Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/funJ0mIYmkKs_8uVGo-vQCokonQ.roa
File: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (raw, json)
Hash identifier: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=
Subject key identifier: 7E:E9:C9:D2:62:18:9A:42:AC:FF:CB:95:1A:8F:AF:40:2A:24:A2:74
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019706A43863768060A62ED49C31CBA318D9
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/funJ0mIYmkKs_8uVGo-vQCokonQ.roa
Signing time: Sun 25 May 2025 08:51:54 +0000
ROA not before: Sun 25 May 2025 08:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.9.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:a4:38:63:76:80:60:a6:2e:d4:9c:31:cb:a3:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: May 25 08:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee9c9d262189a42acffcb951a8faf402a24a274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:df:8f:b7:49:c9:c1:65:22:8f:7a:d4:ff:
16:da:0b:58:9c:b1:c0:f2:4c:b5:aa:53:54:e5:c0:
99:b7:50:0f:85:b0:f6:42:76:86:33:b8:ba:f6:0c:
eb:44:41:57:64:91:a0:bd:ca:f3:e7:47:7f:63:37:
1f:c9:ca:c0:11:d0:c5:c8:0f:f7:db:92:a7:2f:33:
17:b4:2a:9e:3c:56:b4:4a:f5:f6:87:51:eb:01:2d:
e7:62:5c:63:5c:cf:b9:e9:60:fc:54:59:0f:da:6e:
8c:6f:74:05:ab:41:e9:45:d0:34:ce:d5:cf:1a:53:
b4:28:f5:52:39:a4:8a:0e:90:73:b5:75:98:9f:61:
58:21:63:1b:dc:e3:ee:5d:51:ac:7a:2d:33:64:ed:
67:ef:2a:91:56:00:48:7c:c7:39:0f:5a:05:a7:67:
d8:79:d5:09:30:5a:94:e7:0d:26:8c:7b:d2:34:a3:
b2:d0:fb:6c:86:b2:95:d5:a7:94:23:cd:58:8a:00:
d9:6d:da:c3:93:6a:8e:04:fe:bd:56:4c:e5:d2:7c:
ce:53:42:91:53:b3:3d:5c:a8:bd:c9:a7:74:85:10:
59:ac:f5:17:5c:91:39:dc:b9:0f:40:bd:b7:64:dc:
1d:11:55:a7:1f:f4:ca:45:e6:86:64:70:84:29:1a:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:C9:D2:62:18:9A:42:AC:FF:CB:95:1A:8F:AF:40:2A:24:A2:74
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/funJ0mIYmkKs_8uVGo-vQCokonQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:70:0e:0f:9e:03:f5:ed:05:ad:18:f4:de:4d:f9:a6:d6:90:
ad:55:51:a0:01:3c:38:0d:2f:11:29:23:8f:70:de:03:f4:6b:
bc:de:fa:cb:99:cd:8a:d5:36:7a:2a:8f:6c:05:0c:7e:aa:1d:
88:93:85:8a:68:8e:b6:fa:f1:2a:26:eb:fe:18:eb:54:82:63:
10:2f:d7:71:40:dd:c2:f8:f2:75:f5:2c:cc:7f:1f:5e:1a:11:
d0:83:b0:eb:c6:f3:a3:3d:98:ff:1f:b9:3f:fd:3c:70:ca:c5:
fc:ee:97:39:ed:6f:fe:36:db:8f:75:52:99:20:7d:5d:f6:13:
b0:e9:de:0b:c3:3e:ce:c6:b7:d1:bc:86:bd:06:60:9e:0f:e5:
ba:35:9f:c3:96:e1:75:9b:e6:7d:8f:06:42:ba:02:bd:2b:4a:
cb:39:7d:e1:29:d6:6a:11:cb:d2:0c:ae:74:71:03:4b:d3:ef:
1a:9c:2f:88:47:72:b4:ab:d4:df:52:e1:ca:fd:94:41:72:6d:
25:05:3c:66:2b:97:8b:a6:05:c4:5d:5c:3d:80:fc:09:0d:1c:
18:0b:6b:0d:66:3a:00:42:37:d8:2e:28:cb:f9:e8:f7:c8:7b:
f3:28:bf:dc:42:04:d3:84:c6:32:68:70:56:73:71:0f:69:7f:
31:c8:74:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcGpDhjdoBgpi7UnDHLoxjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjUwNTI1MDg1MTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWU5YzlkMjYyMTg5YTQyYWNmZmNiOTUxYThmYWY0MDJhMjRhMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtujfj7dJycFlIo961P8W2gtYnLHA
8ky1qlNU5cCZt1APhbD2QnaGM7i69gzrREFXZJGgvcrz50d/YzcfycrAEdDFyA/3
25KnLzMXtCqePFa0SvX2h1HrAS3nYlxjXM+56WD8VFkP2m6Mb3QFq0HpRdA0ztXP
GlO0KPVSOaSKDpBztXWYn2FYIWMb3OPuXVGsei0zZO1n7yqRVgBIfMc5D1oFp2fY
edUJMFqU5w0mjHvSNKOy0PtshrKV1aeUI81YigDZbdrDk2qOBP69Vkzl0nzOU0KR
U7M9XKi9yad0hRBZrPUXXJE53LkPQL23ZNwdEVWnH/TKReaGZHCEKRqcfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7pydJiGJpCrP/LlRqPr0AqJKJ0MB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvZnVuSjBtSVlta0tzXzh1VkdvLXZRQ29rb25RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQkBMA0G
CSqGSIb3DQEBCwUAA4IBAQA7cA4PngP17QWtGPTeTfmm1pCtVVGgATw4DS8RKSOP
cN4D9Gu83vrLmc2K1TZ6Ko9sBQx+qh2Ik4WKaI62+vEqJuv+GOtUgmMQL9dxQN3C
+PJ19SzMfx9eGhHQg7DrxvOjPZj/H7k//TxwysX87pc57W/+NtuPdVKZIH1d9hOw
6d4Lwz7OxrfRvIa9BmCeD+W6NZ/DluF1m+Z9jwZCugK9K0rLOX3hKdZqEcvSDK50
cQNL0+8anC+IR3K0q9TfUuHK/ZRBcm0lBTxmK5eLpgXEXVw9gPwJDRwYC2sNZjoA
QjfYLijL+ej3yHvzKL/cQgTThMYyaHBWc3EPaX8xyHTm
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:56 2025 by rpki-client