Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EOoPpTv9LAkhdn57wkd8okdBv5Y.roa
File: EOoPpTv9LAkhdn57wkd8okdBv5Y.roa (raw, json)
Hash identifier: t3Uw4AmYKj65Ui6X9K39kpVUBWxbLx1L78gqAnl8MJc=
Subject key identifier: 10:EA:0F:A5:3B:FD:2C:09:21:76:7E:7B:C2:47:7C:A2:47:41:BF:96
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01965C9F9CE5D622166A81B366537DDA5CB7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EOoPpTv9LAkhdn57wkd8okdBv5Y.roa
Signing time: Tue 22 Apr 2025 08:31:26 +0000
ROA not before: Tue 22 Apr 2025 08:31:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:9f:9c:e5:d6:22:16:6a:81:b3:66:53:7d:da:5c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 22 08:31:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10ea0fa53bfd2c0921767e7bc2477ca24741bf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:30:f7:59:e2:27:d8:de:24:70:35:00:f2:
11:5c:8f:06:a7:f9:ed:2e:9c:c8:ae:68:38:ab:e1:
b9:21:10:e0:31:b8:1a:30:f9:06:ee:68:35:1c:47:
f2:ed:de:d4:f0:c5:3a:c4:74:14:d6:f3:33:df:64:
93:e0:27:04:73:5d:09:6e:07:c1:9d:b0:77:83:8f:
2b:12:cd:4e:58:b8:7a:bb:33:e4:a8:a5:aa:f6:fc:
a8:01:c6:b4:b4:59:11:23:06:c2:28:92:27:01:25:
11:11:18:f6:1a:6d:29:89:c5:b1:0f:fd:b2:4a:f1:
3c:c7:46:03:22:5b:fd:48:d7:56:06:63:ba:93:3f:
25:7d:43:e7:42:77:f3:26:e5:f2:d8:7d:85:17:13:
3a:14:35:ca:79:f6:dd:47:54:dd:71:5c:6c:9e:e6:
26:8d:b4:51:58:41:9d:48:3d:11:64:6b:42:f3:8a:
96:d2:08:4e:49:2a:12:91:80:e1:53:0d:a9:da:9d:
8b:40:c2:96:be:79:fc:72:2e:f2:8b:af:d0:5e:96:
7c:74:68:81:4f:a6:20:5f:98:24:94:ae:ab:f7:e6:
56:c8:76:8e:86:55:73:b5:86:9d:3c:22:10:5b:18:
0d:6e:c8:fa:37:1c:13:bb:95:03:e3:f4:21:13:ca:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EA:0F:A5:3B:FD:2C:09:21:76:7E:7B:C2:47:7C:A2:47:41:BF:96
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EOoPpTv9LAkhdn57wkd8okdBv5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.250.0/23
185.222.28.0/23
185.223.78.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.226.104.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
34:94:de:56:53:dc:27:b3:57:17:94:b1:bd:c4:f5:b9:1b:2e:
b0:80:38:0d:39:93:b8:c3:09:55:79:9b:ed:46:68:a0:49:30:
17:c2:d5:56:e0:43:2c:62:05:75:5a:c2:06:b5:33:80:27:07:
a3:b9:db:97:dd:51:77:1c:74:8e:a7:7d:ad:60:1a:96:77:08:
f8:c8:5a:73:17:a6:eb:90:39:53:c6:a1:c0:01:79:64:f8:6e:
e9:48:73:75:62:f9:ed:55:e5:ae:44:e3:42:95:a9:85:b7:05:
62:9d:bd:84:fa:8f:6b:0e:31:7f:d6:ad:d1:87:45:3f:c9:73:
fc:a6:c6:5e:d7:9c:d2:31:7b:d3:28:10:de:03:21:9e:12:58:
c4:f4:00:4d:8c:f6:d0:dd:ef:42:42:20:10:06:9b:45:c0:b3:
91:f9:b8:cd:d7:46:af:f7:e3:8b:a5:3c:78:26:34:fb:4e:59:
38:2e:82:a1:4a:0f:51:03:b3:e3:15:6a:91:4c:89:d8:9b:91:
a6:b8:6f:28:00:8d:89:5e:a5:29:52:8a:e0:0a:7c:27:b4:8e:
73:8f:c6:53:15:90:ae:a6:99:82:58:2a:bd:7e:61:b1:e8:3d:
84:77:6c:a1:20:aa:ee:ea:f2:07:97:67:64:ed:e7:36:03:cd:
50:d4:3b:96
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZZcn5zl1iIWaoGzZlN92ly3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwNDIyMDgzMTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGVhMGZhNTNiZmQyYzA5MjE3NjdlN2JjMjQ3N2NhMjQ3NDFiZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8gw91niJ9jeJHA1APIRXI8Gp/nt
LpzIrmg4q+G5IRDgMbgaMPkG7mg1HEfy7d7U8MU6xHQU1vMz32ST4CcEc10JbgfB
nbB3g48rEs1OWLh6uzPkqKWq9vyoAca0tFkRIwbCKJInASURERj2Gm0picWxD/2y
SvE8x0YDIlv9SNdWBmO6kz8lfUPnQnfzJuXy2H2FFxM6FDXKefbdR1TdcVxsnuYm
jbRRWEGdSD0RZGtC84qW0ghOSSoSkYDhUw2p2p2LQMKWvnn8ci7yi6/QXpZ8dGiB
T6YgX5gklK6r9+ZWyHaOhlVztYadPCIQWxgNbsj6NxwTu5UD4/QhE8qO/QIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFBDqD6U7/SwJIXZ+e8JHfKJHQb+WMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRU9vUHBUdjlMQWtoZG41N3drZDhva2RCdjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAC5
flIDBAC50SYDBAC50UkDBAC50UsDBAC50ukDBAC51mwDBAC52hQDBAC52mUDBAG5
3PoDBAG53hwDBAC5304DBAC535sDBAG54QADBAC54QMDBAC54mgDBAG545IDBAC5
5EsDBAC56M4wDAMEBMEIcAMEAMEIcgMEAcE6kgMEAMJMrAMEAMJ8RTANBgkqhkiG
9w0BAQsFAAOCAQEANJTeVlPcJ7NXF5SxvcT1uRsusIA4DTmTuMMJVXmb7UZooEkw
F8LVVuBDLGIFdVrCBrUzgCcHo7nbl91Rdxx0jqd9rWAalncI+Mhacxem65A5U8ah
wAF5ZPhu6UhzdWL57VXlrkTjQpWphbcFYp29hPqPaw4xf9at0YdFP8lz/KbGXtec
0jF70ygQ3gMhnhJYxPQATYz20N3vQkIgEAabRcCzkfm4zddGr/fji6U8eCY0+05Z
OC6CoUoPUQOz4xVqkUyJ2JuRprhvKACNiV6lKVKK4Ap8J7SOc4/GUxWQrqaZglgq
vX5hseg9hHdsoSCq7uryB5dnZO3nNgPNUNQ7lg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:41 2025 by rpki-client