Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa
File: RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa (raw, json)
Hash identifier: U62vygXnMfJooP0R/d4gF/Enn1AJ0PueFVZ40dCASXg=
Subject key identifier: 44:BC:D3:CE:0B:69:51:A1:2F:DC:76:9C:E3:C0:F0:9D:0E:8E:29:10
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 0196B06B170B643170D5AC7DD68CC9FEF82F
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa
Signing time: Thu 08 May 2025 15:02:10 +0000
ROA not before: Thu 08 May 2025 15:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 92.249.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6b:17:0b:64:31:70:d5:ac:7d:d6:8c:c9:fe:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: May 8 15:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44bcd3ce0b6951a12fdc769ce3c0f09d0e8e2910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:10:04:3c:90:7b:d4:ab:e1:1b:bc:e5:91:
a0:75:7e:27:e8:fe:80:89:d7:03:e6:4b:1a:83:a4:
a3:9e:e7:2c:9f:7b:7e:25:62:65:8c:37:57:f2:19:
21:e4:d3:db:ca:30:55:28:59:58:64:be:0a:23:8c:
c3:eb:4f:49:dd:e4:c7:f7:6c:5b:25:9a:fd:78:7e:
e7:25:fb:9c:c5:a9:04:ed:72:9f:42:ee:12:61:c4:
4a:49:4c:1f:c0:b5:a6:c8:a7:87:56:df:8f:2f:f5:
65:6d:a3:22:2a:e6:ad:54:26:8a:f8:a0:e3:3c:4f:
42:ba:bf:19:c5:62:75:72:41:0e:e1:5a:bb:82:cb:
82:51:a4:16:e0:0b:c0:29:47:99:2e:56:6c:b3:fd:
99:69:96:27:dd:ad:b9:93:6b:ae:f9:fc:25:b5:03:
13:59:ef:f2:0a:86:bd:c9:57:e1:9a:ad:98:2a:2e:
0e:1b:fb:32:31:0c:ee:22:98:3d:29:7c:c5:a8:03:
84:c5:1b:ae:53:a4:59:40:7f:48:a3:28:f2:48:3b:
90:21:4d:81:f2:db:a5:9d:48:c5:75:06:7d:56:d9:
68:f0:eb:c9:0b:5e:5f:71:48:ba:4c:36:ff:d3:33:
b0:f5:17:a6:95:6d:9e:ea:29:73:1d:60:6c:34:50:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:D3:CE:0B:69:51:A1:2F:DC:76:9C:E3:C0:F0:9D:0E:8E:29:10
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7c:ce:27:13:d8:d4:37:f4:36:5b:96:5c:8b:0c:04:09:88:
87:8b:73:54:c1:af:f9:4a:11:74:15:5b:eb:79:b6:84:b7:73:
dc:e9:e2:68:7f:ab:1f:38:10:2e:9e:33:59:2f:8e:4c:32:e6:
81:85:58:ef:6f:87:33:85:c6:9e:e4:1c:c3:74:70:af:95:f6:
a3:08:75:96:48:89:29:42:de:e4:9e:fb:3a:56:ba:b9:c0:8a:
93:4d:fb:a4:e9:7d:5e:83:0f:67:ae:78:dd:b0:e4:c1:69:45:
5b:22:ea:e0:18:d7:d9:f9:1b:c2:3c:8d:7e:f5:c6:22:0d:ca:
2c:db:aa:f7:f5:9f:ad:e0:69:2c:7c:5d:7c:63:43:39:bb:36:
26:bd:59:bc:01:7c:20:18:87:ea:89:c6:70:16:3a:dd:77:33:
89:c2:74:c0:04:a8:eb:93:3d:b5:48:0c:4b:c8:10:01:7e:2d:
55:0c:2c:db:e7:84:c0:ca:89:08:4f:ff:d6:0f:e1:59:96:d8:
97:4b:ce:78:a1:68:8b:b3:5b:a1:ce:5c:77:47:74:03:8f:4c:
7c:b5:33:33:01:d1:b4:15:20:b3:1e:a0:1f:85:81:45:8c:b5:
66:e3:6b:66:79:c7:92:08:4a:c0:59:fb:88:79:0f:34:61:a3:
af:c0:b8:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZawaxcLZDFw1ax91ozJ/vgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4
ZTU3ZDMwHhcNMjUwNTA4MTUwMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGJjZDNjZTBiNjk1MWExMmZkYzc2OWNlM2MwZjA5ZDBlOGUyOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa0QBDyQe9Sr4Ru85ZGgdX4n6P6A
idcD5ksag6Sjnucsn3t+JWJljDdX8hkh5NPbyjBVKFlYZL4KI4zD609J3eTH92xb
JZr9eH7nJfucxakE7XKfQu4SYcRKSUwfwLWmyKeHVt+PL/VlbaMiKuatVCaK+KDj
PE9Cur8ZxWJ1ckEO4Vq7gsuCUaQW4AvAKUeZLlZss/2ZaZYn3a25k2uu+fwltQMT
We/yCoa9yVfhmq2YKi4OG/syMQzuIpg9KXzFqAOExRuuU6RZQH9IoyjySDuQIU2B
8tulnUjFdQZ9Vtlo8OvJC15fcUi6TDb/0zOw9RemlW2e6ilzHWBsNFAgKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFES8084LaVGhL9x2nOPA8J0OjikQMB8GA1UdIwQY
MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt
ZTczM2MyNjJhMzgyLzEvUkx6VHpndHBVYUV2M0hhYzQ4RHduUTZPS1JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy
LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkZMA0G
CSqGSIb3DQEBCwUAA4IBAQCPfM4nE9jUN/Q2W5ZciwwECYiHi3NUwa/5ShF0FVvr
ebaEt3Pc6eJof6sfOBAunjNZL45MMuaBhVjvb4czhcae5BzDdHCvlfajCHWWSIkp
Qt7knvs6Vrq5wIqTTfuk6X1egw9nrnjdsOTBaUVbIurgGNfZ+RvCPI1+9cYiDcos
26r39Z+t4GksfF18Y0M5uzYmvVm8AXwgGIfqicZwFjrddzOJwnTABKjrkz21SAxL
yBABfi1VDCzb54TAyokIT//WD+FZltiXS854oWiLs1uhzlx3R3QDj0x8tTMzAdG0
FSCzHqAfhYFFjLVm42tmeceSCErAWfuIeQ80YaOvwLh/
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:49 2025 by rpki-client