Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ji3OcIgv3WmDXiIWG0rqnMHo5FM.roa
File: Ji3OcIgv3WmDXiIWG0rqnMHo5FM.roa (raw, json)
Hash identifier: +r/dtHNHgcUNpHAw0hSlfeWEeoHC5zwlnXfsTd+C9p8=
Subject key identifier: 26:2D:CE:70:88:2F:DD:69:83:5E:22:16:1B:4A:EA:9C:C1:E8:E4:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0197CB61F01A6DDFA81642CDB63D86A9A4EA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ji3OcIgv3WmDXiIWG0rqnMHo5FM.roa
Signing time: Wed 02 Jul 2025 13:44:42 +0000
ROA not before: Wed 02 Jul 2025 13:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214822
IP address blocks: 193.124.121.0/24 maxlen: 24
194.87.9.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:61:f0:1a:6d:df:a8:16:42:cd:b6:3d:86:a9:a4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 2 13:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=262dce70882fdd69835e22161b4aea9cc1e8e453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:8f:03:4b:ca:8a:f8:41:e3:53:c1:4f:4b:
68:44:04:46:9f:43:a4:e5:d2:f4:e4:3b:62:c0:e5:
47:11:ee:37:9d:1b:b3:47:1b:c1:f2:18:0b:47:ec:
85:7b:3b:9b:fb:14:ac:4f:00:7b:51:2c:6a:fd:39:
e5:6b:87:56:ed:51:d0:38:df:e9:a0:fe:c7:1b:c3:
df:11:16:ab:cf:7f:ac:51:7b:63:eb:8e:64:17:be:
94:01:8d:0e:05:7a:d3:6c:a0:37:5d:f5:a3:58:52:
2f:a2:1d:75:f3:51:7a:8b:f9:d9:51:0b:90:9d:97:
de:b2:9d:13:5f:ac:0e:36:b4:c8:49:52:15:fa:bd:
f5:45:b6:76:7e:09:61:56:e9:92:fe:8b:07:28:48:
d2:fe:b5:93:91:7f:3e:c0:f9:cc:c8:ca:9d:d7:0f:
81:d8:b7:de:db:72:b3:ac:2f:c8:09:6d:fe:35:38:
37:e0:a4:d6:52:89:05:aa:8d:e4:3d:cf:9d:2e:db:
a9:ca:df:2e:74:5f:2e:29:fc:c4:11:a4:c3:ab:eb:
2a:7d:06:40:3c:07:ba:5a:64:fa:8d:05:fc:93:dc:
41:3f:3e:78:e2:05:50:62:fc:66:aa:23:e5:26:6b:
53:f6:25:2e:07:e7:0f:70:68:22:fe:fc:12:7a:fb:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2D:CE:70:88:2F:DD:69:83:5E:22:16:1B:4A:EA:9C:C1:E8:E4:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ji3OcIgv3WmDXiIWG0rqnMHo5FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.121.0/24
194.87.9.0/24
194.87.168.0/24
195.133.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:12:bb:99:df:33:fe:b9:c4:fe:a1:83:6e:cf:48:24:5d:a9:
6f:07:27:f7:d4:ae:76:c9:a5:d7:d8:57:4f:bf:af:17:ed:25:
f4:12:34:c3:23:40:fd:09:69:52:bf:54:8c:a7:a4:64:1c:e0:
a9:b9:84:a6:78:75:17:eb:cf:6a:2f:dd:b4:78:d0:1f:c2:d7:
9e:5f:59:9b:9a:5d:90:8a:6f:01:28:0d:b5:6f:3e:bd:13:76:
2e:4d:90:07:81:3b:fa:8e:16:6a:16:2b:bf:0c:f7:b5:a4:95:
e6:1e:c0:93:e4:70:63:0a:b0:85:8e:b4:21:20:73:27:0a:cb:
ce:0e:ce:fb:65:01:fc:b5:7d:08:d1:ae:c0:00:c2:12:e5:32:
60:1d:54:7e:26:ed:ca:c0:01:18:f5:a0:83:a5:29:ff:4f:13:
90:8f:d2:d7:cc:ce:a3:0e:01:64:63:aa:0b:8f:aa:2f:88:64:
20:98:7b:af:ec:37:42:f3:41:a0:af:2f:26:1c:bf:25:a6:3f:
dc:66:f3:db:c6:83:51:55:2e:ef:85:e7:a7:b7:88:cc:b4:04:
9c:3b:af:c0:14:85:8c:b1:39:f0:90:d8:91:d1:84:08:59:c3:
31:f5:f8:b8:2c:ab:06:ef:81:3d:b3:44:2e:07:9d:57:1c:01:
9c:14:99:e5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZfLYfAabd+oFkLNtj2GqaTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNzAyMTM0NDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjJkY2U3MDg4MmZkZDY5ODM1ZTIyMTYxYjRhZWE5Y2MxZThlNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSmPA0vKivhB41PBT0toRARGn0Ok
5dL05DtiwOVHEe43nRuzRxvB8hgLR+yFezub+xSsTwB7USxq/Tnla4dW7VHQON/p
oP7HG8PfERarz3+sUXtj645kF76UAY0OBXrTbKA3XfWjWFIvoh1181F6i/nZUQuQ
nZfesp0TX6wONrTISVIV+r31RbZ2fglhVumS/osHKEjS/rWTkX8+wPnMyMqd1w+B
2Lfe23KzrC/ICW3+NTg34KTWUokFqo3kPc+dLtupyt8udF8uKfzEEaTDq+sqfQZA
PAe6WmT6jQX8k9xBPz544gVQYvxmqiPlJmtT9iUuB+cPcGgi/vwSevsc8wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCYtznCIL91pg14iFhtK6pzB6ORTMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSmkzT2NJZ3YzV21EWGlJV0cwcnFuTUhvNUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwXx5AwQA
wlcJAwQAwleoAwQAw4UfMA0GCSqGSIb3DQEBCwUAA4IBAQAcEruZ3zP+ucT+oYNu
z0gkXalvByf31K52yaXX2FdPv68X7SX0EjTDI0D9CWlSv1SMp6RkHOCpuYSmeHUX
689qL920eNAfwteeX1mbml2Qim8BKA21bz69E3YuTZAHgTv6jhZqFiu/DPe1pJXm
HsCT5HBjCrCFjrQhIHMnCsvODs77ZQH8tX0I0a7AAMIS5TJgHVR+Ju3KwAEY9aCD
pSn/TxOQj9LXzM6jDgFkY6oLj6oviGQgmHuv7DdC80Ggry8mHL8lpj/cZvPbxoNR
VS7vheent4jMtAScO6/AFIWMsTnwkNiR0YQIWcMx9fi4LKsG74E9s0QuB51XHAGc
FJnl
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:17 2025 by rpki-client