Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa
File: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (raw, json)
Hash identifier: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=
Subject key identifier: BB:12:36:2A:8E:EC:8F:68:8D:E5:FE:5A:F2:E0:A2:8B:58:43:05:2C
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01970C08D50EB8474D0CFC316AED5BBE0E05
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa
Signing time: Mon 26 May 2025 09:59:54 +0000
ROA not before: Mon 26 May 2025 09:59:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57841
IP address blocks: 31.42.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:08:d5:0e:b8:47:4d:0c:fc:31:6a:ed:5b:be:0e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: May 26 09:59:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb12362a8eec8f688de5fe5af2e0a28b5843052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:79:06:72:58:d4:96:de:7d:26:bc:4d:66:
aa:98:f5:42:ee:4d:cb:58:9b:6c:84:e6:e7:d2:dc:
fe:04:84:62:72:05:df:fc:03:cf:21:23:65:2a:75:
45:a2:df:3c:5c:e5:7c:a2:2e:65:2e:2d:09:c9:40:
11:55:d5:4e:1f:f4:fa:37:a2:10:61:87:85:08:4d:
54:8e:ac:b1:16:00:41:8b:87:d8:9f:68:da:e6:ab:
74:d9:8b:b6:2a:da:a1:9d:d0:30:97:dd:00:9a:71:
fa:09:4b:76:28:6e:d8:ef:1a:14:8e:96:b3:9e:75:
4d:97:aa:12:58:47:b8:b6:91:ba:38:9e:99:ef:eb:
e1:21:af:11:03:7a:2c:b9:4c:70:32:ba:6d:a8:1d:
8f:c1:02:1c:7d:6c:ee:e5:48:4e:cb:2a:44:3a:b6:
10:01:ab:65:73:ce:f5:ed:a1:e3:f9:88:4f:83:db:
cf:d3:39:d4:d1:65:03:76:9c:65:ad:d4:3c:f1:9e:
d7:0b:ff:57:a4:e6:73:e4:25:28:75:86:63:64:6a:
7a:0e:c1:0a:da:22:e9:93:51:7f:9d:de:bd:b7:e5:
d7:23:f4:34:1e:e2:af:11:8a:83:3a:a4:90:f2:cd:
1c:c6:c2:2a:24:4c:1a:d5:ec:d9:76:b9:e3:52:b1:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:12:36:2A:8E:EC:8F:68:8D:E5:FE:5A:F2:E0:A2:8B:58:43:05:2C
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f8:ea:1b:f6:bf:f6:bf:59:8f:76:db:60:3a:7f:c7:51:32:
a9:23:8a:ab:87:c4:ca:82:e2:b8:05:7e:7a:a2:db:5b:51:46:
51:10:9c:03:f1:14:49:37:fb:cf:b2:f0:66:c3:38:7b:70:8b:
d6:0f:96:b2:e4:2a:41:8b:a9:35:01:1f:42:1f:77:97:d5:2c:
32:82:e6:01:06:04:02:50:19:07:5b:2b:6c:ab:1f:b9:8c:7c:
b7:67:a3:67:31:8a:01:b0:a7:ef:16:2e:c7:01:b8:3b:53:1c:
21:8f:63:08:36:e6:8f:27:77:b9:ad:5a:d4:f3:b7:06:b0:c5:
98:3e:08:43:e4:ba:63:6e:c3:7f:39:1b:39:aa:86:59:f8:82:
71:7b:9e:74:f2:03:69:a5:37:a1:de:3c:86:08:ff:dd:ad:f6:
22:78:27:cf:00:93:12:1c:9f:6d:30:4e:ee:0d:10:05:16:57:
01:db:30:96:5e:85:99:a5:9c:61:d6:38:d6:47:b2:ce:d8:be:
89:3b:9c:e3:b5:f0:c4:fe:d7:26:8d:8a:93:e5:c4:c3:59:1a:
ad:db:7a:b6:8a:67:69:56:d0:07:dd:64:cf:5e:94:f3:c5:56:
84:3e:de:f4:be:c9:0b:da:6b:7a:6d:27:24:90:3e:a7:61:f6:
4e:5e:ff:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcMCNUOuEdNDPwxau1bvg4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjUwNTI2MDk1OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjEyMzYyYThlZWM4ZjY4OGRlNWZlNWFmMmUwYTI4YjU4NDMwNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuF5BnJY1JbefSa8TWaqmPVC7k3L
WJtshObn0tz+BIRicgXf/APPISNlKnVFot88XOV8oi5lLi0JyUARVdVOH/T6N6IQ
YYeFCE1UjqyxFgBBi4fYn2ja5qt02Yu2KtqhndAwl90AmnH6CUt2KG7Y7xoUjpaz
nnVNl6oSWEe4tpG6OJ6Z7+vhIa8RA3osuUxwMrptqB2PwQIcfWzu5UhOyypEOrYQ
Aatlc8717aHj+YhPg9vP0znU0WUDdpxlrdQ88Z7XC/9XpOZz5CUodYZjZGp6DsEK
2iLpk1F/nd69t+XXI/Q0HuKvEYqDOqSQ8s0cxsIqJEwa1ezZdrnjUrFiHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsSNiqO7I9ojeX+WvLgootYQwUsMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvdXhJMktvN3NqMmlONWY1YTh1Q2lpMWhEQlN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHypZMA0G
CSqGSIb3DQEBCwUAA4IBAQCf+Oob9r/2v1mPdttgOn/HUTKpI4qrh8TKguK4BX56
ottbUUZREJwD8RRJN/vPsvBmwzh7cIvWD5ay5CpBi6k1AR9CH3eX1SwyguYBBgQC
UBkHWytsqx+5jHy3Z6NnMYoBsKfvFi7HAbg7Uxwhj2MINuaPJ3e5rVrU87cGsMWY
PghD5LpjbsN/ORs5qoZZ+IJxe5508gNppTeh3jyGCP/drfYieCfPAJMSHJ9tME7u
DRAFFlcB2zCWXoWZpZxh1jjWR7LO2L6JO5zjtfDE/tcmjYqT5cTDWRqt23q2imdp
VtAH3WTPXpTzxVaEPt70vskL2mt6bSckkD6nYfZOXv8e
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:09 2025 by rpki-client