Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/P-haGLcvZvQGvLFpnob9lOaXmTs.roa
File: P-haGLcvZvQGvLFpnob9lOaXmTs.roa (raw, json)
Hash identifier: 4zCg+GccZn/4aPxyfbii7VCbnRc/Ws0LuYTysih4ku8=
Subject key identifier: 3F:E8:5A:18:B7:2F:66:F4:06:BC:B1:69:9E:86:FD:94:E6:97:99:3B
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 0196337BE578939568739DAAB76F02FC3BA9
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/P-haGLcvZvQGvLFpnob9lOaXmTs.roa
Signing time: Mon 14 Apr 2025 08:47:59 +0000
ROA not before: Mon 14 Apr 2025 08:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61272
IP address blocks: 85.206.160.0/22 maxlen: 32
85.206.164.0/22 maxlen: 32
85.206.166.58/32 maxlen: 32
85.206.168.0/22 maxlen: 32
85.206.172.0/22 maxlen: 32
85.206.240.0/22 maxlen: 32
88.119.160.0/21 maxlen: 32
88.119.168.0/24 maxlen: 32
88.119.169.0/24 maxlen: 32
88.119.170.0/24 maxlen: 32
88.119.171.0/24 maxlen: 32
88.119.173.0/24 maxlen: 32
88.119.174.0/24 maxlen: 32
88.119.175.0/24 maxlen: 32
91.216.163.0/24 maxlen: 32
185.25.48.0/22 maxlen: 32
185.64.104.0/22 maxlen: 32
213.252.231.0/24 maxlen: 32
213.252.232.0/24 maxlen: 32
213.252.233.0/24 maxlen: 32
213.252.238.0/24 maxlen: 32
2a04:2180::/32 maxlen: 64
2a04:2181:c010::/48 maxlen: 64
2a04:2181:c011::/48 maxlen: 64
2a04:2181:c012::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:7b:e5:78:93:95:68:73:9d:aa:b7:6f:02:fc:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Apr 14 08:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fe85a18b72f66f406bcb1699e86fd94e697993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:54:42:e9:33:08:b3:6b:10:54:3a:4e:65:
06:89:65:ac:b1:8b:80:d7:13:e0:68:5c:28:24:ba:
2f:17:a0:21:fe:f7:c6:62:ab:24:a9:57:31:8a:f7:
7e:82:6e:75:1e:2d:b0:8d:06:e4:c2:39:43:4f:72:
62:46:e2:f2:49:59:33:cd:f8:d0:d5:07:6f:d1:b8:
0a:f4:12:46:1c:a6:4a:41:68:1b:b7:c1:48:f1:d5:
94:26:11:8d:82:3f:49:f1:6c:cf:b8:1a:a0:f7:df:
1d:ab:2a:98:66:44:7b:6f:e7:b0:f0:be:9e:81:fa:
4e:ba:81:5f:a9:81:a7:e4:c1:da:46:bf:1d:7e:54:
73:98:53:98:4b:00:c6:7f:31:f7:ad:78:05:81:df:
e6:10:26:e8:9a:76:34:f8:9a:ff:8e:68:5f:9b:f8:
86:18:b7:2b:44:b1:b3:8a:09:c9:d2:06:ce:d1:79:
80:e9:39:ce:ff:1a:c4:2e:3c:25:d1:d2:03:dc:59:
fc:42:7a:80:98:1d:43:eb:86:71:06:f7:e6:5c:36:
78:0a:7d:cf:2b:3b:88:7a:95:d5:21:0a:c7:4c:96:
77:3c:bd:45:49:34:69:35:c8:46:61:85:dd:0a:6c:
05:17:27:56:a6:8b:42:95:ca:aa:a0:f2:f5:63:46:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:5A:18:B7:2F:66:F4:06:BC:B1:69:9E:86:FD:94:E6:97:99:3B
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/P-haGLcvZvQGvLFpnob9lOaXmTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.206.160.0/20
85.206.240.0/22
88.119.160.0-88.119.171.255
88.119.173.0-88.119.175.255
91.216.163.0/24
185.25.48.0/22
185.64.104.0/22
213.252.231.0-213.252.233.255
213.252.238.0/24
IPv6:
2a04:2180::/32
2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:62:73:f2:bf:e8:b3:3b:40:a8:17:36:3d:9f:2c:9f:9d:6b:
ef:73:02:f8:3d:9f:81:f8:0a:33:89:ff:2d:ef:0b:34:c3:9e:
6f:d9:e3:3d:ca:ff:9c:ca:5f:eb:67:62:61:9f:ce:09:d3:47:
96:8f:cc:2e:c9:de:2f:40:63:ff:14:8c:c2:31:d5:39:76:3d:
ee:39:e6:84:a5:ef:cb:76:58:c8:ee:b3:de:22:f6:4f:51:fb:
f9:eb:2e:fa:b8:79:9b:06:ae:ad:27:fa:eb:0a:d1:00:9e:c4:
6e:60:c2:57:03:1d:64:f5:7b:4c:da:a7:9d:09:c3:1e:74:1b:
26:1e:8c:a4:44:2d:dc:a7:29:fd:7a:fb:d0:32:05:98:7b:47:
3b:3b:08:44:d1:10:35:cd:72:cd:f7:58:ac:b2:ee:21:88:83:
06:c9:54:a4:1e:c7:51:1c:7b:7c:bf:51:c9:3a:3c:a1:db:6c:
38:c8:1c:89:20:16:75:26:92:47:81:6c:16:c1:ed:d0:a2:c5:
25:6a:10:29:0d:4b:fa:c5:fb:6b:fa:c2:be:4f:e5:a5:f6:65:
1f:ca:03:8d:fd:bf:7d:ea:2a:e0:6c:d9:0f:a4:30:be:a1:41:
91:eb:76:82:64:b0:fc:45:01:c4:16:e5:c9:d9:3b:ba:ee:09:
0b:7b:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:12 2025 by rpki-client