Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3zQRtnlCEw-BZvhm7aotAeVa0r0.roa
File: 3zQRtnlCEw-BZvhm7aotAeVa0r0.roa (raw, json)
Hash identifier: E9PQSKCLE6o8Z6tlHW1VmDPN4/lKcHVIEJtP0JsZv0c=
Subject key identifier: DF:34:11:B6:79:42:13:0F:81:66:F8:66:ED:AA:2D:01:E5:5A:D2:BD
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01970201B2307C1903C83C8930D5526D5B68
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3zQRtnlCEw-BZvhm7aotAeVa0r0.roa
Signing time: Sat 24 May 2025 11:15:54 +0000
ROA not before: Sat 24 May 2025 11:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272869
IP address blocks: 45.81.126.0/24 maxlen: 24
185.244.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:02:01:b2:30:7c:19:03:c8:3c:89:30:d5:52:6d:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 24 11:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df3411b67942130f8166f866edaa2d01e55ad2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:31:62:87:b8:4f:18:b9:df:63:0d:c7:df:
d6:c6:5d:e4:95:5d:2f:a8:96:b3:dd:68:89:76:4e:
45:55:07:7d:13:33:a2:32:12:47:40:92:b3:af:20:
6b:96:b3:21:f2:16:4c:0b:ea:29:9c:8a:68:52:bb:
de:0d:98:ef:2f:2a:89:89:ae:ea:27:e4:47:02:61:
bf:65:e6:53:8d:f7:b6:58:10:b2:43:45:6a:d6:97:
e9:9e:7d:7a:1d:34:c1:66:f0:41:ce:99:e8:e6:c7:
07:8a:fc:52:16:b6:e3:b5:15:16:de:11:f2:d4:2a:
85:2b:1e:44:fe:30:07:1e:b6:31:36:2f:27:67:c4:
b4:e7:76:39:67:bf:a3:32:54:64:60:01:c9:2f:8a:
a6:09:8f:df:ce:a7:d5:b0:f4:ff:40:66:ad:9d:06:
4b:d8:a9:65:a8:fa:49:f4:b7:ff:53:25:18:cd:ab:
1b:45:2a:7c:0f:8e:6d:5f:36:7a:f4:63:55:4a:bb:
67:8b:00:76:58:19:39:0c:dd:01:f5:62:d3:3d:90:
69:4a:92:53:71:2a:ae:e4:a4:8d:92:2e:13:f5:f8:
cc:32:76:02:db:e3:c9:29:59:64:36:b6:77:cd:f9:
d4:61:19:f2:6f:88:65:4c:48:d4:b5:a1:5b:91:3e:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:11:B6:79:42:13:0F:81:66:F8:66:ED:AA:2D:01:E5:5A:D2:BD
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3zQRtnlCEw-BZvhm7aotAeVa0r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.126.0/24
185.244.235.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a5:8b:c2:7a:09:5e:92:db:22:8c:f2:57:cc:d1:7f:b5:be:
03:c0:82:08:53:e1:57:b1:aa:a5:8a:73:45:84:ce:80:2c:63:
28:6e:a0:ce:fb:ae:01:c4:9b:a6:ba:75:cf:ac:88:63:e2:d1:
0b:c1:aa:f2:da:b0:87:55:d1:ff:38:8c:1c:0d:2c:05:5d:c1:
31:c7:0c:1b:fd:0a:d2:22:8f:e2:be:4c:cf:d9:0b:3d:b7:e3:
e1:cb:da:0f:d2:4f:a6:31:80:9b:ac:53:89:91:7d:d6:ed:fc:
48:ab:2a:a9:b2:b9:b9:ca:df:2a:09:fb:6b:9b:c6:4a:72:e7:
4f:95:47:fe:c0:66:f3:68:eb:e8:64:15:c3:d0:45:4f:b1:ed:
24:c5:33:1d:b7:a4:b6:a2:a2:47:1a:00:f8:68:0e:db:ed:a3:
56:db:42:8d:5e:5c:f4:f0:91:8a:d0:9b:59:6a:9d:76:94:fa:
ab:52:d5:a4:36:f6:be:7a:00:cb:3d:b9:ae:fd:fb:4c:05:f1:
22:2f:3d:25:3e:b6:89:b7:01:b3:37:89:5f:ec:01:2b:1a:85:
cd:46:2f:c2:b2:ac:21:f1:01:89:9f:98:e4:27:17:e2:08:6a:
f3:ac:c3:5c:b9:40:82:5f:49:2e:f0:d9:96:14:f3:c1:54:b4:
58:22:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:00:26 2025 by rpki-client