Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/OJTVHABAPkMYaIPKGqmTFrqkijA.roa
File: OJTVHABAPkMYaIPKGqmTFrqkijA.roa (raw, json)
Hash identifier: RLUy1JTxC7LtAaguP6mpqe/EZzZRDZ26pPa17dSCF0c=
Subject key identifier: 38:94:D5:1C:00:40:3E:43:18:68:83:CA:1A:A9:93:16:BA:A4:8A:30
Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial: 0196E24EB2E28F92BF284D91A51EFF064C37
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/OJTVHABAPkMYaIPKGqmTFrqkijA.roa
Signing time: Sun 18 May 2025 07:32:10 +0000
ROA not before: Sun 18 May 2025 07:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210226
IP address blocks: 185.235.39.0/24 maxlen: 24
2a0e:1702:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e2:4e:b2:e2:8f:92:bf:28:4d:91:a5:1e:ff:06:4c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Validity
Not Before: May 18 07:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3894d51c00403e43186883ca1aa99316baa48a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:37:c8:87:27:03:1e:4d:24:e3:09:b2:84:
35:39:f6:32:2c:4f:a4:00:35:03:c1:cf:59:81:ce:
68:07:f0:13:97:f8:bb:d6:9a:ab:6a:57:48:0d:95:
bf:a5:3c:4c:09:f7:db:f6:73:5c:0f:38:50:fa:8c:
09:7c:f2:04:5b:e4:62:84:39:c9:64:a0:f1:9f:55:
0e:f4:af:ea:87:a1:38:c0:8f:05:91:68:b4:40:54:
bd:2f:78:bf:83:c5:98:3f:88:cb:ba:ab:ae:01:61:
96:8a:83:73:62:51:dd:1b:ae:99:da:b6:9f:b4:95:
a6:c2:c9:b7:77:99:82:9b:a3:36:cb:56:7a:f3:81:
e6:fd:13:5a:c0:60:1a:8b:a4:fd:cb:18:2f:48:6a:
63:f7:c3:3c:d2:3a:d0:0e:d5:77:ed:06:53:31:8e:
70:77:6f:10:ce:e6:10:25:4c:78:ba:3f:1a:87:94:
f7:fb:d1:2e:eb:0e:88:83:dd:a2:76:63:51:bf:48:
e8:77:90:1d:bf:c1:a1:86:33:d1:47:79:c5:00:c3:
b5:89:1f:fd:72:37:f3:35:71:bb:cc:78:d1:fc:47:
1f:75:37:d6:67:dc:60:69:e4:08:3c:00:26:1e:40:
4c:78:4e:cd:7f:9c:33:22:31:8f:81:40:ec:7a:12:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:D5:1C:00:40:3E:43:18:68:83:CA:1A:A9:93:16:BA:A4:8A:30
X509v3 Authority Key Identifier:
keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/OJTVHABAPkMYaIPKGqmTFrqkijA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.39.0/24
IPv6:
2a0e:1702:2::/48
Signature Algorithm: sha256WithRSAEncryption
36:7f:d0:74:47:0a:1e:f9:51:3e:04:65:f0:8b:f1:88:dd:1d:
f8:a8:11:6c:0e:86:24:d3:3f:85:68:57:0f:79:62:10:5e:4f:
6e:a0:2d:2c:c3:0f:89:41:bf:8f:9b:10:58:33:3c:13:10:90:
a4:95:33:25:cc:3e:d7:d5:e3:5e:22:fe:71:ac:68:b6:7c:de:
47:60:9c:b6:3f:04:39:09:57:c6:1d:0f:40:e1:51:9d:43:f7:
c5:92:45:8f:57:82:87:35:1f:96:e2:9b:b7:16:6c:fb:7b:ae:
c3:ed:89:a6:1f:87:e0:9b:75:d1:4d:15:a6:aa:ae:f9:a3:4d:
72:96:b7:1e:a4:cc:17:3e:8f:07:92:dc:c4:9c:d9:e1:62:58:
95:e4:e6:22:7e:31:ed:08:db:51:e7:d4:36:2e:4f:98:10:5b:
ab:ef:f3:eb:6e:bf:cd:0c:4c:3f:43:11:cb:09:35:43:3e:b9:
4a:6d:18:1a:d3:ff:76:fe:6c:40:e1:ce:a9:4c:96:10:87:b9:
48:59:c8:e6:7a:87:0c:83:65:17:94:43:6a:c7:77:fb:d9:f8:
38:b8:8d:e2:e8:d1:dd:c2:20:5b:32:4b:e1:03:ee:eb:b5:7f:
c8:98:5b:23:a7:6e:e1:db:77:40:fe:69:05:30:51:4f:f9:c1:
37:72:ad:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZbiTrLij5K/KE2RpR7/Bkw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWU2MjU3ZDBjM2EyYjkzMDU2MWFmMjUyMmQ5ZTVhZjdm
OWNiYzcwHhcNMjUwNTE4MDczMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODk0ZDUxYzAwNDAzZTQzMTg2ODgzY2ExYWE5OTMxNmJhYTQ4YTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0A3yIcnAx5NJOMJsoQ1OfYyLE+k
ADUDwc9Zgc5oB/ATl/i71pqraldIDZW/pTxMCffb9nNcDzhQ+owJfPIEW+RihDnJ
ZKDxn1UO9K/qh6E4wI8FkWi0QFS9L3i/g8WYP4jLuquuAWGWioNzYlHdG66Z2raf
tJWmwsm3d5mCm6M2y1Z684Hm/RNawGAai6T9yxgvSGpj98M80jrQDtV37QZTMY5w
d28QzuYQJUx4uj8ah5T3+9Eu6w6Ig92idmNRv0jod5Adv8GhhjPRR3nFAMO1iR/9
cjfzNXG7zHjR/EcfdTfWZ9xgaeQIPAAmHkBMeE7Nf5wzIjGPgUDsehLCpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDiU1RwAQD5DGGiDyhqpkxa6pIowMB8GA1UdIwQY
MBaAFBLuYlfQw6K5MFYa8lItnlr3+cvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEt
M2YzMzg2NjE5MmQwLzEvT0pUVkhBQkFQa01ZYUlQS0dxbVRGcnFraWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEtM2YzMzg2NjE5MmQw
LzEvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuesnMA8E
AgACMAkDBwAqDhcCAAIwDQYJKoZIhvcNAQELBQADggEBADZ/0HRHCh75UT4EZfCL
8YjdHfioEWwOhiTTP4VoVw95YhBeT26gLSzDD4lBv4+bEFgzPBMQkKSVMyXMPtfV
414i/nGsaLZ83kdgnLY/BDkJV8YdD0DhUZ1D98WSRY9Xgoc1H5bim7cWbPt7rsPt
iaYfh+CbddFNFaaqrvmjTXKWtx6kzBc+jweS3MSc2eFiWJXk5iJ+Me0I21Hn1DYu
T5gQW6vv8+tuv80MTD9DEcsJNUM+uUptGBrT/3b+bEDhzqlMlhCHuUhZyOZ6hwyD
ZReUQ2rHd/vZ+Di4jeLo0d3CIFsyS+ED7uu1f8iYWyOnbuHbd0D+aQUwUU/5wTdy
rRw=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:15 2025 by rpki-client