Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/FNeaupTearRlRLiEtSJaFFa0iWs.roa
File: FNeaupTearRlRLiEtSJaFFa0iWs.roa (raw, json)
Hash identifier: pl3eLKUBqVWjBd0NBa7tPGsPn/lDXcjdIewHvf3OYwc=
Subject key identifier: 14:D7:9A:BA:94:DE:6A:B4:65:44:B8:84:B5:22:5A:14:56:B4:89:6B
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01964A9BDCAE59237086F13B35FE4383A075
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/FNeaupTearRlRLiEtSJaFFa0iWs.roa
Signing time: Fri 18 Apr 2025 20:34:10 +0000
ROA not before: Fri 18 Apr 2025 20:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 45.248.55.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
193.160.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:9b:dc:ae:59:23:70:86:f1:3b:35:fe:43:83:a0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Apr 18 20:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d79aba94de6ab46544b884b5225a1456b4896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:78:8e:8c:6e:34:9f:2c:f6:dc:07:ba:10:
c9:e8:74:f1:c9:1e:2f:ac:45:27:56:67:ed:14:e0:
ae:e0:09:c1:37:94:09:38:66:85:91:67:69:33:99:
04:ad:f7:e9:d4:22:42:c1:35:85:f6:f5:c7:42:d0:
a2:f0:0b:11:fd:77:da:ca:b0:0a:4b:63:c3:19:e7:
a3:6b:20:ab:04:74:74:8f:a5:e8:0f:5e:32:1b:df:
e5:3a:c8:79:c7:65:31:0c:72:b2:97:61:13:a0:69:
97:af:a2:f0:5c:1c:28:9a:68:36:38:ce:da:00:2b:
6d:06:0d:b3:16:60:0d:3d:0f:ee:0e:bc:a9:04:e0:
c7:63:cf:03:ea:42:32:85:6d:e8:dd:01:01:7b:6b:
43:3a:72:41:7d:9d:5e:f1:a2:97:a9:6d:da:85:36:
8a:9a:21:65:86:67:59:d5:db:5b:30:83:6a:2c:16:
1a:d0:8e:d6:46:a3:f7:64:ee:25:44:af:b4:ac:86:
af:43:b3:43:34:a8:4a:a2:5c:00:4d:0c:7b:72:96:
32:7e:fb:53:bd:f9:f1:7d:3e:2a:7a:d4:13:44:f0:
5a:73:53:f2:87:8f:ac:ec:4e:9e:5a:de:31:22:5d:
6e:f3:dd:43:84:c8:2f:1f:ed:d0:6d:9c:a6:88:9a:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:9A:BA:94:DE:6A:B4:65:44:B8:84:B5:22:5A:14:56:B4:89:6B
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/FNeaupTearRlRLiEtSJaFFa0iWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.55.0/24
94.154.177.0/24
185.52.136.0/24
185.253.122.0/24
192.145.71.0/24
193.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:4f:c1:b0:ee:01:8f:12:46:fe:f2:27:97:75:69:76:e6:4c:
26:d6:4e:3f:c2:54:03:36:82:2b:fd:c5:56:2f:15:33:6d:36:
b5:22:3b:9d:0d:be:6c:d0:24:56:f3:e0:13:f2:dc:88:ef:5d:
b9:99:ed:ab:74:8e:8c:33:d3:19:fe:4a:3e:f4:e8:73:33:43:
01:bb:50:f2:bb:24:35:7b:3b:9e:16:1c:3f:6a:a5:ee:71:a0:
15:6d:57:bd:a1:fd:e2:9a:31:26:a5:fb:ed:95:28:d3:7f:bb:
51:fe:5b:3b:bb:8d:67:58:f9:04:98:56:95:e9:c0:9d:b8:58:
48:83:d3:61:0e:bd:bf:d6:b4:b4:a5:08:0e:42:3d:fc:5b:dd:
54:66:8f:30:99:9c:73:17:96:a1:21:a7:14:d3:62:69:44:b2:
93:e1:5d:58:47:e1:59:37:ad:b9:a8:e8:07:76:bf:e3:58:f6:
b5:47:cb:1e:4c:92:f5:5a:aa:61:69:05:4a:65:ac:54:91:b8:
b0:34:e9:bc:e4:79:e2:5d:b3:46:48:6b:88:95:a0:24:14:5e:
7e:56:5d:4c:81:26:35:d3:45:c5:3b:a0:d9:9e:42:59:bd:cb:
ed:04:0e:a4:20:e4:13:cb:00:a1:56:b4:f8:f3:54:f0:78:28:
9a:dd:76:a1
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZZKm9yuWSNwhvE7Nf5Dg6B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwNDE4MjAzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGQ3OWFiYTk0ZGU2YWI0NjU0NGI4ODRiNTIyNWExNDU2YjQ4OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50x4joxuNJ8s9twHuhDJ6HTxyR4v
rEUnVmftFOCu4AnBN5QJOGaFkWdpM5kErffp1CJCwTWF9vXHQtCi8AsR/XfayrAK
S2PDGeejayCrBHR0j6XoD14yG9/lOsh5x2UxDHKyl2EToGmXr6LwXBwommg2OM7a
ACttBg2zFmANPQ/uDrypBODHY88D6kIyhW3o3QEBe2tDOnJBfZ1e8aKXqW3ahTaK
miFlhmdZ1dtbMINqLBYa0I7WRqP3ZO4lRK+0rIavQ7NDNKhKolwATQx7cpYyfvtT
vfnxfT4qetQTRPBac1Pyh4+s7E6eWt4xIl1u891DhMgvH+3QbZymiJoOewIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBTXmrqU3mq0ZUS4hLUiWhRWtIlrMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvRk5lYXVwVGVhclJsUkxpRXRTSmFGRmEwaVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALfg3AwQA
XpqxAwQAuTSIAwQAuf16AwQAwJFHAwQCwaBQMA0GCSqGSIb3DQEBCwUAA4IBAQA6
T8Gw7gGPEkb+8ieXdWl25kwm1k4/wlQDNoIr/cVWLxUzbTa1IjudDb5s0CRW8+AT
8tyI7125me2rdI6MM9MZ/ko+9OhzM0MBu1DyuyQ1ezueFhw/aqXucaAVbVe9of3i
mjEmpfvtlSjTf7tR/ls7u41nWPkEmFaV6cCduFhIg9NhDr2/1rS0pQgOQj38W91U
Zo8wmZxzF5ahIacU02JpRLKT4V1YR+FZN625qOgHdr/jWPa1R8seTJL1WqphaQVK
ZaxUkbiwNOm85HniXbNGSGuIlaAkFF5+Vl1MgSY100XFO6DZnkJZvcvtBA6kIOQT
ywChVrT481TweCia3Xah
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:27:39 2025 by rpki-client