:5b:ff:f1:63:ef:5d:80:
7b:72:b4:67:0c:e7:01:5a:90:20:fe:ba:5e:1a:85:99:dc:80:
bd:14:c6:a6:37:7f:1f:9d:1a:f8:41:36:2f:9e:b6:71:3d:2b:
77:03:fe:5b:43:36:91:18:ed:43:11:65:fd:4b:9a:ec:d2:b8:
b0:aa:b7:e0:f7:65:7e:ca:d2:78:90:b3:cf:da:fe:14:54:b8:
7b:c8:8f:9f:ed:51:c6:91:3e:3c:d9:f5:18:28:f5:11:18:24:
ff:ff:61:cb:40:e4:48:4b:86:04:02:a8:27:fe:97:62:85:97:
0c:2f:68:a1:31:3c:b6:5d:3d:d8:a6:62:a6:52:f4:e6:1e:5f:
2f:2b:7c:8a
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZYeawTAQtb/hb3cc8qjf9tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjUwNDEwMDYzNzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTUzYTI5NTFiM2Q5ZTU0OTk1ZmQzZWE1Njg4MGU1MmJiZTQ0MTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhERPwtyruio6Ll+lw5p2oH0OhYm
zD5r/V1Z24R2UGUaAQZe58BWfGePRHA9d3fWD55zdxJbpbthNpcilxjQ6a107ivJ
R/qpYXlNIwRNVTh+xb8rhjmW57epvUWs7CAIBnNdY0zj7dBiVVIlyQ7nYNU31FBA
PkbGcewhyJlLT6K8dVW1QUo/2Pp3IJVsaG1xsCk+/SrovvjNy8kOjf6ZjWWNSS8/
swjJYzlqwJccLk6V5ojGy/Wyef5ly0ICGTtzhSBg/CqHnNPtdlXwFdBwkfejD998
yC1lbWZiGx208KxNod64VpZ4OK5YompYpMsxNjnHtOfX76ecwdUpzyuUyQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFLlTopUbPZ5UmV/T6laIDlK75EEjMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvdVZPaWxSczlubFNaWDlQcVZvZ09VcnZrUVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAFS
YcQDBABSYccDBAFZJmoDBAFb7pQDBAG5TfoDBAG80/oDBAC81lkDBAC88TsDBAHB
qQgDBAHBwDQDBAHB76wDBAHB7/YDBAHCGOoDBAHCWIYDBAHChxoDBAHCh4QDBAHC
9moDBAHDAsQDBAHDDTADBAHDIlADBAHDXYwDBAHDgLwDBAHDhdADBAHDh8ADBAHD
vfoDBAHD0iwDBAHD/owwDAMEAdWfCgMEAdWfDDANBgkqhkiG9w0BAQsFAAOCAQEA
XtAabwHJjUuwqR6cLdbFKqmgUrv9DJM3ZJx0vz0gvzIeRmKCJ4RuFgrBqqzt3J9/
KBjNXFPwKJGDy/o/7iHKyTVoy6coslbLDRO06yXkYGhlVxacWbWfF+23XqtCbSgq
aJSfItLPQDaqHonV03TPRpZYAGN5QYhb//Fj712Ae3K0ZwznAVqQIP66XhqFmdyA
vRTGpjd/H50a+EE2L562cT0rdwP+W0M2kRjtQxFl/Uua7NK4sKq34PdlfsrSeJCz
z9r+FFS4e8iPn+1RxpE+PNn1GCj1ERgk//9hy0DkSEuGBAKoJ/6XYoWXDC9ooTE8
tl092KZiplL05h5fLyt8ig==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:00 2025 by rpki-client