Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Oint4g2hhRtsC5mHIzKUOJ5oiBM.roa
File: Oint4g2hhRtsC5mHIzKUOJ5oiBM.roa (raw, json)
Hash identifier: KCvkTwfQTcMig4mohwOagHkopz8OYr+/nZAouI12HTc=
Subject key identifier: 3A:29:ED:E2:0D:A1:85:1B:6C:0B:99:87:23:32:94:38:9E:68:88:13
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196C55B810E0B66D374BE0E334FBE388CFA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Oint4g2hhRtsC5mHIzKUOJ5oiBM.roa
Signing time: Mon 12 May 2025 16:37:10 +0000
ROA not before: Mon 12 May 2025 16:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201211
IP address blocks: 45.95.31.0/24 maxlen: 24
80.242.53.0/24 maxlen: 24
95.130.224.0/24 maxlen: 24
185.19.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:5b:81:0e:0b:66:d3:74:be:0e:33:4f:be:38:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 12 16:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a29ede20da1851b6c0b9987233294389e688813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:f5:a6:b5:67:ad:ec:f4:ad:9c:e7:67:ef:
c2:fd:58:81:a1:fe:d8:34:ce:71:f2:47:1b:5e:a5:
26:c8:d7:dd:6d:ef:98:5b:9d:2b:1e:68:29:4b:dd:
73:71:e9:2d:02:41:24:cd:7a:8f:67:ac:33:49:32:
5b:90:de:04:68:48:a0:9c:95:60:65:c0:b0:2f:e6:
0d:44:b0:55:16:93:2b:f2:28:1c:28:c0:a2:88:43:
ba:fd:db:e7:ed:9d:13:e2:b1:b0:84:77:09:c0:94:
52:2a:cb:c4:92:c4:dc:9a:b7:79:41:82:98:05:0d:
27:ac:f8:41:d4:28:c7:2f:dd:05:85:51:0c:b4:f4:
21:60:b8:d7:6c:4c:1e:3a:5b:c0:38:3e:67:a9:f2:
20:6c:a6:48:cb:e0:54:6c:35:57:cd:59:0b:a6:1a:
a5:e7:82:fc:ee:cd:cb:dc:d7:f7:53:45:47:ea:e2:
58:4c:cb:38:10:e3:a4:92:88:96:21:5d:c6:d7:f9:
1f:8f:1a:04:76:bb:87:33:aa:26:07:3d:3d:44:f2:
ec:2e:0e:d6:2d:cf:df:f1:8b:e1:2b:4c:34:6f:fd:
47:6c:75:57:20:5d:86:69:17:a8:17:48:26:0b:a4:
7e:70:38:8a:10:3d:be:4c:86:db:38:df:d9:70:60:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:ED:E2:0D:A1:85:1B:6C:0B:99:87:23:32:94:38:9E:68:88:13
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Oint4g2hhRtsC5mHIzKUOJ5oiBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.31.0/24
80.242.53.0/24
95.130.224.0/24
185.19.202.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ad:1c:eb:21:a5:b1:85:af:f3:26:7b:bd:39:e6:a1:d1:64:
2f:1a:75:6e:22:c4:4a:ea:e9:ac:ce:c0:d3:09:62:4e:58:2b:
41:b8:83:3b:a0:6a:af:95:d5:2f:63:3d:cf:80:86:c2:73:34:
88:36:ee:74:84:19:f5:9c:5b:bc:c0:4c:0a:90:12:85:84:ec:
12:25:03:fa:a8:e6:37:e5:1c:c4:af:a1:0e:f3:21:f5:da:40:
04:71:34:8a:d5:73:b7:33:5d:9f:ac:e9:21:7e:cd:3c:9e:cf:
db:76:e7:ff:7c:1c:b3:4e:35:29:3c:3e:3f:77:16:08:7d:f0:
3a:90:77:bf:6c:59:46:ec:21:39:17:a7:79:c7:89:80:41:a8:
5b:84:19:cc:01:fc:46:c0:a1:4b:35:5b:09:90:70:93:c0:05:
02:5d:fb:2a:cb:9a:50:7d:39:73:7f:8c:0e:75:4c:19:11:ee:
e3:17:08:27:25:43:09:d3:da:6e:48:52:bc:59:6a:16:4e:43:
c3:45:c9:cf:e2:cc:56:56:c7:4a:90:67:96:2d:09:3f:7f:09:
b0:76:a5:68:c4:83:00:8a:7a:ec:db:e7:2c:98:d7:d5:7e:bc:
cb:bd:c2:d5:07:75:8b:dc:7f:cc:7b:01:c6:6f:72:4c:19:2a:
b2:4f:7a:41
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZbFW4EOC2bTdL4OM0++OIz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNTEyMTYzNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTI5ZWRlMjBkYTE4NTFiNmMwYjk5ODcyMzMyOTQzODllNjg4ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib31prVnrez0rZznZ+/C/ViBof7Y
NM5x8kcbXqUmyNfdbe+YW50rHmgpS91zcektAkEkzXqPZ6wzSTJbkN4EaEignJVg
ZcCwL+YNRLBVFpMr8igcKMCiiEO6/dvn7Z0T4rGwhHcJwJRSKsvEksTcmrd5QYKY
BQ0nrPhB1CjHL90FhVEMtPQhYLjXbEweOlvAOD5nqfIgbKZIy+BUbDVXzVkLphql
54L87s3L3Nf3U0VH6uJYTMs4EOOkkoiWIV3G1/kfjxoEdruHM6omBz09RPLsLg7W
Lc/f8YvhK0w0b/1HbHVXIF2GaReoF0gmC6R+cDiKED2+TIbbON/ZcGCbvQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDop7eINoYUbbAuZhyMylDieaIgTMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvT2ludDRnMmhoUnRzQzVtSEl6S1VPSjVvaUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALV8fAwQA
UPI1AwQAX4LgAwQAuRPKMA0GCSqGSIb3DQEBCwUAA4IBAQAwrRzrIaWxha/zJnu9
Oeah0WQvGnVuIsRK6umszsDTCWJOWCtBuIM7oGqvldUvYz3PgIbCczSINu50hBn1
nFu8wEwKkBKFhOwSJQP6qOY35RzEr6EO8yH12kAEcTSK1XO3M12frOkhfs08ns/b
duf/fByzTjUpPD4/dxYIffA6kHe/bFlG7CE5F6d5x4mAQahbhBnMAfxGwKFLNVsJ
kHCTwAUCXfsqy5pQfTlzf4wOdUwZEe7jFwgnJUMJ09puSFK8WWoWTkPDRcnP4sxW
VsdKkGeWLQk/fwmwdqVoxIMAinrs2+csmNfVfrzLvcLVB3WL3H/MewHGb3JMGSqy
T3pB
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:16:19 2025 by rpki-client