Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/mePGBqEVK7KCQwGBDig3FR2aGAE.roa
File: mePGBqEVK7KCQwGBDig3FR2aGAE.roa (raw, json)
Hash identifier: oJUKD2e8eKsczg4FAo+BmsOVlphzVeYtcAqGeQgBh68=
Subject key identifier: 99:E3:C6:06:A1:15:2B:B2:82:43:01:81:0E:28:37:15:1D:9A:18:01
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01968668983287D26EDC0EB50DA56DFA4A15
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/mePGBqEVK7KCQwGBDig3FR2aGAE.roa
Signing time: Wed 30 Apr 2025 11:15:23 +0000
ROA not before: Wed 30 Apr 2025 11:15:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62205
IP address blocks: 79.174.184.0/21 maxlen: 21
91.209.128.0/23 maxlen: 23
91.209.130.0/24 maxlen: 24
139.28.180.0/22 maxlen: 22
139.28.180.0/23 maxlen: 23
139.28.182.0/23 maxlen: 23
178.213.80.0/21 maxlen: 21
178.213.80.0/23 maxlen: 23
178.213.81.0/24 maxlen: 24
178.213.82.0/23 maxlen: 23
178.213.84.0/23 maxlen: 23
178.213.86.0/23 maxlen: 24
185.44.164.0/22 maxlen: 24
185.77.228.0/22 maxlen: 22
185.77.240.0/22 maxlen: 22
2a01:72a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:68:98:32:87:d2:6e:dc:0e:b5:0d:a5:6d:fa:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Apr 30 11:15:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99e3c606a1152bb2824301810e2837151d9a1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:43:55:32:4b:83:dd:c9:b3:4d:51:9f:a0:
9a:58:ad:f4:95:67:cb:41:a2:38:5c:6e:93:10:e0:
5b:0b:15:70:c0:01:23:79:51:32:c5:09:4d:98:ea:
f6:d4:a3:08:a1:2d:2f:be:0f:7e:7a:2d:f5:fb:a8:
3e:c6:6e:60:1b:03:e7:0d:15:c7:52:ce:dc:58:82:
95:ba:cf:f8:7e:33:30:bf:a3:82:a1:f4:bf:d2:26:
96:ff:9f:5a:b2:be:2d:52:ee:19:99:ce:b5:5f:bf:
35:3b:a1:8a:81:7e:14:a3:ed:4a:a8:12:8a:fb:01:
d7:2a:86:17:86:39:bd:70:6c:3b:86:f6:19:6c:f0:
bf:fe:c5:69:c5:6c:8f:4a:a7:83:ad:e9:70:09:55:
ca:23:9b:56:cc:01:d9:0f:ab:60:32:06:eb:f4:c5:
17:aa:37:31:92:4c:72:65:3b:e4:2f:e4:0f:68:53:
b9:92:91:6f:7a:c3:b3:70:63:b4:25:df:27:50:7e:
7e:86:ae:87:1e:e8:6d:86:f9:b9:51:5b:e1:ad:55:
49:fc:e2:85:26:9e:d1:2e:8d:3e:3c:ba:d7:19:d1:
c3:46:50:7b:05:c0:98:bd:f5:e4:b0:cb:5e:90:49:
31:a8:d8:40:7b:a3:a2:a4:23:64:7c:e7:62:ab:b7:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:C6:06:A1:15:2B:B2:82:43:01:81:0E:28:37:15:1D:9A:18:01
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/mePGBqEVK7KCQwGBDig3FR2aGAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.184.0/21
91.209.128.0-91.209.130.255
139.28.180.0/22
178.213.80.0/21
185.44.164.0/22
185.77.228.0/22
185.77.240.0/22
IPv6:
2a01:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:d2:7b:b2:a5:df:af:d1:19:03:8b:07:6b:c1:b0:90:7b:12:
5b:9c:ac:8d:65:ea:ab:65:d9:45:61:cd:c7:0a:a7:0c:b8:ec:
46:e6:80:6b:3d:5d:3d:83:05:2e:51:f0:91:d9:88:75:9f:1b:
32:bb:58:7b:d4:e4:a4:2f:de:7e:8c:02:19:a6:8c:45:f3:60:
71:a4:4c:ce:b4:73:cd:2f:10:fd:ec:c5:b3:ac:8f:6f:0c:74:
46:61:9d:f9:30:8d:15:50:0d:c4:fd:56:c4:91:be:d3:64:41:
4b:f2:79:b4:94:41:71:e0:83:f7:94:4f:bb:53:26:fa:a2:a7:
b5:6b:1f:f7:a1:09:90:82:a6:0a:6f:c2:a8:68:2a:0f:ca:f2:
bf:0e:e1:90:0c:94:64:4b:88:12:06:41:ff:ec:26:8e:77:e7:
d0:03:43:90:a2:34:69:fa:43:b9:50:ea:8e:a6:0d:ef:ed:0d:
0b:60:e4:e8:6d:fb:62:60:26:a0:bd:9b:f0:71:79:57:ae:00:
bd:70:ff:a8:b5:29:0a:29:20:ba:ba:2e:ac:75:9b:1f:6c:7d:
ad:2e:13:28:02:af:a7:be:07:da:0a:8f:fb:f7:36:32:30:91:
88:3f:29:1f:0e:78:34:3d:bd:8c:93:16:3b:31:71:04:4d:97:
4f:56:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:59 2025 by rpki-client