Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Yr2ZlGoIUTgmhs8ekLrBDlSyB5U.roa
File: Yr2ZlGoIUTgmhs8ekLrBDlSyB5U.roa (raw, json)
Hash identifier: B4yDOMbJ+4uMdVIWPj9JAw5B840dF5n9/fziMoJT+JU=
Subject key identifier: 62:BD:99:94:6A:08:51:38:26:86:CF:1E:90:BA:C1:0E:54:B2:07:95
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197E59A98C84882AA992D7E1FE446F93EED
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Yr2ZlGoIUTgmhs8ekLrBDlSyB5U.roa
Signing time: Mon 07 Jul 2025 15:56:43 +0000
ROA not before: Mon 07 Jul 2025 15:56:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 82.153.50.0/24 maxlen: 24
89.213.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:9a:98:c8:48:82:aa:99:2d:7e:1f:e4:46:f9:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 7 15:56:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62bd99946a0851382686cf1e90bac10e54b20795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:d1:51:94:10:59:3d:9c:e5:7f:3f:46:97:
7b:c9:3a:69:86:06:4b:a9:af:50:a9:1f:be:d2:92:
37:f4:43:00:1c:af:e2:11:2e:f5:e9:f5:a1:19:fa:
50:40:1b:5c:64:29:e8:d4:f0:5a:f3:36:a0:a6:16:
09:8c:78:0c:c5:d1:15:4c:c0:d5:41:46:10:f1:7f:
74:31:2f:66:14:62:5d:21:f3:ca:74:ff:2a:56:21:
f1:e6:d4:c2:ff:b4:cc:8e:bd:d1:23:0a:7c:5e:d2:
64:e7:6c:8e:4f:56:24:ea:1e:45:1d:ab:c7:70:23:
5e:fc:57:ce:e5:e6:76:10:d5:a8:b9:c6:d8:47:cf:
c2:5c:63:ce:03:d7:ca:26:f0:42:7e:28:ac:d3:f9:
de:59:14:36:9d:83:4a:76:b6:2e:01:04:5e:87:91:
e0:0e:d8:d6:4e:a2:f1:eb:92:61:6e:f8:42:6c:fb:
52:54:5b:32:1f:1b:99:b2:78:c1:1e:99:00:97:75:
df:51:ca:f9:b5:c6:af:85:c2:67:0b:b8:1c:b4:2b:
10:5b:1f:fd:c9:d4:ae:15:e1:a9:dd:b6:9d:72:13:
2b:19:0d:7d:79:de:51:37:e1:1e:2e:65:01:ae:c1:
bf:e2:c5:35:8d:18:26:cd:5c:ca:84:8a:be:b7:28:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BD:99:94:6A:08:51:38:26:86:CF:1E:90:BA:C1:0E:54:B2:07:95
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Yr2ZlGoIUTgmhs8ekLrBDlSyB5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
89.213.52.0/24
Signature Algorithm: sha256WithRSAEncryption
57:24:20:4a:10:dc:7b:22:6e:71:d8:a7:cf:57:12:48:49:a2:
d9:9b:2a:fa:19:bf:b5:40:f4:54:b0:a9:ce:bb:9d:c3:a0:8f:
95:60:07:e4:8a:51:11:35:6e:d6:ff:96:3a:3c:3d:0e:45:b8:
12:f5:c5:68:35:34:20:c0:c7:4e:76:38:be:aa:f4:4e:34:58:
44:d3:b1:ee:4f:5b:03:e9:38:cf:70:30:4f:11:68:26:77:a1:
30:98:e8:8d:e5:33:ee:e0:62:e0:9f:93:ae:be:5e:f5:6b:73:
d0:2c:7b:8e:16:a2:fd:61:27:3c:43:72:d2:cf:cb:01:85:71:
7f:1a:e7:38:1d:78:6d:3a:ca:b2:b0:22:2a:7d:4c:ed:55:56:
ac:86:35:ae:a4:c3:50:21:00:8d:77:dc:4d:89:6a:5f:c7:2c:
44:8f:89:b7:b2:72:90:20:30:2d:76:23:38:e2:ce:05:c9:0d:
3b:1b:34:4e:64:04:6a:ad:d9:69:12:12:21:f2:c5:a2:18:0c:
23:dd:a8:8d:7a:12:23:07:ce:51:a8:1d:79:28:c7:d5:74:ff:
af:8b:e1:91:c1:0c:db:0f:28:1e:57:b3:5d:92:2b:b3:9f:57:
d0:13:6c:68:ad:70:5c:fc:08:8c:de:0f:ed:c9:36:f0:55:04:
81:53:bd:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZflmpjISIKqmS1+H+RG+T7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNzA3MTU1NjQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmJkOTk5NDZhMDg1MTM4MjY4NmNmMWU5MGJhYzEwZTU0YjIwNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9PRUZQQWT2c5X8/Rpd7yTpphgZL
qa9QqR++0pI39EMAHK/iES716fWhGfpQQBtcZCno1PBa8zagphYJjHgMxdEVTMDV
QUYQ8X90MS9mFGJdIfPKdP8qViHx5tTC/7TMjr3RIwp8XtJk52yOT1Yk6h5FHavH
cCNe/FfO5eZ2ENWoucbYR8/CXGPOA9fKJvBCfiis0/neWRQ2nYNKdrYuAQReh5Hg
DtjWTqLx65JhbvhCbPtSVFsyHxuZsnjBHpkAl3XfUcr5tcavhcJnC7gctCsQWx/9
ydSuFeGp3badchMrGQ19ed5RN+EeLmUBrsG/4sU1jRgmzVzKhIq+tyg4WQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGK9mZRqCFE4JobPHpC6wQ5UsgeVMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWXIyWmxHb0lVVGdtaHM4ZWtMckJEbFN5QjVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpkyAwQA
WdU0MA0GCSqGSIb3DQEBCwUAA4IBAQBXJCBKENx7Im5x2KfPVxJISaLZmyr6Gb+1
QPRUsKnOu53DoI+VYAfkilERNW7W/5Y6PD0ORbgS9cVoNTQgwMdOdji+qvRONFhE
07HuT1sD6TjPcDBPEWgmd6EwmOiN5TPu4GLgn5Ouvl71a3PQLHuOFqL9YSc8Q3LS
z8sBhXF/Guc4HXhtOsqysCIqfUztVVashjWupMNQIQCNd9xNiWpfxyxEj4m3snKQ
IDAtdiM44s4FyQ07GzROZARqrdlpEhIh8sWiGAwj3aiNehIjB85RqB15KMfVdP+v
i+GRwQzbDygeV7Ndkiuzn1fQE2xorXBc/AiM3g/tyTbwVQSBU70r
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:59 2025 by rpki-client