Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa
File: PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa (raw, json)
Hash identifier: 8P5RiewFjkqd/eRXG3pkKovd5qsr2E75hTvmlDKbDK4=
Subject key identifier: 3E:E2:6D:13:9F:CA:5A:F2:F3:C0:A8:3E:32:0B:FC:9C:38:99:04:D8
Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial: 0195B80E25DE2B1DC21386AB20928D192A0E
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa
Signing time: Fri 21 Mar 2025 09:34:49 +0000
ROA not before: Fri 21 Mar 2025 09:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.115.88.0/24 maxlen: 24
185.115.89.0/24 maxlen: 24
185.115.90.0/24 maxlen: 24
185.115.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:0e:25:de:2b:1d:c2:13:86:ab:20:92:8d:19:2a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
Validity
Not Before: Mar 21 09:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ee26d139fca5af2f3c0a83e320bfc9c389904d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:38:e1:6e:8f:a5:db:eb:8b:90:a9:7e:fb:
4b:d0:1f:7e:86:a4:af:6b:19:85:e5:b0:b7:82:18:
03:38:bc:b0:2c:a2:57:2e:48:86:84:16:eb:74:be:
df:13:78:62:b5:6d:50:59:80:70:a7:3f:09:b7:de:
71:3d:5e:2a:b5:e8:ef:be:c3:db:8b:21:ab:7f:09:
31:f8:a7:43:8f:3b:ad:de:3c:4e:45:b9:0b:2b:75:
33:f0:0e:50:bc:07:0e:07:20:dd:8a:eb:3e:ee:c5:
bd:e2:93:6b:ec:6a:83:67:b8:52:04:14:d4:ff:63:
74:42:cc:71:4c:9d:76:01:f6:3b:6e:00:54:79:8d:
f8:fa:a0:28:6a:67:32:6c:31:04:f4:e9:8b:ed:f2:
9f:87:1b:81:c6:ea:a3:c3:f3:d1:33:23:fd:43:2b:
d3:1a:0a:ba:c0:0f:69:2c:29:d9:83:4c:a0:a3:cb:
67:2b:4b:95:67:6e:a7:93:5c:22:0a:16:57:92:21:
44:b5:30:01:53:b5:eb:67:3a:c7:74:4e:0a:89:58:
09:f5:97:0a:16:41:ca:9e:15:ba:e9:00:1b:0e:79:
33:fd:46:52:1e:51:0d:9a:4e:27:cc:6b:10:f7:9c:
16:fb:c9:a8:55:f5:55:a7:ac:8a:46:17:79:7a:7b:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:6D:13:9F:CA:5A:F2:F3:C0:A8:3E:32:0B:FC:9C:38:99:04:D8
X509v3 Authority Key Identifier:
keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/22
Signature Algorithm: sha256WithRSAEncryption
92:93:37:59:e0:9b:41:76:78:20:0b:bf:0d:68:ba:02:cb:23:
a4:05:e5:0b:9e:e3:64:74:85:72:b7:1c:f4:0a:fe:93:94:5d:
1d:ab:87:e4:92:87:50:d3:ab:e6:0e:84:e3:99:c2:d3:93:1f:
b5:b3:6a:2e:90:1d:0f:29:9e:7d:c2:e0:30:72:68:d8:27:a3:
87:24:74:73:37:3a:ac:3c:a1:53:c0:ca:1b:af:50:74:2a:5a:
ab:4c:82:16:d5:4e:52:bd:f7:c6:5e:2c:fe:2e:0e:50:03:db:
be:b6:f2:75:fd:68:33:6d:f3:59:a5:fe:b0:70:6e:04:b8:c5:
a6:02:f9:7b:24:ce:13:18:31:03:d1:80:ed:fb:0e:b5:79:6b:
ee:a6:78:3a:b8:a3:4c:23:ae:e5:ae:24:e5:0d:64:b1:4f:2d:
29:b7:60:d0:1f:18:49:12:e7:ef:bd:e3:16:c5:cf:5f:a1:91:
4a:6c:f5:9d:30:70:9c:a6:38:b4:54:86:f9:bb:cb:9c:88:5d:
d0:d7:6a:e6:62:2a:f3:b8:37:62:f3:18:f0:5a:d8:b8:cf:5f:
f3:60:d3:52:ff:7b:a4:5d:fe:a5:56:4f:23:d6:3a:38:06:83:
b5:06:28:68:cc:18:5a:dc:5b:b1:a9:62:4c:9c:f5:7d:ff:cf:
46:ee:be:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZW4DiXeKx3CE4arIJKNGSoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5
NDg2MjcwHhcNMjUwMzIxMDkzNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWUyNmQxMzlmY2E1YWYyZjNjMGE4M2UzMjBiZmM5YzM4OTkwNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxog44W6Ppdvri5CpfvtL0B9+hqSv
axmF5bC3ghgDOLywLKJXLkiGhBbrdL7fE3hitW1QWYBwpz8Jt95xPV4qtejvvsPb
iyGrfwkx+KdDjzut3jxORbkLK3Uz8A5QvAcOByDdius+7sW94pNr7GqDZ7hSBBTU
/2N0QsxxTJ12AfY7bgBUeY34+qAoamcybDEE9OmL7fKfhxuBxuqjw/PRMyP9QyvT
Ggq6wA9pLCnZg0ygo8tnK0uVZ26nk1wiChZXkiFEtTABU7XrZzrHdE4KiVgJ9ZcK
FkHKnhW66QAbDnkz/UZSHlENmk4nzGsQ95wW+8moVfVVp6yKRhd5entDcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7ibROfylry88CoPjIL/Jw4mQTYMB8GA1UdIwQY
MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt
NTkzM2EwOWY3MmQxLzEvUHVKdEU1X0tXdkx6d0tnLU1ndjhuRGlaQk5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx
LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXNYMA0G
CSqGSIb3DQEBCwUAA4IBAQCSkzdZ4JtBdnggC78NaLoCyyOkBeULnuNkdIVytxz0
Cv6TlF0dq4fkkodQ06vmDoTjmcLTkx+1s2oukB0PKZ59wuAwcmjYJ6OHJHRzNzqs
PKFTwMobr1B0KlqrTIIW1U5SvffGXiz+Lg5QA9u+tvJ1/WgzbfNZpf6wcG4EuMWm
Avl7JM4TGDED0YDt+w61eWvupng6uKNMI67lriTlDWSxTy0pt2DQHxhJEufvveMW
xc9foZFKbPWdMHCcpji0VIb5u8uciF3Q12rmYirzuDdi8xjwWti4z1/zYNNS/3uk
Xf6lVk8j1jo4BoO1BihozBha3FuxqWJMnPV9/89G7r5U
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:45 2025 by rpki-client