Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Sp_JBYKloCNABsAWGXMaOA4Bfno.roa
File: Sp_JBYKloCNABsAWGXMaOA4Bfno.roa (raw, json)
Hash identifier: D77S7C6d6ekMaqc4v/riIkVZQBH+H7IO1EVl1yi2B28=
Subject key identifier: 4A:9F:C9:05:82:A5:A0:23:40:06:C0:16:19:73:1A:38:0E:01:7E:7A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019740D9B27477C16715FB69714D78F6C7AD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Sp_JBYKloCNABsAWGXMaOA4Bfno.roa
Signing time: Thu 05 Jun 2025 16:08:18 +0000
ROA not before: Thu 05 Jun 2025 16:08:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:d9:b2:74:77:c1:67:15:fb:69:71:4d:78:f6:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 5 16:08:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9fc90582a5a0234006c01619731a380e017e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:64:bc:59:8e:e6:0c:67:74:e0:98:57:c3:
25:07:15:c7:d1:ec:86:6a:34:56:44:5b:86:56:3a:
9c:6c:d2:6a:27:84:05:cd:9c:04:7b:1b:0a:85:6d:
3a:eb:cb:15:d2:22:c4:f5:7f:03:1e:e6:00:c0:d2:
b7:d8:a9:cf:f2:08:1e:f6:e9:41:1a:4b:95:1f:b6:
01:b0:f1:b9:3a:48:67:f9:ba:a4:be:df:89:03:72:
14:95:6c:3c:82:0c:23:9f:bb:61:4e:a3:9a:64:b2:
88:8d:dd:03:c9:b5:7d:a3:3e:57:e0:96:89:ee:1b:
ee:4c:e6:0a:5a:28:1d:4b:e1:59:fa:4f:6a:d1:18:
72:bf:06:54:64:47:63:8c:7d:f1:e2:52:e7:41:99:
d6:4f:35:5a:08:db:59:9c:47:55:ff:39:fc:6a:37:
ca:a6:cb:0f:9a:64:e2:7b:88:57:52:50:06:99:ff:
00:6e:fb:98:23:6b:76:f6:f1:55:8f:d8:e2:9b:85:
9c:41:8c:e8:2e:09:72:6b:d9:e5:e7:d9:79:58:d1:
c5:b2:ad:33:36:7c:eb:4c:82:2d:40:78:05:d5:db:
e6:71:b1:e9:81:a2:c3:fb:82:c5:64:80:6a:cb:e8:
28:16:27:8e:39:e3:10:26:f1:32:a6:7a:d8:5b:22:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:C9:05:82:A5:A0:23:40:06:C0:16:19:73:1A:38:0E:01:7E:7A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Sp_JBYKloCNABsAWGXMaOA4Bfno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
82.152.55.0/24
82.163.0.0/24
82.163.10.0/23
89.213.226.0/24
109.176.30.0/24
109.176.208.0/24
109.176.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d5:99:bb:9a:61:94:a9:79:97:f6:30:89:68:ac:9d:da:0a:
45:4d:aa:30:bc:cb:5d:e2:c5:33:af:ff:0c:f8:b5:1e:2f:a6:
33:95:e7:fe:3f:7f:7b:0f:e1:29:43:8a:37:27:34:93:cc:8b:
64:0e:c5:0f:54:a3:51:91:28:02:60:a6:ca:9a:48:39:ee:53:
09:c9:99:84:3c:29:04:a8:55:83:55:01:5b:f2:3a:c6:fa:c1:
7a:8b:f5:ee:53:33:67:7c:f4:39:2a:e3:d6:22:c8:7e:79:35:
66:b4:2d:41:71:e6:d5:64:01:15:67:aa:27:37:36:f9:0a:48:
cb:e9:47:81:e5:16:58:6c:a5:19:ac:6d:7e:bc:2a:28:c2:a3:
9f:8f:e8:78:82:b2:d0:78:1f:f0:9f:cb:56:b3:28:9d:c1:1b:
5d:75:87:f0:b0:b4:ff:7c:0e:a9:b7:3c:ef:33:e2:72:ac:f9:
d8:d6:7d:5e:75:29:b5:e5:26:d3:7c:d8:04:70:c2:3d:28:0d:
a0:11:52:f6:d8:1e:20:27:76:42:de:3e:8e:5e:0f:d8:7b:db:
49:44:10:06:b5:b9:31:f9:14:e6:f4:cc:35:fc:b8:3f:34:fa:
2c:2f:6e:aa:ca:ab:f0:30:8f:81:70:d2:91:31:f6:e0:b2:1b:
d6:f9:14:81
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZdA2bJ0d8FnFftpcU149setMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNjA1MTYwODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTlmYzkwNTgyYTVhMDIzNDAwNmMwMTYxOTczMWEzODBlMDE3ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00BkvFmO5gxndOCYV8MlBxXH0eyG
ajRWRFuGVjqcbNJqJ4QFzZwEexsKhW0668sV0iLE9X8DHuYAwNK32KnP8gge9ulB
GkuVH7YBsPG5Okhn+bqkvt+JA3IUlWw8ggwjn7thTqOaZLKIjd0DybV9oz5X4JaJ
7hvuTOYKWigdS+FZ+k9q0RhyvwZUZEdjjH3x4lLnQZnWTzVaCNtZnEdV/zn8ajfK
pssPmmTie4hXUlAGmf8AbvuYI2t29vFVj9jim4WcQYzoLglya9nl59l5WNHFsq0z
NnzrTIItQHgF1dvmcbHpgaLD+4LFZIBqy+goFieOOeMQJvEypnrYWyICRwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFEqfyQWCpaAjQAbAFhlzGjgOAX56MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvU3BfSkJZS2xvQ05BQnNBV0dYTWFPQTRCZm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBT2OWAwQA
Upg3AwQAUqMAAwQBUqMKAwQAWdXiAwQAbbAeAwQAbbDQAwQAbbD8MA0GCSqGSIb3
DQEBCwUAA4IBAQCj1Zm7mmGUqXmX9jCJaKyd2gpFTaowvMtd4sUzr/8M+LUeL6Yz
lef+P397D+EpQ4o3JzSTzItkDsUPVKNRkSgCYKbKmkg57lMJyZmEPCkEqFWDVQFb
8jrG+sF6i/XuUzNnfPQ5KuPWIsh+eTVmtC1BcebVZAEVZ6onNzb5CkjL6UeB5RZY
bKUZrG1+vCoowqOfj+h4grLQeB/wn8tWsyidwRtddYfwsLT/fA6ptzzvM+JyrPnY
1n1edSm15SbTfNgEcMI9KA2gEVL22B4gJ3ZC3j6OXg/Ye9tJRBAGtbkx+RTm9Mw1
/Lg/NPosL26qyqvwMI+BcNKRMfbgshvW+RSB
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:27:07 2025 by rpki-client