Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa
File: 3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa (raw, json)
Hash identifier: 0Qub+blZcyz/QgTRuTxgkxRc1Gc2PwuMNSOrgkAIbcQ=
Subject key identifier: DC:93:04:0E:D9:EE:03:AB:FC:28:A7:F8:15:50:B1:81:B2:B8:A0:DE
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0196C0410C58F6435BCAFA3286DF616ACB63
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa
Signing time: Sun 11 May 2025 16:50:10 +0000
ROA not before: Sun 11 May 2025 16:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 194.238.44.0/22 maxlen: 24
194.238.72.0/22 maxlen: 24
194.238.80.0/22 maxlen: 24
194.238.84.0/22 maxlen: 24
194.238.88.0/22 maxlen: 24
194.238.92.0/22 maxlen: 24
213.18.192.0/22 maxlen: 24
213.18.216.0/22 maxlen: 24
217.181.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:41:0c:58:f6:43:5b:ca:fa:32:86:df:61:6a:cb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: May 11 16:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc93040ed9ee03abfc28a7f81550b181b2b8a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:27:6c:ec:41:75:7e:cf:af:0e:9f:52:23:
37:25:21:a6:b2:bc:0f:ba:b9:1b:e4:60:a7:d2:88:
80:e5:be:51:d8:ca:3b:60:bf:ef:20:b2:8b:e0:bf:
13:0b:41:5e:f7:17:f4:85:d6:10:de:8e:95:35:f1:
21:4e:f0:c7:57:3e:98:43:24:ae:2d:f6:ec:21:b6:
3f:07:05:0c:47:45:f0:8b:dc:9a:a4:f6:38:aa:e7:
8d:12:17:95:f2:f3:60:f8:c8:47:ea:1b:b9:95:4d:
f2:e9:8a:2a:5b:c8:df:f3:33:a0:eb:41:5b:d4:8c:
1e:a3:c2:6f:35:31:1c:00:e6:61:a5:69:ad:65:54:
8a:74:b4:9b:e4:4d:11:f8:1a:7c:48:98:08:1d:c8:
b6:f7:b4:be:09:4b:26:45:a5:1b:0e:cc:38:c4:7e:
ae:14:d3:c6:74:16:51:e0:14:35:b2:49:6c:5f:2d:
86:f7:21:9e:35:53:83:85:d9:fe:be:6a:7e:21:49:
bf:c7:26:a4:e6:4a:04:25:fa:3a:34:3c:bd:0b:d0:
b7:fe:e0:ff:6c:0f:79:d2:d3:5f:d9:c5:c3:1d:3e:
6e:02:50:0b:53:41:89:13:3e:78:c8:1e:77:8d:7f:
7d:6d:43:35:95:23:59:97:ca:55:38:51:fd:e9:63:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:04:0E:D9:EE:03:AB:FC:28:A7:F8:15:50:B1:81:B2:B8:A0:DE
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.44.0/22
194.238.72.0/22
194.238.80.0/20
213.18.192.0/22
213.18.216.0/22
217.181.88.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:05:bb:5b:0e:88:b9:00:6c:c8:c7:1b:14:0e:11:fd:c8:5d:
aa:61:10:02:60:cb:a4:3e:61:eb:26:27:c9:fe:b0:65:69:e4:
76:90:8a:20:3c:3e:af:08:cf:58:c7:94:a3:57:8f:f2:da:f8:
1a:cf:a6:78:16:59:3c:2a:40:6a:fa:dc:f9:c6:f0:1f:3e:9c:
85:af:9d:e3:0d:59:c6:db:bd:f6:ad:a4:54:a5:82:68:03:48:
f8:73:4f:9c:23:7c:c1:3d:de:8d:89:4d:8e:99:8e:a6:83:82:
61:f9:a8:c7:34:f0:12:3d:4b:c4:90:83:2c:f1:eb:7b:ca:08:
49:1f:d5:d9:5f:df:b6:78:ee:c8:af:fe:e5:2b:5e:d2:85:9a:
ec:b1:2a:80:ba:b4:67:38:46:b8:0d:0b:9f:b8:f0:20:3d:73:
9b:3f:a2:09:4a:87:96:63:e9:16:06:31:69:ac:91:a6:4e:9a:
60:ea:dd:d3:ff:4c:db:d7:fc:2e:4b:37:42:04:b8:67:35:23:
00:ee:d3:cf:25:9e:b9:69:4d:f1:79:68:d8:66:4d:ae:29:9c:
1b:8a:1b:5c:bb:16:43:7b:25:fc:be:6e:ca:90:c7:6d:16:8e:
39:c6:7e:2c:33:05:17:63:da:95:db:84:d1:9b:b5:af:a2:d4:
ce:5a:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:33:46 2025 by rpki-client