Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w6KMs-rmGlz6M8T9S9R99Y_qrqY.roa
File: w6KMs-rmGlz6M8T9S9R99Y_qrqY.roa (raw, json)
Hash identifier: FMkAsD/CnV/EZe0r0k90PTryBvlJ+Pcs+N32zdxtXeo=
Subject key identifier: C3:A2:8C:B3:EA:E6:1A:5C:FA:33:C4:FD:4B:D4:7D:F5:8F:EA:AE:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019662DECBEAF5B1FCF1D0284E4FB5494710
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w6KMs-rmGlz6M8T9S9R99Y_qrqY.roa
Signing time: Wed 23 Apr 2025 13:38:10 +0000
ROA not before: Wed 23 Apr 2025 13:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:de:cb:ea:f5:b1:fc:f1:d0:28:4e:4f:b5:49:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 23 13:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a28cb3eae61a5cfa33c4fd4bd47df58feaaea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:d5:4b:fb:93:64:bf:5e:80:51:05:e7:88:
65:87:54:7f:f3:89:f7:f6:e5:79:c9:52:95:ae:e7:
ed:0f:94:a8:e0:f0:52:d5:40:90:35:79:10:c8:2d:
31:f2:b6:7c:04:bc:9b:9b:62:43:30:b8:c4:31:12:
8c:5c:6d:54:55:8d:c3:84:bb:2b:86:ac:c8:d0:e8:
15:12:a7:9c:fa:28:78:7f:ce:ac:de:28:0d:37:e0:
f2:6d:de:19:f2:29:54:10:b7:07:b1:36:1a:b6:0f:
f2:da:92:b1:cd:8f:be:6c:8d:de:dd:e2:5e:3c:d1:
87:4f:8b:d8:70:47:fe:1f:3b:63:01:33:e5:ee:77:
44:79:2f:6d:71:0a:06:25:fc:52:bc:c0:52:5e:ab:
c9:5c:ee:50:47:dd:7d:e2:ad:95:01:39:01:f6:7a:
9a:a7:70:c1:27:85:79:41:f4:61:d3:45:63:0c:4f:
8c:0a:16:4e:f3:ee:2a:b5:31:27:b0:91:16:0f:14:
67:d5:9f:69:44:3c:94:95:ce:8e:45:fb:47:37:9a:
fe:76:6d:5d:7c:a4:fe:d4:a8:1c:64:54:bf:85:ca:
ea:3a:5a:aa:bb:8c:b7:ff:d0:cb:fa:00:5e:77:c6:
95:67:58:07:97:a1:e0:cf:1c:d4:35:87:8f:15:6f:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:8C:B3:EA:E6:1A:5C:FA:33:C4:FD:4B:D4:7D:F5:8F:EA:AE:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w6KMs-rmGlz6M8T9S9R99Y_qrqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/24
103.139.50.0/24
185.164.59.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6:55::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
9b:e4:4b:0e:c4:38:a8:e2:6a:ec:96:12:ce:72:9b:8e:42:e0:
87:2e:b9:7e:f4:7d:39:4c:37:45:49:61:67:c8:cc:16:5b:b0:
09:29:d3:a1:7a:d4:aa:30:a7:9f:46:4f:1f:63:a5:89:aa:db:
dd:f9:e4:bb:9f:2e:71:3e:de:f5:a4:ba:7f:17:af:d5:2f:d8:
f1:e7:14:4f:c3:11:c6:9d:51:b3:bf:94:17:9c:9c:1b:c2:06:
