Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YQZgOJorfJXFZiQqEmJ2frozvR8.roa
File: YQZgOJorfJXFZiQqEmJ2frozvR8.roa (raw, json)
Hash identifier: J2nPpzu6M93QqtoWZkkvbdMuS9pxJjXECj+OX9a0Rp0=
Subject key identifier: 61:06:60:38:9A:2B:7C:95:C5:66:24:2A:12:62:76:7E:BA:33:BD:1F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019701CBAE0CBD9ABCEF3A86F419032E68AC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YQZgOJorfJXFZiQqEmJ2frozvR8.roa
Signing time: Sat 24 May 2025 10:16:54 +0000
ROA not before: Sat 24 May 2025 10:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50129
IP address blocks: 31.15.0.0/22 maxlen: 22
185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:cb:ae:0c:bd:9a:bc:ef:3a:86:f4:19:03:2e:68:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 24 10:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=610660389a2b7c95c566242a1262767eba33bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:ee:97:55:a7:a7:b1:19:7f:5d:f7:f0:ac:
db:7a:ca:38:43:70:86:d6:c8:de:d1:ca:42:f7:d2:
70:e6:0d:8e:98:b7:a9:f1:ed:82:8c:ed:52:1e:f4:
41:af:cb:31:7a:46:6a:98:c6:84:b1:9f:a9:b6:f7:
fd:9b:83:4d:af:23:8a:b0:75:52:fe:d8:9b:df:f8:
83:d3:ca:ce:e9:94:aa:33:0e:7a:ef:72:e2:30:66:
8d:35:9e:4c:1b:e8:19:a0:06:b2:e2:b7:49:52:9d:
9c:59:15:71:96:f1:2c:68:cc:1a:f5:87:71:02:9c:
7e:32:92:22:83:f4:db:58:c9:b4:43:8e:2c:37:a5:
ef:b3:2e:e0:63:87:dd:88:d3:9d:b0:fd:ec:90:36:
b6:60:96:60:e2:eb:e7:c3:4f:d7:62:6e:98:65:3f:
86:c4:9b:4f:81:e2:2e:1d:8a:87:91:5c:ec:b4:a8:
8c:6e:c8:24:c7:6e:89:86:1b:54:a2:ca:7c:da:8d:
1b:bd:b1:84:50:68:d5:95:c5:58:c4:83:8b:e3:59:
ab:91:3e:ba:fa:f8:11:c3:9c:e2:87:03:9c:35:a3:
69:9a:a2:b8:a5:77:a3:09:d5:69:d8:e4:02:bd:85:
47:1a:7a:43:da:08:1a:a5:2f:46:c9:16:13:14:21:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:60:38:9A:2B:7C:95:C5:66:24:2A:12:62:76:7E:BA:33:BD:1F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YQZgOJorfJXFZiQqEmJ2frozvR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
185.241.122.0/23
194.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
30:90:30:c5:b5:d4:ee:f6:bb:5e:36:91:61:f2:76:b6:0a:08:
1c:ed:72:4b:bc:b6:db:43:0b:c4:d4:59:ea:ea:bf:44:2a:29:
b4:0c:5d:13:70:69:95:74:49:83:cf:af:34:8c:4e:63:32:22:
44:0f:51:8c:24:3b:70:3c:73:c0:2a:fd:a2:35:87:7f:88:95:
34:6c:18:6d:98:e4:b5:bc:79:cc:b2:74:df:4f:e7:30:10:63:
f8:9a:cf:71:ce:75:ee:ba:aa:7d:ea:ea:08:c1:f6:f6:6f:d7:
f5:fe:94:72:13:f7:ac:f1:c2:2a:25:7c:a8:65:ea:14:b5:ba:
0f:4b:86:87:64:04:14:e8:03:76:4f:96:89:b2:fd:bb:b9:8c:
a9:a7:5f:20:64:3b:b0:15:77:0c:e5:41:95:ad:23:93:70:2e:
5d:d7:f6:76:bb:fa:8f:5e:dd:6c:17:c6:68:73:7b:24:99:01:
24:71:bb:68:70:2c:51:e7:9d:01:14:a3:58:b9:7d:8e:67:1c:
f1:3d:bc:c3:91:ff:3c:6c:01:6e:a7:23:99:c9:3b:22:c3:d8:
0e:14:ee:b3:e2:ef:22:d9:57:d4:6f:b9:6d:2a:e4:a9:3b:e7:
75:00:86:b5:63:ab:e1:5e:e7:65:41:d2:6b:52:39:57:b8:24:
b6:9d:12:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZcBy64MvZq87zqG9BkDLmisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwNTI0MTAxNjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTA2NjAzODlhMmI3Yzk1YzU2NjI0MmExMjYyNzY3ZWJhMzNiZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsozul1Wnp7EZf1338Kzbeso4Q3CG
1sje0cpC99Jw5g2OmLep8e2CjO1SHvRBr8sxekZqmMaEsZ+ptvf9m4NNryOKsHVS
/tib3/iD08rO6ZSqMw5673LiMGaNNZ5MG+gZoAay4rdJUp2cWRVxlvEsaMwa9Ydx
Apx+MpIig/TbWMm0Q44sN6Xvsy7gY4fdiNOdsP3skDa2YJZg4uvnw0/XYm6YZT+G
xJtPgeIuHYqHkVzstKiMbsgkx26JhhtUosp82o0bvbGEUGjVlcVYxIOL41mrkT66
+vgRw5zihwOcNaNpmqK4pXejCdVp2OQCvYVHGnpD2ggapS9GyRYTFCHG+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGEGYDiaK3yVxWYkKhJidn66M70fMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvWVFaZ09Kb3JmSlhGWmlRcUVtSjJmcm96dlI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHw8AAwQB
ufF6AwQCwh9oMA0GCSqGSIb3DQEBCwUAA4IBAQAwkDDFtdTu9rteNpFh8na2Cggc
7XJLvLbbQwvE1Fnq6r9EKim0DF0TcGmVdEmDz680jE5jMiJED1GMJDtwPHPAKv2i
NYd/iJU0bBhtmOS1vHnMsnTfT+cwEGP4ms9xznXuuqp96uoIwfb2b9f1/pRyE/es
8cIqJXyoZeoUtboPS4aHZAQU6AN2T5aJsv27uYypp18gZDuwFXcM5UGVrSOTcC5d
1/Z2u/qPXt1sF8Zoc3skmQEkcbtocCxR550BFKNYuX2OZxzxPbzDkf88bAFupyOZ
yTsiw9gOFO6z4u8i2VfUb7ltKuSpO+d1AIa1Y6vhXudlQdJrUjlXuCS2nRJB
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:29 2025 by rpki-client