Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TV4IH7vz9DMbagZU5HRYbEEvJQ4.roa
File: TV4IH7vz9DMbagZU5HRYbEEvJQ4.roa (raw, json)
Hash identifier: BXb12TqMncCZU92PCR9E2+qrOrJOVyeiAvyHLdASJXQ=
Subject key identifier: 4D:5E:08:1F:BB:F3:F4:33:1B:6A:06:54:E4:74:58:6C:41:2F:25:0E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196C556EE0736F157621D95055FDF93BE02
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TV4IH7vz9DMbagZU5HRYbEEvJQ4.roa
Signing time: Mon 12 May 2025 16:32:10 +0000
ROA not before: Mon 12 May 2025 16:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:56:ee:07:36:f1:57:62:1d:95:05:5f:df:93:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 12 16:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d5e081fbbf3f4331b6a0654e474586c412f250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:54:62:ed:0e:52:23:fe:92:bb:2b:aa:b1:
c4:5f:1e:b7:26:1d:b4:d7:8f:92:4e:bd:d4:fd:3b:
36:a8:1e:9e:ce:ff:cc:e0:95:4f:c5:2c:05:f9:39:
db:dc:dd:a7:21:6e:ec:a0:aa:55:6d:99:e7:07:9b:
92:70:f7:ad:d1:76:fc:f0:af:65:b4:ed:d0:3d:40:
c9:ec:88:a1:45:b0:43:a5:13:85:17:48:02:c6:85:
b5:24:bc:61:32:c4:1f:d0:7a:46:33:d0:77:0d:aa:
dc:98:8f:ea:1b:74:ca:c8:6d:20:89:77:b0:a6:94:
c5:e2:2f:0c:7f:9e:62:e5:02:1b:20:90:82:b5:8f:
b6:9f:14:7c:d4:5a:b0:91:83:f7:b9:45:52:03:5a:
1e:3c:ed:e9:d1:34:7f:8f:7d:4f:bf:82:11:25:58:
3b:76:01:66:74:2c:e2:1e:de:28:20:d8:14:75:05:
20:e5:a0:49:6e:9b:ff:7b:0f:70:37:5f:2d:8d:f2:
dd:32:8f:0f:e0:4d:35:4b:50:2a:61:a0:d9:bd:7b:
9f:7b:6c:15:2d:8e:05:8f:81:e7:6e:fd:ba:3a:32:
93:6c:15:bc:e4:cc:80:24:4d:bb:a4:43:77:6e:8a:
18:21:e0:bb:fc:d2:75:bb:b2:9f:2a:4a:8f:f0:ab:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:08:1F:BB:F3:F4:33:1B:6A:06:54:E4:74:58:6C:41:2F:25:0E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TV4IH7vz9DMbagZU5HRYbEEvJQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.248.0/24
185.206.251.0/24
185.209.36.0/23
185.210.152.0/22
185.218.102.0/24
185.223.76.0/24
185.225.2.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
11:11:86:b5:c2:60:0a:11:3e:c6:88:d9:9d:67:34:5b:57:f2:
70:eb:a2:1b:dc:f7:41:01:b5:7d:b7:84:d7:d5:13:f4:f4:05:
dd:a3:f6:06:31:57:65:2d:d9:f9:67:0d:14:6f:c6:54:73:f0:
cc:1c:29:d9:cd:f0:68:ce:7d:d4:5e:bc:0b:ad:77:1b:a2:7a:
63:c8:10:1c:2d:a5:46:fb:38:b0:5a:4c:20:19:dc:e1:e5:64:
21:50:40:be:de:7f:76:2f:45:5e:b5:e3:76:8b:16:1d:08:98:
ac:bb:a0:b7:65:8d:cd:8f:23:29:de:6e:9a:8e:9d:09:03:94:
ac:f4:eb:71:4f:9c:f8:93:93:98:18:77:33:46:43:d9:00:24:
89:7c:a6:4e:3c:2c:06:f2:37:af:a2:92:c8:fd:83:c2:bd:78:
11:91:b9:d6:ea:a6:a9:7e:45:aa:11:47:2d:b4:1a:10:4a:c8:
87:42:86:b9:29:f8:75:55:22:f9:2b:62:48:b2:ec:76:2f:88:
7d:b3:a4:c8:ff:ae:ef:fd:d1:66:fa:a8:2f:bb:43:0d:92:33:
cb:03:9d:ad:2b:b8:26:3f:9a:d8:65:6a:70:cf:4d:18:bd:89:
c1:20:91:7e:b4:d4:6c:65:b3:2c:74:98:cf:d9:78:32:ee:50:
6b:0b:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:49 2025 by rpki-client