65:a9:c2:48:82:18:89:25:22:2a:8f:26:38:de:e3:e0:26:aa:
60:b8:08:25:44:02:0d:21:f5:d8:fc:1e:fa:20:c3:82:b2:e4:
4e:91:32:25:b0:99:be:78:6e:56:1c:0c:c2:d3:af:0a:6f:3d:
78:34:d0:9d:32:b4:54:7f:cd:ae:a8:69:d7:1d:e3:03:2e:7a:
f5:a2:a8:50:73:fa:fb:8e:49:ae:d1:40:b0:25:1d:00:e5:f7:
a7:a7:64:f6:aa:ec:6e:0a:11:1b:cf:78:f7:a6:28:78:05:47:
03:7b:80:30:0a:a8:b2:cb:d3:76:9e:21:ea:b4:39:c5:d2:77:
4f:69:19:46:9a:15:5b:83:54:2a:78:77:3c:4a:b3:2c:3f:81:
a0:71:84:c5:94:e9:85:ac:4b:1e:53:e7:95:5e:38:6c:5a:69:
9a:9a:83:f3
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgISAZZi3svq9bH88dAoTk+1SUcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDIzMTMzODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2EyOGNiM2VhZTYxYTVjZmEzM2M0ZmQ0YmQ0N2RmNThmZWFhZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTPVS/uTZL9egFEF54hlh1R/84n3
9uV5yVKVruftD5So4PBS1UCQNXkQyC0x8rZ8BLybm2JDMLjEMRKMXG1UVY3DhLsr
hqzI0OgVEqec+ih4f86s3igNN+Dybd4Z8ilUELcHsTYatg/y2pKxzY++bI3e3eJe
PNGHT4vYcEf+HztjATPl7ndEeS9tcQoGJfxSvMBSXqvJXO5QR9194q2VATkB9nqa
p3DBJ4V5QfRh00VjDE+MChZO8+4qtTEnsJEWDxRn1Z9pRDyUlc6ORftHN5r+dm1d
fKT+1KgcZFS/hcrqOlqqu4y3/9DL+gBed8aVZ1gHl6HgzxzUNYePFW9PuwIDAQAB
o4IDVjCCA1IwHQYDVR0OBBYEFMOijLPq5hpc+jPE/UvUffWP6q6mMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdzZLTXMtcm1HbHo2TThUOVM5Ujk5WV9xcnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBagYIKwYBBQUHAQcBAf8EggFZMIIBVTBCBAIAATA8AwQA
LVb3AwQALYF/AwQALYclAwQALZ0lAwQAUP36AwQAZ4syAwQAuaQ7AwQAwRsVAwQA
wRsXAwQAwaTHMIIBDQQCAAIwggEFAwcAKgYRhAAzAwcAKgotBgAzAwcAKgx4hgAz
AwcAKg4agCVBAwUAKg7HgAMHACoO8gEAAQMHACoPHgABIwMHACoPHgAEVgMHACoP
HgAJhwMHACoPHgAKvAMHACoPHgDe+QMHACoPHgEAAQMHACoPHoEAAgMHACoPHoES
kwMHACoPHoFDGQMHACoPHoGS6AMHACoPHoGj0AMHACoPHoHNrgMFAyoPLoADBQAq
Dz2EAwcAKg99AgABAwUAKg/hxgMFAyoQbUADBQMqEf2AAwUBKhKsQAMHACoS7MQi
EwMFAyoS9UADBwAqExjAAAEDBwAqExjGAFUDBQAqE5KAAwcAKhPhAQACMA0GCSqG
SIb3DQEBCwUAA4IBAQCb5EsOxDio4mrslhLOcpuOQuCHLrl+9H05TDdFSWFnyMwW
W7AJKdOhetSqMKefRk8fY6WJqtvd+eS7ny5xPt71pLp/F6/VL9jx5xRPwxHGnVGz
v5QXnJwbwgZlqcJIghiJJSIqjyY43uPgJqpguAglRAINIfXY/B76IMOCsuROkTIl
sJm+eG5WHAzC068Kbz14NNCdMrRUf82uqGnXHeMDLnr1oqhQc/r7jkmu0UCwJR0A
5fenp2T2quxuChEbz3j3pih4BUcDe4AwCqiyy9N2niHqtDnF0ndPaRlGmhVbg1Qq
eHc8SrMsP4GgcYTFlOmFrEseU+eVXjhsWmmamoPz
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:22:52 2025 by rpki-client